Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/cv-ddMJKJKD5H-aRIGlF7fb9KxE.roa
File: cv-ddMJKJKD5H-aRIGlF7fb9KxE.roa (raw, json)
Hash identifier: 1Gexkw9MHZXAofQeGL3SpFqXfufC2/GXttxbEgii7lI=
Subject key identifier: 72:FF:9D:74:C2:4A:24:A0:F9:1F:E6:91:20:69:45:ED:F6:FD:2B:11
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 0162
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/cv-ddMJKJKD5H-aRIGlF7fb9KxE.roa
Signing time: Mon 01 May 2023 01:28:21 +0000
ROA not before: Mon 01 May 2023 01:28:21 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 4713
IP address blocks: 123.216.0.0/13 maxlen: 13
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 1 01:28:21 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=72FF9D74C24A24A0F91FE691206945EDF6FD2B11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:23:bb:f2:df:cb:13:79:85:e3:83:fe:24:
e4:f8:8c:a4:f6:92:55:5f:55:87:26:34:e4:e0:56:
64:e3:3b:d4:d0:96:1d:16:0c:91:0a:70:a0:a4:98:
83:fa:b7:5c:6b:26:45:f3:18:2d:b4:29:9f:28:8e:
8f:60:60:7f:32:df:e3:ba:72:5d:a7:b0:00:6f:9f:
13:07:92:6e:4a:0b:e6:ef:a8:d2:d2:62:b7:e5:f8:
2c:cd:f4:48:5e:be:5e:e0:d6:29:f4:d6:9c:be:58:
2f:fb:01:27:05:e6:32:15:3e:7e:a1:6d:e4:77:2d:
88:1e:1e:e2:13:52:38:e0:5c:f6:62:78:fd:51:fd:
1a:2f:2d:98:52:7f:e3:51:4d:a9:c0:90:f5:82:62:
e3:4c:bb:7f:2f:0c:ce:85:25:6d:47:75:5a:56:bc:
ac:cb:4a:0f:91:2c:3f:59:9e:bb:17:50:cf:2d:5e:
b7:29:16:73:c3:6a:21:63:c1:03:fd:1d:e6:95:fe:
18:46:ac:e0:e3:dd:d6:8f:bf:53:d2:f6:19:3f:0d:
a7:c2:f6:f3:f7:2f:00:2f:da:ae:41:58:8d:65:8b:
c0:a9:47:1a:15:08:26:39:6f:e6:30:a0:35:f6:97:
fc:1f:98:d6:0c:a9:6f:f7:d2:ee:fc:1f:70:21:7b:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FF:9D:74:C2:4A:24:A0:F9:1F:E6:91:20:69:45:ED:F6:FD:2B:11
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/cv-ddMJKJKD5H-aRIGlF7fb9KxE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.216.0.0/13
Signature Algorithm: sha256WithRSAEncryption
c8:48:84:fa:38:a9:1e:55:23:07:f1:16:b1:fe:8c:96:15:58:
ee:06:3f:96:e6:20:23:49:6b:7b:ca:04:ca:18:f3:5a:64:cd:
c1:ba:9d:8c:21:43:6a:19:d0:bd:54:e3:d5:bf:37:14:b8:0b:
e9:d3:77:6b:1c:0e:4f:51:31:6a:82:3c:95:10:d8:4c:af:3f:
d7:48:7b:77:54:e6:96:9b:4f:9c:06:17:5a:74:26:ca:ac:c4:
e4:2a:86:3a:86:c4:db:c7:8e:e8:3c:63:05:32:a3:20:f4:f3:
1f:80:b4:83:ae:83:6d:fa:42:7a:05:9d:ca:8c:f1:cc:98:ae:
07:51:67:87:c1:44:e9:ef:3b:88:cc:17:61:fd:c7:29:29:96:
fc:53:60:ce:cc:4e:9f:67:f9:50:fe:7c:99:af:10:b2:26:77:
3f:a1:a9:26:d3:ae:fe:b0:56:2c:13:f9:6b:f9:2f:f2:4a:9e:
d3:4c:2e:b8:eb:cb:a9:b8:b3:f4:d4:3e:fa:dd:06:88:f7:ed:
54:72:4a:3a:ec:a3:84:66:60:a7:49:af:7b:91:00:54:e0:53:
b8:23:b2:19:40:80:14:98:34:a6:66:5d:02:e5:7a:ed:0f:4e:
ad:4d:a9:76:32:c5:49:9e:77:44:75:a4:ed:69:bb:3c:f2:80:
55:f5:70:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org