Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/mmdGQw9TScWNZUmKHnjKm1jStso.roa
File: mmdGQw9TScWNZUmKHnjKm1jStso.roa (raw, json)
Hash identifier: oK399Jf5TALcWioeRCl9asNQMEDwAV7GkKDKmP7aXtI=
Subject key identifier: 9A:67:46:43:0F:53:49:C5:8D:65:49:8A:1E:78:CA:9B:58:D2:B6:CA
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 35
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/mmdGQw9TScWNZUmKHnjKm1jStso.roa
Signing time: Wed 20 Apr 2022 09:27:34 +0000
ROA not before: Wed 20 Apr 2022 09:27:34 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.88.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:27:34 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=9A6746430F5349C58D65498A1E78CA9B58D2B6CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:58:c7:40:65:70:9f:88:9d:e0:07:2e:da:
16:69:0f:88:35:73:2b:c0:42:c3:91:d1:2d:17:c0:
cc:27:30:8c:ac:73:ce:33:2c:89:c9:55:25:2d:54:
17:4f:e0:61:55:a5:25:00:b9:c2:2b:1f:e4:6f:c1:
fb:3c:f0:37:7d:1d:c5:e4:56:6e:7c:b2:f6:28:42:
31:a1:8a:b3:f4:3e:db:94:bb:b6:f8:06:7f:c4:d0:
b2:69:75:c7:35:d1:59:14:ec:a6:89:8d:05:4c:87:
d7:7a:df:d1:28:4e:75:5a:8c:c6:3a:08:18:45:6f:
06:9b:26:e8:02:64:4c:b3:1a:c3:e4:10:be:43:17:
81:07:8e:7c:ef:2c:fb:f0:8a:39:05:11:2c:97:99:
28:6e:a3:d4:d7:28:f2:03:90:2b:00:86:f0:6b:3d:
af:88:8e:5b:fe:1c:bc:85:35:a2:f5:c3:5a:6f:e9:
27:db:5f:ba:48:d2:ce:fd:79:98:9a:2d:10:a4:91:
aa:ba:66:ca:86:54:d3:10:d9:1c:19:d9:46:aa:42:
90:65:f9:ff:5c:2d:77:52:d4:bf:5d:21:f8:4f:8a:
d5:f0:c0:de:60:f2:c7:35:f5:32:d7:2c:c8:21:32:
36:bc:35:89:41:2f:d2:33:c0:88:15:31:72:9a:78:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:67:46:43:0F:53:49:C5:8D:65:49:8A:1E:78:CA:9B:58:D2:B6:CA
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/mmdGQw9TScWNZUmKHnjKm1jStso.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.88.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:f4:63:8e:cb:cf:c8:46:59:ce:9f:7f:ca:ec:7d:7b:67:f7:
f9:99:1b:92:b0:ea:d5:43:c6:e3:a7:5c:3f:97:a0:77:ec:78:
da:99:5d:2e:a3:64:ad:36:30:85:ba:a3:98:73:35:da:2f:4a:
51:44:dc:f5:82:2f:76:0a:61:fa:6c:92:5e:d2:dc:a9:97:40:
22:bb:e1:e9:f6:7a:ba:07:bf:77:80:0b:78:86:78:0b:b6:6b:
1b:af:d0:94:11:fb:c8:00:61:9f:fe:58:d3:8e:bb:4a:6a:d8:
fd:33:9f:ff:24:0c:7b:5d:7d:81:e0:c9:ab:c2:59:d7:b0:1a:
38:7e:0f:25:b3:32:24:62:dc:59:e1:5e:ca:61:fa:ed:09:8a:
3d:44:a1:c3:c9:8e:24:33:15:01:95:12:f5:4b:35:e4:8e:09:
52:13:38:d6:92:ed:ff:e8:59:2d:71:4e:d2:82:9a:ba:12:ab:
f1:73:12:8c:06:72:f3:7a:a7:ee:f6:0c:fe:4e:02:e6:25:c8:
b6:7c:ab:da:fa:89:4a:33:99:bc:c9:46:cb:fe:0a:10:52:7d:
34:a5:91:d8:32:43:7c:9f:6a:65:11:52:98:94:00:1b:17:fd:
10:49:74:76:ef:65:26:cf:ea:73:9c:cd:cf:78:3b:3b:d0:2b:
e2:10:c9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:18 2023 by rpki-client on console-fra.rpki-client.org