Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-I90H6rH9x3sVqLqqg2M62xbYQI.roa
File: -I90H6rH9x3sVqLqqg2M62xbYQI.roa (raw, json)
Hash identifier: YiHa6RivSItM86kfycZaAXBfHPrUZ1vC4AhokEmJzIQ=
Subject key identifier: F8:8F:74:1F:AA:C7:F7:1D:EC:56:A2:EA:AA:0D:8C:EB:6C:5B:61:02
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 027C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-I90H6rH9x3sVqLqqg2M62xbYQI.roa
Signing time: Tue 30 May 2023 16:34:23 +0000
ROA not before: Tue 30 May 2023 16:34:23 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:34:23 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=F88F741FAAC7F71DEC56A2EAAA0D8CEB6C5B6102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:43:7a:2f:70:9c:46:9c:d5:88:f3:1e:f7:
4b:b8:cd:44:a0:d7:9d:c9:39:50:16:43:d5:0b:70:
92:67:ac:30:cd:43:9e:7f:c6:dd:a7:43:a4:05:94:
63:d5:e8:89:86:57:6e:c2:60:67:a6:9c:2d:16:c7:
33:55:44:c9:1d:7a:96:23:5d:44:7e:9a:56:f7:2b:
4d:fe:29:f1:fb:5b:84:58:9e:4b:81:09:7b:13:57:
23:ba:67:51:55:e2:f0:f0:29:8b:9e:2c:dc:bb:66:
a2:e2:af:cb:37:b2:8b:4d:b0:df:29:2d:59:5a:8f:
d5:88:62:36:11:e6:ab:d1:80:11:0e:f3:0a:ca:d8:
6c:3b:04:b2:22:4b:e7:cb:95:02:af:dc:32:d4:58:
7c:82:00:45:3d:4c:ab:93:a6:31:af:03:a5:c3:dd:
fe:ae:2b:05:77:45:c5:fb:9c:f0:fa:61:48:7c:8f:
95:2a:6a:7a:1b:57:f8:d9:00:a5:67:d3:81:32:96:
d3:5c:e6:5f:b7:57:09:62:52:22:e5:db:b6:d9:b6:
59:fe:82:35:1a:02:4b:9c:b6:61:d9:9e:02:06:7e:
4f:ad:d8:3b:73:b3:e2:57:90:e5:52:39:a7:1a:ae:
f1:ef:f7:8a:ae:3c:a6:7d:e8:5d:35:6d:32:51:99:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:74:1F:AA:C7:F7:1D:EC:56:A2:EA:AA:0D:8C:EB:6C:5B:61:02
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-I90H6rH9x3sVqLqqg2M62xbYQI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.25.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:18:9f:7a:6e:ea:f2:c4:13:87:a1:7a:fe:1b:fd:a9:2e:65:
b9:0f:cc:02:d0:20:31:98:e6:bc:9f:bd:52:48:63:a8:05:fe:
00:fa:70:38:fd:d7:56:75:ce:c1:5d:7a:64:ba:aa:9a:20:6d:
f0:d4:98:d0:e3:f9:1d:95:dc:b8:b3:e0:15:49:e0:4f:58:26:
fa:10:9a:4c:93:4b:c5:93:ea:ee:8a:e3:d6:13:58:e6:d9:8c:
79:6d:fc:65:b9:9e:8c:ae:9e:5d:60:ce:5c:5c:e1:4b:98:0c:
05:2f:36:8e:a5:f6:0b:c8:44:01:2b:43:45:42:f9:44:7d:60:
25:57:e3:cc:9a:7b:72:05:43:18:d4:a0:5f:9b:90:ca:e2:37:
eb:b6:53:64:8d:67:c9:8e:86:b0:13:ed:d3:d2:f8:24:dd:9f:
16:b4:4c:92:a5:6e:fd:26:c1:82:31:a9:0a:30:fe:4b:87:a9:
17:a9:52:55:2b:ac:8c:6c:42:26:90:a1:2e:be:79:be:48:13:
18:9e:da:40:74:49:30:93:1a:d2:6c:5c:31:5f:27:76:53:17:
4b:17:13:c8:12:48:6e:56:99:c2:fa:e8:ea:ba:a1:7d:2c:08:
7e:2d:01:e9:1c:87:41:12:1f:c8:30:c9:c0:9d:2a:9d:28:94:
92:ac:41:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org