Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/VcWaX2tWuEMJVPzVVUXtiu5jjXQ.roa
File: VcWaX2tWuEMJVPzVVUXtiu5jjXQ.roa (raw, json)
Hash identifier: BMDOUR3+REhhV9Dm3eWBdY1iaIvcMos+CJ6mjCEhhP0=
Subject key identifier: 55:C5:9A:5F:6B:56:B8:43:09:54:FC:D5:55:45:ED:8A:EE:63:8D:74
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 34
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/VcWaX2tWuEMJVPzVVUXtiu5jjXQ.roa
Signing time: Wed 20 Apr 2022 09:27:34 +0000
ROA not before: Wed 20 Apr 2022 09:27:34 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:27:34 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=55C59A5F6B56B8430954FCD55545ED8AEE638D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:32:9b:c3:14:4c:b3:01:ef:59:46:f2:97:6c:
8d:7f:74:b1:90:3b:4f:a7:f8:09:b1:7d:a2:83:58:
f5:cf:3f:ea:7a:81:cc:74:47:1b:78:83:7d:39:47:
10:a6:e1:69:f1:cc:f6:85:90:bc:2f:dc:c4:6e:30:
e8:83:31:32:5a:c4:06:2a:83:7c:89:c2:d3:b7:0d:
88:8d:e4:42:9c:2b:2f:93:8e:fa:2c:ed:48:69:42:
1e:72:6c:17:c1:f8:8c:91:97:97:1a:6f:10:98:9d:
35:dc:39:5b:6c:10:e3:67:4d:4c:97:61:cd:66:8c:
19:be:51:df:3f:b3:cc:42:b5:15:24:55:5d:3e:b9:
3b:61:d5:ae:be:ad:9b:1b:6e:5c:2d:8d:50:9f:c7:
8d:2a:67:6d:b2:4d:e8:c7:f4:9a:0d:11:55:5d:d3:
f4:96:2d:36:41:11:5d:38:3f:eb:3c:f7:0a:2e:ae:
27:41:1e:c0:cd:99:af:4d:f5:c0:5d:f6:d7:8c:d7:
f2:bc:61:6d:12:13:9f:9f:17:2d:88:7e:30:51:f6:
f3:0d:8b:e3:eb:b9:ac:e8:e3:c1:c5:a6:4e:9e:26:
74:92:31:cc:f1:a7:74:a4:06:9f:b2:2a:e6:fc:dd:
a8:02:a2:b7:17:cd:77:7b:2d:87:fb:43:ea:21:ca:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C5:9A:5F:6B:56:B8:43:09:54:FC:D5:55:45:ED:8A:EE:63:8D:74
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/VcWaX2tWuEMJVPzVVUXtiu5jjXQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.90.0/24
Signature Algorithm: sha256WithRSAEncryption
92:48:38:21:86:63:9f:1c:7f:7e:74:1c:b6:b1:45:84:9e:87:
14:24:00:21:ba:99:9f:34:74:37:c7:04:26:12:34:df:1c:a8:
92:64:a7:df:b8:95:1c:cd:54:33:df:38:00:9d:53:65:40:d9:
ab:38:93:cd:8f:c7:1e:89:65:ff:cd:a4:18:89:0b:81:9a:cd:
8a:61:38:04:76:aa:7d:72:ae:6e:6b:8f:39:a7:91:c4:9e:b0:
d6:8b:b5:c4:cf:82:b7:0c:4f:79:84:5c:95:f1:a4:47:54:5b:
a2:db:d8:a2:e9:9a:57:2c:02:ac:91:10:18:da:cc:e1:6f:b8:
4e:72:63:3b:ea:86:da:ea:55:5b:8a:f9:4e:c9:9c:59:46:9e:
e2:f8:8b:f0:82:22:7d:85:76:31:5f:1c:63:cf:3d:b9:d3:6f:
cd:2a:b9:6f:cb:75:6a:6b:53:1f:42:90:49:91:78:71:65:6c:
7d:ca:10:d2:97:77:ac:e2:eb:5c:fa:09:4b:82:d9:b8:b8:01:
5d:cd:c2:8d:a7:79:7a:56:1c:03:a1:07:e1:21:13:c7:ca:63:
81:80:e3:bc:a4:e6:4e:2a:0a:36:ec:34:34:10:8a:22:dd:3f:
4b:1e:26:f8:9e:93:91:5b:ec:4b:14:71:b7:0c:c3:e4:52:fc:
2b:40:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org