Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/iQxLcTHUcK-w6Tnf3cjvgkzUmvs.roa
File: iQxLcTHUcK-w6Tnf3cjvgkzUmvs.roa (raw, json)
Hash identifier: fZPDDm8fHhtmTDawNwEjtjl3UEThIga99t4/CYvzxak=
Subject key identifier: 89:0C:4B:71:31:D4:70:AF:B0:E9:39:DF:DD:C8:EF:82:4C:D4:9A:FB
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 4A
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/iQxLcTHUcK-w6Tnf3cjvgkzUmvs.roa
Signing time: Wed 20 Apr 2022 09:37:41 +0000
ROA not before: Wed 20 Apr 2022 09:37:41 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:37:41 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=890C4B7131D470AFB0E939DFDDC8EF824CD49AFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:6d:0f:79:02:df:0f:ba:f8:5b:b9:6d:97:
e2:1d:58:03:a2:2d:4d:01:d4:aa:b9:d9:7f:11:c8:
13:da:99:33:49:07:58:b8:c7:8d:3c:2e:ce:d5:bd:
bc:4d:f6:f0:4a:15:c1:7a:26:bd:ba:1c:5e:09:1f:
6f:13:a8:cb:4f:44:e1:0f:3e:29:1d:6a:1c:f4:74:
d7:02:ac:ee:2c:5e:99:3a:81:e7:d2:24:fa:1f:ed:
69:81:eb:d8:f9:7a:cf:fa:5c:1d:59:fa:8e:8e:3a:
a3:69:95:06:04:8e:97:01:b2:98:e2:9a:05:9c:1c:
5b:d4:54:e4:ce:40:f3:9f:dd:bf:5a:f8:97:5b:da:
36:b1:4c:14:d6:7b:15:94:5b:02:fa:71:90:0f:d8:
10:95:f8:1f:35:87:36:ea:c7:82:0d:74:75:b9:29:
43:52:a3:a9:fb:02:ba:44:32:28:01:aa:83:ea:0b:
ac:7e:36:d3:6f:9c:85:d6:9e:9b:5f:6e:12:ac:06:
73:8d:36:70:05:81:b1:e0:74:b2:e3:45:b5:8f:4b:
db:36:65:9a:0a:84:41:6e:52:e0:fe:6f:5a:83:5c:
de:58:08:d4:d1:b1:a2:6d:3f:bd:7b:13:8c:b8:9f:
2c:82:df:cc:b3:dd:1a:fc:79:64:62:63:b7:b9:ec:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0C:4B:71:31:D4:70:AF:B0:E9:39:DF:DD:C8:EF:82:4C:D4:9A:FB
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/iQxLcTHUcK-w6Tnf3cjvgkzUmvs.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9b:a6:eb:24:c5:8b:a1:71:fa:4f:81:50:65:e5:12:53:7e:
f1:15:d3:ae:a3:52:1b:be:58:85:cb:a6:66:18:b6:10:37:91:
b6:5d:82:06:6c:22:e9:86:46:fd:3c:0a:17:24:95:be:87:c8:
12:8d:49:d1:5a:05:45:a1:a3:c9:1e:9d:55:d5:52:70:df:4f:
c3:ae:b8:53:ce:fa:98:78:11:d4:d3:9b:3c:de:af:88:a7:37:
f6:76:0d:68:fc:35:f0:9a:ba:2a:60:b8:92:a8:33:c7:3a:db:
92:b3:6d:96:91:89:68:da:e6:67:23:1f:2d:a4:c8:86:15:fb:
2e:c9:1e:3f:2c:ee:03:c0:0c:29:c2:e2:7e:5d:68:36:dd:7d:
d0:72:a2:57:c0:02:11:c2:11:10:02:39:c7:65:55:6f:b7:a7:
5f:d3:cf:78:fa:ac:64:b3:d0:44:1f:14:88:e6:66:5b:1c:82:
d1:6c:41:47:4a:e4:b0:8a:15:bf:77:c1:82:cf:aa:f6:b6:5e:
4e:65:f0:8b:33:bd:b4:8d:c0:95:10:fa:3c:81:ce:46:a7:91:
58:4c:04:93:1f:c3:17:b0:c1:55:71:51:a3:96:1e:de:cd:f1:
b4:b1:d8:46:7c:f6:74:d2:f3:1b:c6:c5:be:32:2e:57:09:66:
83:ec:2e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org