Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/xgTMvxaXHHs36M9A88nFtbGsSTA.roa
File: xgTMvxaXHHs36M9A88nFtbGsSTA.roa (raw, json)
Hash identifier: 2Q7tezSXt+772RLH1mZSpZLOZXRsYw7gkWwKaIRijSg=
Subject key identifier: C6:04:CC:BF:16:97:1C:7B:37:E8:CF:40:F3:C9:C5:B5:B1:AC:49:30
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 4F
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/xgTMvxaXHHs36M9A88nFtbGsSTA.roa
Signing time: Wed 20 Apr 2022 09:42:27 +0000
ROA not before: Wed 20 Apr 2022 09:42:27 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.217.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:42:27 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=C604CCBF16971C7B37E8CF40F3C9C5B5B1AC4930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:9f:05:9b:ce:c4:6b:a6:23:5f:73:94:e3:
dc:6f:4f:ed:3d:e7:2d:d4:07:ee:1c:fc:2c:bb:3f:
fc:76:5c:37:9e:f8:88:ab:06:4c:fc:30:55:f2:1d:
40:3f:ef:bd:25:f7:d2:14:8f:5e:3e:3d:f1:3c:05:
03:5c:6e:d2:07:d9:ff:18:e7:15:d5:54:a8:eb:a2:
24:58:d3:c9:1d:5b:d8:46:44:1a:1f:66:35:80:bb:
b0:f2:92:82:f7:fc:fb:81:d1:29:58:44:94:b9:5b:
7d:80:1b:51:55:29:31:bf:99:40:0d:82:0d:a3:ec:
66:fe:f8:63:d9:a6:c5:30:3b:8e:69:f2:b3:62:28:
72:cf:e3:a5:9f:86:8b:5c:e6:00:a1:28:4b:b5:7d:
d9:12:6c:60:55:91:67:42:8e:4b:52:24:ad:a6:92:
0d:c2:9c:25:0c:a7:75:e0:89:77:43:c8:84:8a:e3:
58:6c:1b:08:15:28:c5:e3:7e:ce:94:aa:e2:f4:28:
20:08:b4:69:15:db:05:29:8e:7a:fa:d9:e6:83:a7:
b5:08:92:dc:30:87:c5:1e:bf:e1:a2:e6:50:c0:43:
e6:c7:1c:7b:84:d0:fa:3d:0f:09:54:f1:b4:49:97:
88:f0:ca:a7:63:e5:5f:58:78:6a:f1:0c:3f:87:04:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:04:CC:BF:16:97:1C:7B:37:E8:CF:40:F3:C9:C5:B5:B1:AC:49:30
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/xgTMvxaXHHs36M9A88nFtbGsSTA.roa
sbgp-ipAddrBlock: critical
IPv4:
202.217.128.0/17
Signature Algorithm: sha256WithRSAEncryption
23:80:66:8d:5e:75:c2:01:3d:05:ba:ad:ce:49:e7:29:65:77:
6e:86:6c:1e:92:1d:8b:20:d9:06:ff:6f:45:d2:22:3f:d2:08:
08:b8:02:4f:55:04:79:a6:a5:3e:5e:8c:a5:44:5f:99:8b:83:
b4:b9:5d:3d:43:a0:b1:f3:4e:db:58:e7:f9:d2:14:04:85:c5:
ca:84:fe:bc:2c:ba:8d:e7:9d:01:98:da:2d:83:80:fb:d4:98:
e7:54:d9:75:17:dc:f3:73:c9:e2:10:bb:59:e7:2d:b0:79:81:
43:d1:65:71:4f:8d:d1:8f:b6:76:dd:99:90:4a:f8:9b:4f:29:
5d:7a:c2:76:cb:8f:12:e3:26:ed:70:13:55:aa:50:dc:fe:f1:
32:d8:fd:68:05:ea:21:64:de:38:2c:18:3a:5e:f7:df:b9:62:
b5:e1:87:db:9e:78:1f:a8:a3:c5:f7:97:5e:9f:39:e8:42:d2:
f6:e5:d3:23:e2:c1:dc:0a:f0:4e:b7:27:48:46:b1:d1:3e:35:
56:4e:9d:b6:aa:14:ad:0f:b1:58:2e:d4:50:38:19:69:81:80:
13:e1:54:4f:9d:44:9f:9e:73:5b:d3:4d:90:25:46:22:75:d8:
1a:5a:07:c1:51:2e:6b:62:fd:b3:55:a0:da:b0:94:7b:15:bc:
98:b7:57:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:18 2023 by rpki-client on console-fra.rpki-client.org