Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-d5uX4sPpaIPc-63tbFMm6I3Y8k.roa
File: -d5uX4sPpaIPc-63tbFMm6I3Y8k.roa (raw, json)
Hash identifier: HljAa7Rd1ZHa4ZaQ9aHFxfdwlMtg+kZv1TPsnAGNEn4=
Subject key identifier: F9:DE:6E:5F:8B:0F:A5:A2:0F:73:EE:B7:B5:B1:4C:9B:A2:37:63:C9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0206
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-d5uX4sPpaIPc-63tbFMm6I3Y8k.roa
Signing time: Tue 30 May 2023 16:29:27 +0000
ROA not before: Tue 30 May 2023 16:29:27 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:29:27 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=F9DE6E5F8B0FA5A20F73EEB7B5B14C9BA23763C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:d9:b2:e9:92:f0:50:d4:4e:27:77:3a:71:
ac:aa:e9:89:70:6c:bd:4b:fe:eb:f4:2c:88:52:a6:
52:39:df:53:df:cb:8e:fe:8f:d1:02:0b:fb:2f:76:
57:4a:aa:57:c1:51:3d:5c:69:ea:f6:e2:92:cf:77:
12:b0:58:cb:40:fc:25:d3:02:90:7c:17:fb:28:db:
a4:d3:52:6f:7f:57:e0:67:60:d1:35:a5:12:b1:62:
6e:16:8e:fb:ea:aa:0d:3e:3c:5e:06:99:b7:c5:78:
9a:ac:2b:0f:e8:e5:25:af:bd:27:43:5e:05:35:1b:
97:d2:9a:94:28:a5:d3:f7:48:a9:88:2e:06:5c:3d:
b0:cf:b9:64:6b:9a:89:54:a3:b3:04:af:50:47:73:
98:0b:ba:f3:b6:44:70:6c:82:f1:6b:af:15:21:48:
4d:58:75:5e:b1:19:59:00:70:c6:a5:f4:16:95:10:
d4:b0:06:6c:85:85:2a:50:c9:d6:66:48:5c:80:24:
96:42:fe:6b:50:7f:79:1f:64:de:50:55:63:4d:91:
f9:96:30:58:de:35:b4:24:e3:4a:be:b9:72:b3:0d:
48:8e:63:54:7e:54:58:7f:fd:48:c0:98:c6:3c:74:
96:50:e8:10:e6:7a:57:75:72:4d:20:90:b5:9c:e7:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DE:6E:5F:8B:0F:A5:A2:0F:73:EE:B7:B5:B1:4C:9B:A2:37:63:C9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-d5uX4sPpaIPc-63tbFMm6I3Y8k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:a4:d3:a1:3d:33:28:a4:b8:05:87:94:8c:8a:33:10:e5:19:
fe:73:fe:0b:9f:a2:04:17:ab:09:82:4e:6b:67:0a:64:05:65:
ac:19:71:bd:6b:34:df:20:68:dc:ca:64:b5:10:eb:2e:65:37:
1a:dd:02:b2:7e:32:6f:ef:f5:d6:bf:e3:c5:38:ae:d2:9c:9f:
da:30:b7:2e:1e:1e:d6:f8:ff:d1:cc:fd:9e:5f:a4:e6:7a:5a:
b8:2e:1b:dd:59:58:0b:78:0d:24:52:c1:9d:3e:a5:47:bb:9c:
0e:56:53:1d:eb:55:7e:2e:db:9e:b0:80:0b:48:af:dc:06:05:
f9:5c:21:6a:34:98:ee:d1:0c:c7:06:94:5a:78:92:7a:24:0b:
1a:04:21:7e:49:d9:b6:06:35:b1:33:8d:7d:3c:d3:84:64:b8:
5b:ff:d9:33:fc:1f:a0:c6:63:ac:aa:3e:92:1f:75:1f:81:6b:
1f:a4:1e:33:a5:4b:8f:07:a4:96:f9:cb:db:56:60:1d:5e:46:
ca:fa:82:99:4c:c8:30:79:cf:71:0b:7f:45:ef:fc:ed:f8:7b:
40:07:de:44:e7:7a:f3:9b:31:c2:62:57:f5:06:4b:c7:54:2f:
a6:20:68:ca:24:50:fd:6f:96:fe:90:38:66:55:8f:e1:59:bc:
eb:92:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org