Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/tzkCW63c-xYHc6ZA7ekhGb-nsjc.roa
File: tzkCW63c-xYHc6ZA7ekhGb-nsjc.roa (raw, json)
Hash identifier: yhvHAiU/1LmFX0yt1v5lT4MdlJvLjzMeaNBEPvAhJsw=
Subject key identifier: B7:39:02:5B:AD:DC:FB:16:07:73:A6:40:ED:E9:21:19:BF:A7:B2:37
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 3E
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/tzkCW63c-xYHc6ZA7ekhGb-nsjc.roa
Signing time: Wed 20 Apr 2022 09:32:49 +0000
ROA not before: Wed 20 Apr 2022 09:32:49 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:32:49 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=B739025BADDCFB160773A640EDE92119BFA7B237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:ac:55:fe:48:2b:8d:c9:73:e7:8c:aa:e1:
6e:93:30:aa:81:ea:bc:36:f1:8b:d2:b3:3c:c7:00:
f0:83:1f:86:1d:a6:b5:af:b9:d3:6e:eb:ba:73:76:
89:74:13:dd:b9:20:77:33:32:08:de:c7:73:75:16:
94:f2:26:98:d6:44:90:fe:67:c2:cb:60:df:50:0d:
4b:8b:3e:81:fe:29:b7:7c:3f:7f:25:c0:49:3e:63:
d2:11:25:cb:33:77:ba:79:3c:0b:95:70:d8:a1:8e:
b4:8c:1c:15:08:da:eb:19:0e:37:45:88:e9:66:57:
3f:de:ef:a1:38:e2:ad:3f:f8:5c:7a:d9:92:b0:26:
07:bb:c2:63:57:58:9a:7a:bd:ed:c8:a0:18:57:60:
34:d1:d7:02:66:5a:85:e5:00:48:be:d6:f8:37:62:
e6:6a:55:a1:5f:cb:7b:19:6a:94:6f:f0:bb:b8:55:
80:72:ba:aa:b7:02:6f:38:67:96:f8:e5:88:0d:38:
ea:07:71:46:9e:21:c6:f3:eb:40:8e:01:ba:8e:76:
c7:60:16:0d:b7:36:79:67:6d:e2:ec:69:f1:61:41:
f8:66:e4:e2:58:b8:26:f6:19:e6:50:0f:88:55:4c:
07:4b:22:80:f9:f1:cc:43:4c:99:5a:f5:4a:d0:22:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:39:02:5B:AD:DC:FB:16:07:73:A6:40:ED:E9:21:19:BF:A7:B2:37
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/tzkCW63c-xYHc6ZA7ekhGb-nsjc.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.195.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f5:23:8e:4a:b4:66:37:12:19:31:28:c8:d1:c5:a8:2c:b1:
f1:28:75:e7:7d:43:c6:e2:79:76:c3:03:80:a0:46:e6:e9:07:
6f:a8:be:63:b3:60:96:20:a8:51:b2:db:61:1a:5f:f7:da:f3:
e6:de:2a:ff:a3:0f:ad:3d:fd:2e:72:1f:05:c2:03:a4:8d:54:
ec:91:96:a5:38:0d:e9:a7:11:d6:14:11:7f:82:49:cc:4e:81:
7f:a0:b5:63:69:52:0b:34:63:72:46:2a:df:b5:aa:a5:18:4c:
0c:b5:38:24:91:2a:2a:b7:da:9d:07:fe:a3:19:7b:fe:5f:35:
b9:99:aa:c9:6f:17:c8:6c:5e:2b:08:28:21:f0:af:a1:c0:81:
51:57:93:80:b4:5b:3e:fd:95:04:15:7e:86:11:8b:3e:59:04:
74:50:e7:40:11:92:84:62:3f:2f:b4:f7:c9:d1:86:83:0b:1c:
f2:bd:01:f2:33:d0:68:06:db:fb:72:92:96:52:dd:1f:cf:b9:
79:e5:0a:c7:b9:8b:34:ca:54:23:95:8d:62:75:54:ec:95:1a:
37:33:91:29:d6:57:84:73:19:21:7b:6d:ff:04:95:ba:5e:b2:
d9:7b:e5:e3:91:b0:f9:a9:ab:34:89:5c:c7:dd:f8:04:bd:36:
61:3d:45:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org