Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/aDSMUsACnaEkuNycn1EYLS9ubtw.roa
File: aDSMUsACnaEkuNycn1EYLS9ubtw.roa (raw, json)
Hash identifier: OmYt/Snr5aQDBNIYa0PVxmDdvP61hH7KIP9Yr7Y/2vo=
Subject key identifier: 68:34:8C:52:C0:02:9D:A1:24:B8:DC:9C:9F:51:18:2D:2F:6E:6E:DC
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 4E
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/aDSMUsACnaEkuNycn1EYLS9ubtw.roa
Signing time: Wed 20 Apr 2022 09:42:27 +0000
ROA not before: Wed 20 Apr 2022 09:42:27 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.227.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:42:27 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=68348C52C0029DA124B8DC9C9F51182D2F6E6EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:9a:83:e1:1c:94:56:ae:b8:dd:3b:0d:8a:
e1:5c:0a:69:33:17:f6:93:a4:e0:d0:eb:1a:ac:3b:
f7:6e:5d:74:1e:85:59:79:31:c9:af:2c:91:b9:b1:
3e:39:55:62:fe:33:52:2a:14:23:ce:de:ce:2c:06:
68:29:46:10:97:2b:f2:73:08:0f:db:6f:b0:ae:91:
d2:ef:10:f8:7a:03:ae:dc:e3:24:bd:f0:0f:13:bd:
28:9f:95:aa:35:55:e3:d4:ab:b7:6f:2e:48:62:77:
80:c0:2d:66:63:61:cb:8e:a1:5e:81:e0:e1:20:0d:
54:77:da:6e:81:ba:fb:a6:d7:11:30:b5:7e:f5:0d:
61:4e:b4:ec:b5:e3:a5:d3:e3:7e:59:81:e3:bd:06:
5e:45:de:d1:52:b8:dd:f4:f6:f8:8b:c6:90:93:cf:
3a:17:e0:24:6b:30:fc:50:65:5f:6b:ad:00:7b:fa:
85:16:22:b4:f7:96:fd:59:82:43:d1:c1:27:f8:0c:
f9:3a:51:e4:86:89:7e:40:61:20:a9:e8:29:4e:96:
e6:11:8b:73:fc:0d:fa:1b:ff:66:91:c5:ea:7b:bc:
1d:c1:92:50:6b:03:76:9e:2f:db:54:53:c8:7f:18:
d5:82:b0:c5:9c:db:2a:6e:b7:9e:19:74:bc:22:e0:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:34:8C:52:C0:02:9D:A1:24:B8:DC:9C:9F:51:18:2D:2F:6E:6E:DC
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/aDSMUsACnaEkuNycn1EYLS9ubtw.roa
sbgp-ipAddrBlock: critical
IPv4:
202.227.0.0/18
Signature Algorithm: sha256WithRSAEncryption
49:ad:40:8c:fc:1c:07:e1:48:eb:f6:b8:ec:11:97:9c:1e:6d:
6a:e4:88:6c:31:a8:88:18:48:5d:ed:0e:e7:d7:c7:f8:3d:77:
b0:05:0a:74:8c:53:e1:af:eb:f2:ff:44:c1:f3:05:40:ae:5e:
70:aa:6b:ee:47:db:7c:c0:1c:a5:be:3b:d4:b6:a9:61:bc:bb:
2a:ea:3b:fc:50:40:fe:43:b9:79:e6:f0:ed:70:5e:d8:c6:69:
58:62:47:00:c6:54:f3:81:1d:4e:e4:65:d1:b6:ee:07:7b:b7:
01:b3:da:99:91:36:5d:33:6a:8a:7c:b1:56:00:c2:3d:0c:d7:
99:76:a7:7c:cf:19:cc:0b:21:e9:cf:c9:5a:10:19:c6:f3:6d:
71:db:fb:58:ac:6a:84:d8:93:52:fe:83:94:0e:b9:a9:9f:c9:
40:bd:f7:1d:38:43:1e:bd:ba:ea:91:37:a4:f4:95:53:85:47:
72:95:64:de:30:64:80:d1:58:aa:91:21:2b:d3:0e:a4:f5:15:
b7:60:ab:73:04:db:e9:0f:3f:61:e6:ee:a9:42:77:a8:81:dd:
65:07:cd:ef:5a:a2:5b:97:76:ce:5a:b1:b2:f4:d1:80:c4:bf:
e4:53:96:8f:c1:b6:48:d0:28:da:d3:f1:f9:60:44:7f:a0:aa:
be:34:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org