Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/kvLpmAhgJx5990DCwyrIXPuuZD8.roa
File: kvLpmAhgJx5990DCwyrIXPuuZD8.roa (raw, json)
Hash identifier: NJQwwLB/QhRQ4fLeFrXfJJKM4+DppcqQU5xmTA1Wvo4=
Subject key identifier: 92:F2:E9:98:08:60:27:1E:7D:F7:40:C2:C3:2A:C8:5C:FB:AE:64:3F
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 48
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/kvLpmAhgJx5990DCwyrIXPuuZD8.roa
Signing time: Wed 20 Apr 2022 09:37:41 +0000
ROA not before: Wed 20 Apr 2022 09:37:41 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:37:41 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=92F2E9980860271E7DF740C2C32AC85CFBAE643F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:30:ec:ee:ea:19:f6:27:c3:d4:69:aa:02:
0c:13:13:40:ad:a9:aa:1c:f7:36:9b:5d:1d:3d:2c:
da:c4:41:5c:70:4e:57:21:a3:31:08:db:8c:b6:42:
3b:f0:2e:19:c4:26:e9:71:e4:dd:eb:b2:78:72:4d:
5a:e2:41:a8:1e:33:2a:58:63:b2:e7:65:a1:1f:94:
e2:be:57:67:00:8e:d7:08:ff:f7:51:bc:14:a3:2d:
93:23:95:ce:ac:cd:8e:4b:96:45:8a:64:57:4f:bc:
a7:7f:4c:d6:a4:ad:4e:62:87:08:15:3f:9d:5f:e7:
27:fa:f6:e6:c8:dc:10:01:0a:05:b4:c3:3a:14:51:
f1:c5:5a:43:27:3d:93:4d:4c:55:d2:6f:6e:7e:ca:
8e:23:00:44:a1:69:74:3f:b1:8a:45:b2:52:6e:a6:
b0:7a:5c:f2:12:95:34:56:b1:89:e1:a5:4d:bd:11:
bd:41:cf:7c:f5:52:c7:04:b6:bf:d2:6a:bc:01:23:
1a:68:73:8b:1f:c0:7b:7d:61:93:7b:6d:f1:28:6c:
93:44:c5:79:ad:11:24:40:ab:47:f6:aa:e2:c4:77:
ab:f0:69:0e:15:ed:b1:bd:a2:65:3d:71:32:05:3b:
f1:0d:39:3e:41:b0:98:b2:7c:13:3f:de:95:24:8f:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F2:E9:98:08:60:27:1E:7D:F7:40:C2:C3:2A:C8:5C:FB:AE:64:3F
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/kvLpmAhgJx5990DCwyrIXPuuZD8.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.118.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7b:76:07:c4:2b:65:7a:3c:bd:59:4b:69:0e:6c:88:03:78:
17:b3:75:d8:e1:d2:4a:64:d6:68:06:71:60:7c:67:9d:e1:a1:
c5:9c:48:eb:23:15:8b:83:f6:a3:22:80:3f:17:f1:ce:ad:f1:
eb:10:10:ff:37:67:c2:3e:d9:1e:a1:a7:6c:11:31:2d:6d:96:
98:e8:4f:0b:58:a0:b7:27:ea:b5:08:ac:b6:ef:50:d5:b7:40:
74:13:47:31:7b:8e:6c:be:b7:28:a7:c9:f9:94:c2:a1:f1:ce:
23:b0:b2:37:e3:c7:21:97:77:51:4a:85:29:01:76:eb:f5:6f:
38:6b:46:d0:96:51:43:be:14:2e:ac:b1:24:ef:0f:02:20:cf:
27:54:bf:ba:8e:6b:72:ed:cb:91:2f:e6:61:78:77:d1:b8:e2:
90:ab:7d:cb:6c:bf:35:20:12:4b:db:32:d2:41:6b:fe:81:8b:
c4:b2:89:61:d3:d4:2c:d5:97:9a:2d:9b:50:ce:39:33:d1:69:
2e:c1:5e:55:c6:93:99:c8:8d:c0:c1:b0:13:19:27:d3:a9:a5:
73:48:ac:68:62:f2:b7:6c:97:02:e4:e2:80:17:46:69:e8:2e:
51:2c:60:45:30:b0:07:d2:4f:79:11:4c:f0:02:fe:27:93:b2:
07:e5:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:18 2023 by rpki-client on console-fra.rpki-client.org