Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/w4NjZzwFiKjYX9H1KPmNuDEJ9do.roa
File: w4NjZzwFiKjYX9H1KPmNuDEJ9do.roa (raw, json)
Hash identifier: heGCvLrEgsmkSuwnvREZL9DR+jlV6HFsBsCIVuUgysg=
Subject key identifier: C3:83:63:67:3C:05:88:A8:D8:5F:D1:F5:28:F9:8D:B8:31:09:F5:DA
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 45
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/w4NjZzwFiKjYX9H1KPmNuDEJ9do.roa
Signing time: Wed 20 Apr 2022 09:37:40 +0000
ROA not before: Wed 20 Apr 2022 09:37:40 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:37:40 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=C38363673C0588A8D85FD1F528F98DB83109F5DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:c5:23:19:36:81:b3:73:d1:c8:0c:10:90:
47:0d:e2:97:aa:5f:80:66:cd:ef:2e:56:64:29:97:
d9:3a:81:20:1b:8e:44:3f:8c:77:6e:6c:55:06:f8:
8d:e4:9f:af:b6:10:c6:e1:81:05:2f:bb:17:2a:4c:
f9:3e:82:ba:70:bc:55:0b:22:2a:df:6d:93:cb:61:
4b:f2:04:15:8d:66:3e:f2:a0:da:0e:79:6b:dd:29:
9e:ad:ef:2d:8b:3c:5a:09:79:fe:5c:e6:13:b5:57:
3f:54:e0:eb:78:91:f9:95:31:22:eb:19:b4:a5:97:
10:3c:55:cc:e9:81:38:ff:5e:65:30:22:15:00:3a:
94:b5:fa:8e:8b:2b:90:e0:a5:ba:f1:ab:26:c0:e0:
fb:f2:18:68:be:8f:70:14:04:97:58:f1:1e:a1:6f:
c2:76:1a:fa:dc:62:b1:af:d5:38:07:96:ea:48:36:
b3:ea:bc:df:7c:21:99:88:34:9d:b1:d4:ae:a0:54:
a4:ca:7f:70:5f:33:9a:74:d8:bc:bb:c1:96:26:72:
04:4d:ab:46:51:c5:a4:dc:8d:21:8d:64:b4:02:77:
d1:ea:12:b5:3b:14:b7:07:8f:1b:96:69:9c:99:b8:
94:cd:a5:a3:5b:40:59:16:58:a1:bd:f4:1f:98:3f:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:83:63:67:3C:05:88:A8:D8:5F:D1:F5:28:F9:8D:B8:31:09:F5:DA
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/w4NjZzwFiKjYX9H1KPmNuDEJ9do.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.163.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f4:d0:32:e7:d5:98:49:d3:2e:1c:13:3e:a3:14:70:d6:c8:
32:06:ce:68:a4:ab:8e:21:4a:7b:88:00:9b:da:f1:7a:19:21:
dc:c3:91:23:15:82:61:67:92:26:db:18:4d:cd:75:ed:0d:62:
75:6a:20:a1:69:1f:ff:44:21:b8:92:80:0f:3a:8d:9f:61:8a:
4e:1d:ba:02:44:86:98:cb:cc:0e:db:8b:d6:e0:6c:b6:2c:0c:
31:74:4b:c8:a1:e0:20:b0:5c:a3:ea:a5:02:bf:e2:2e:96:ef:
77:9a:ba:88:06:c3:aa:e9:f8:8f:10:3a:07:c4:90:a3:39:09:
eb:cb:bf:62:6c:2f:9a:e5:8d:54:0c:e0:e4:0d:5b:10:ab:2a:
34:64:91:3d:e3:24:f1:ab:88:ed:84:b9:31:75:96:50:fd:1a:
ab:05:e3:4a:61:a0:9d:2d:f0:84:19:b5:cd:f2:58:e5:9e:83:
d8:d4:12:1e:b4:b3:f7:9d:77:78:5b:79:84:e7:26:b8:85:e4:
e5:f0:9e:96:b3:8b:0f:f8:d5:68:f1:64:66:ff:fb:f7:4a:33:
84:d4:b6:89:eb:74:4a:8c:c4:bf:ff:9b:a5:6f:67:b3:a0:25:
90:54:11:32:6d:ac:61:22:bf:11:13:88:6e:88:d9:5a:3a:89:
f5:3a:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org