Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/3AjeDNkSWNYPcd0ZZD-glzRXhF0.roa
File: 3AjeDNkSWNYPcd0ZZD-glzRXhF0.roa (raw, json)
Hash identifier: Wa3JSPCzGHhQHkCARzR/nmNJWxE7ZeQIMilg9Sc+nXk=
Subject key identifier: DC:08:DE:0C:D9:12:58:D6:0F:71:DD:19:64:3F:A0:97:34:57:84:5D
Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial: 23
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/3AjeDNkSWNYPcd0ZZD-glzRXhF0.roa
Signing time: Tue 25 May 2021 02:47:08 +0000
ROA not before: Tue 25 May 2021 02:47:08 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 37892
IP address blocks: 202.145.26.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Validity
Not Before: May 25 02:47:08 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=DC08DE0CD91258D60F71DD19643FA0973457845D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:ec:b9:31:ef:24:fd:75:8b:f1:0d:67:83:
59:7d:39:05:fd:ef:03:e6:11:41:41:8b:78:98:37:
88:da:39:fb:17:13:31:93:0f:c0:65:d9:96:82:e9:
25:1d:41:2c:f6:f6:cf:07:77:e3:0b:03:a9:93:d0:
7a:e9:bc:fd:e2:e9:1b:af:cb:cc:c0:87:b4:5e:ff:
3e:8c:af:89:a8:84:35:eb:b6:f9:23:fd:ec:e4:54:
b4:17:aa:82:de:23:35:d1:5e:5e:70:9b:4a:2c:ec:
d1:7c:31:a0:27:7b:7f:7b:46:69:4c:bf:b3:31:53:
0e:fc:92:8c:61:90:67:05:b4:3b:ca:15:36:2b:55:
5e:81:e6:74:36:10:f5:73:1c:80:ef:28:a2:b5:89:
02:5e:20:95:ae:e5:e5:62:a8:4f:48:c0:fa:56:38:
ee:fc:56:ed:ee:0f:f8:c1:fa:c7:4c:db:1d:8e:2d:
bd:92:9c:65:cc:13:ff:d0:06:76:87:00:a3:55:fa:
2e:10:f7:ee:d5:b3:18:d3:47:25:cb:6e:0b:72:36:
2c:93:0a:04:68:61:6f:09:90:30:27:26:64:7c:93:
45:75:be:2d:13:c2:e5:78:a4:b6:e0:91:c0:98:e9:
be:83:68:4c:32:f6:7e:ff:df:d0:21:16:11:90:90:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:08:DE:0C:D9:12:58:D6:0F:71:DD:19:64:3F:A0:97:34:57:84:5D
X509v3 Authority Key Identifier:
keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/3AjeDNkSWNYPcd0ZZD-glzRXhF0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.145.26.0/23
Signature Algorithm: sha256WithRSAEncryption
80:a7:b4:20:de:f7:43:45:78:56:af:56:5d:e5:ab:ad:17:37:
dc:85:d8:cd:3f:80:3a:9c:20:cd:96:e8:f6:3b:fb:9b:7a:98:
10:96:7e:ea:aa:63:dc:2e:86:6d:da:0c:38:b8:12:6e:52:f0:
1b:1b:c8:de:53:0f:a1:c7:82:8b:a9:db:ba:ea:21:4e:8e:f6:
f9:33:e3:a5:0e:ba:d6:b3:f3:b8:de:f1:dc:ae:57:32:67:a8:
8a:a5:b5:96:fe:17:3a:31:92:52:6c:ea:b2:3b:68:cd:61:de:
7c:53:f1:08:14:d3:01:66:f8:e9:bd:eb:fe:d4:b1:66:88:b2:
bc:8d:07:42:3f:22:2e:16:23:ab:7d:c4:53:a1:f2:e8:f0:8f:
b6:8f:c4:36:da:7d:19:d3:0d:83:f7:20:71:36:2e:08:f7:a9:
c8:39:a7:8c:85:72:6e:b9:d9:bd:74:74:af:65:c3:81:7c:a8:
40:11:c1:1b:ed:54:61:8f:a3:8f:72:90:1a:ce:67:79:05:18:
29:e3:08:00:97:29:b6:df:cf:48:ca:5d:6d:38:2e:42:48:66:
ef:b1:02:7d:7a:7e:c8:4a:85:c2:6f:86:11:23:5e:6b:d1:20:
6a:13:17:61:65:4f:62:d5:f8:43:cf:0c:24:22:2a:1a:02:cd:
5f:23:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:07 2025 by rpki-client