Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/w9fR3vjdG02v9W01tMLfiUkm0QQ.roa
File: w9fR3vjdG02v9W01tMLfiUkm0QQ.roa (raw, json)
Hash identifier: lKSr0cIAGkkba1vkCekvWm0ZnvVxTiALhDvgpcwMPfY=
Subject key identifier: C3:D7:D1:DE:F8:DD:1B:4D:AF:F5:6D:35:B4:C2:DF:89:49:26:D1:04
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 3F
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/w9fR3vjdG02v9W01tMLfiUkm0QQ.roa
Signing time: Thu 01 Jun 2023 01:29:29 +0000
ROA not before: Thu 01 Jun 2023 01:29:29 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 7684
IP address blocks: 157.17.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Jun 1 01:29:29 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=C3D7D1DEF8DD1B4DAFF56D35B4C2DF894926D104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:25:63:6c:eb:3f:b0:0a:6e:a1:8e:40:9a:
26:07:e7:1b:8b:ae:97:8f:ad:50:b6:3e:fa:3f:b5:
e5:06:f5:48:a2:47:9d:4b:a2:8d:72:cc:a0:84:a5:
bb:cf:81:fe:fc:ea:df:b7:ad:b6:bc:08:24:62:ed:
a9:e0:a0:28:4e:9f:cd:fc:65:fe:c2:da:17:3e:e0:
47:20:b5:b3:e0:7c:05:8d:11:b1:2a:b7:c1:81:f3:
c7:4b:2d:b7:77:3d:2e:4b:40:78:e1:98:e2:4a:75:
8f:02:e7:58:ad:83:e4:b4:2e:57:79:60:f0:38:ec:
a3:c6:87:51:58:e2:4c:3d:1a:b8:29:03:e6:96:0a:
8a:93:95:3a:3e:4a:d3:5a:3c:22:ad:4f:3f:d4:19:
73:47:30:7c:80:aa:ac:fd:99:0f:91:76:c6:06:62:
7f:5a:5c:5b:77:d3:52:7c:23:b8:00:5d:80:21:ca:
8f:97:cf:57:ca:15:e4:da:21:10:3f:45:b3:b4:07:
83:eb:5b:12:06:11:d7:98:ba:62:c0:d3:2d:d1:f5:
53:5a:85:7d:0b:00:31:3f:e8:ae:17:95:75:21:d7:
19:b1:69:7c:2f:c4:ec:77:b8:6f:ce:12:f7:c8:80:
82:1b:fb:54:f6:b5:61:8e:bd:62:64:8c:b4:b1:a9:
61:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D7:D1:DE:F8:DD:1B:4D:AF:F5:6D:35:B4:C2:DF:89:49:26:D1:04
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/w9fR3vjdG02v9W01tMLfiUkm0QQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.17.84.0/22
Signature Algorithm: sha256WithRSAEncryption
76:bf:49:5b:a6:ad:02:cc:aa:15:4d:68:38:8c:8c:a5:55:fe:
94:8b:0b:46:9c:76:1c:c3:2b:ed:b0:8c:b7:76:94:5c:d8:4a:
38:02:10:eb:86:03:1d:8c:ab:ff:a3:e3:62:14:22:69:75:a6:
c1:5e:2c:94:94:c1:7b:0b:f0:de:80:36:ce:e5:ff:e6:28:56:
74:80:72:45:6f:d5:ec:78:d9:f6:e7:fe:03:ca:48:38:53:6a:
83:5b:4d:ca:2c:30:2c:eb:98:06:c7:52:c3:f6:85:84:69:64:
33:b4:2b:ef:27:bc:1a:f6:95:71:5b:28:a6:a8:1b:74:48:1d:
71:95:aa:81:b1:2b:93:31:e1:d8:13:1f:7a:e3:76:41:2f:fa:
ad:72:35:21:df:75:3f:68:a7:ee:f7:98:cb:6c:96:cd:ab:96:
4a:12:38:36:5d:0c:e2:42:c3:77:b1:13:b1:e4:fb:52:f8:f0:
96:20:be:9d:61:5d:ec:dd:73:42:c0:ba:c5:d5:1b:84:80:a0:
70:45:60:71:50:92:da:49:57:85:68:17:fa:6e:a8:d0:8b:67:
0a:6e:98:bd:c0:49:62:fc:83:e7:b6:40:6b:e0:67:7c:05:32:
d7:5f:c4:e3:31:a4:57:28:ed:54:a5:c1:51:04:eb:94:fc:5c:
98:af:f6:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org