Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ANoZgXb7j5N98iFM6_Iu1Vdl688.roa
File: ANoZgXb7j5N98iFM6_Iu1Vdl688.roa (raw, json)
Hash identifier: A7YxrPssEiNu6ArmA8uqSPd0AgbP4yOuzyMn31ITqW8=
Subject key identifier: 00:DA:19:81:76:FB:8F:93:7D:F2:21:4C:EB:F2:2E:D5:57:65:EB:CF
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 016E
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ANoZgXb7j5N98iFM6_Iu1Vdl688.roa
Signing time: Thu 01 Dec 2022 01:28:29 +0000
ROA not before: Thu 01 Dec 2022 01:28:29 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Dec 1 01:28:29 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=00DA198176FB8F937DF2214CEBF22ED55765EBCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:6a:59:f3:eb:36:03:e0:1c:fa:66:7f:02:
fc:64:93:8b:f2:c8:a9:b5:b7:27:1e:74:81:61:40:
af:59:92:d8:7e:15:53:73:89:ed:d7:10:99:d5:a4:
63:8e:fc:f7:34:fd:d5:75:d8:ac:75:d9:1e:6f:ac:
85:b1:c5:b9:03:c3:d8:2a:4d:9c:05:29:8d:21:28:
7f:59:dd:c1:dc:7f:e2:55:3c:17:9e:a9:ba:f5:4c:
30:24:e1:c5:0f:ed:55:e2:32:88:5f:63:af:1d:11:
88:f3:86:c1:8b:a8:e8:8e:52:42:eb:bb:52:52:6b:
a3:6b:a3:de:f5:c6:2c:56:91:26:fa:46:58:0e:23:
77:9d:4b:4e:79:46:c8:57:30:2b:1e:24:ee:f7:44:
91:79:7c:cb:5d:60:61:97:0d:ea:7f:1d:0b:d0:b7:
0a:59:c1:ea:ab:59:7b:a2:e4:6c:98:99:5c:d7:4f:
75:1e:5f:4f:7a:7a:a9:2b:93:33:e4:e0:56:c4:81:
c1:8d:94:7a:8b:83:2d:ea:03:de:a1:3a:d0:12:74:
81:fb:45:40:c5:5e:99:ec:e6:8f:f5:67:ad:46:74:
98:88:b9:f7:de:06:14:90:f2:21:30:dd:ca:47:b0:
bb:91:3e:0d:f5:69:8a:95:eb:75:e4:7c:ec:2f:03:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DA:19:81:76:FB:8F:93:7D:F2:21:4C:EB:F2:2E:D5:57:65:EB:CF
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ANoZgXb7j5N98iFM6_Iu1Vdl688.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.228.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:cc:7f:26:f0:b4:17:7a:0f:88:91:8f:13:f7:8e:5f:67:08:
cf:c8:08:fa:7a:10:4e:12:9f:d9:c0:0a:5c:3e:c9:c1:55:de:
d3:6d:42:46:37:16:e7:83:7b:ff:43:24:71:ed:e1:93:b7:09:
76:18:7a:1f:44:78:25:82:7e:08:3e:3c:6c:1b:0d:b6:ad:12:
59:a0:c2:e0:f3:08:f7:d1:8d:9b:38:7e:bf:7d:cf:aa:72:75:
04:d6:9c:26:a6:58:8b:3d:14:dc:46:da:b5:88:20:f8:74:f6:
24:1a:8e:4e:40:af:39:41:62:fc:12:81:97:00:fb:43:82:b2:
66:86:f4:fb:6c:19:60:29:01:3e:ac:a7:2d:0f:80:2e:5c:85:
13:af:5f:e2:27:19:67:b1:ae:f2:f9:39:2c:23:3c:6e:b1:e0:
dc:65:a6:fc:85:79:1d:ce:09:62:b4:2e:d6:05:00:ec:32:96:
cb:3c:40:47:4d:6b:eb:d1:1c:47:ea:0c:0b:92:3c:99:3d:30:
f4:f0:99:40:61:04:cd:1a:93:6b:18:96:4b:e3:05:2b:6b:cf:
63:15:7d:50:b9:77:3a:9e:ab:08:d1:31:36:5b:54:34:85:2d:
d1:f3:56:22:39:ff:a7:b9:6b:78:0b:fc:29:76:13:cc:50:0c:
f6:9a:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org