Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-fJgTMLsaOnFIlE3TsaCqtF1ALA.roa
File: -fJgTMLsaOnFIlE3TsaCqtF1ALA.roa (raw, json)
Hash identifier: S49mhkAwZexZowU34i7eKMnnpLmO2P7yxY/XImQBv6E=
Subject key identifier: F9:F2:60:4C:C2:EC:68:E9:C5:22:51:37:4E:C6:82:AA:D1:75:00:B0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0194
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-fJgTMLsaOnFIlE3TsaCqtF1ALA.roa
Signing time: Wed 24 May 2023 16:35:12 +0000
ROA not before: Wed 24 May 2023 16:35:12 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:35:12 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=F9F2604CC2EC68E9C52251374EC682AAD17500B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:5a:c4:76:d1:0b:3b:b9:ee:80:9d:5a:75:
8d:7c:00:51:0c:03:71:6e:b6:bb:4b:f8:d8:70:9a:
90:bf:7c:79:56:58:ae:bc:58:21:cb:2a:3d:d0:94:
67:af:fc:5f:47:92:f4:3d:2b:97:07:4d:d0:48:28:
24:71:39:1d:a6:8b:d2:b7:0f:1e:a2:31:b0:a5:e3:
35:52:f9:cc:24:cf:54:a8:2f:bf:c6:5c:e3:9e:76:
13:94:5e:db:2f:b8:4e:05:34:de:b4:9f:f3:aa:5c:
92:8f:63:77:d7:dd:19:74:81:70:76:db:f9:88:33:
21:cc:75:4d:17:e6:7e:c8:ba:42:fa:c5:e5:7c:6c:
66:2f:87:63:2a:55:26:a9:a3:b1:ce:bb:91:aa:23:
0e:9f:23:21:3a:de:c2:e5:cd:ae:fa:6f:54:21:58:
49:73:c7:91:a1:a5:f4:2c:38:4f:9a:9f:9e:20:ed:
49:5e:7d:c9:b8:fa:e5:67:50:23:47:df:ff:f4:05:
71:96:9f:1d:b2:95:be:89:9f:ca:76:82:a0:fd:e6:
28:e0:7d:f8:d3:67:dc:c3:a5:73:0d:55:bd:8b:b3:
a3:b7:22:71:de:34:b5:0c:14:fc:aa:d6:38:82:b3:
4b:45:1e:4d:9d:24:58:5c:e8:44:58:6a:bf:1f:e4:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F2:60:4C:C2:EC:68:E9:C5:22:51:37:4E:C6:82:AA:D1:75:00:B0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-fJgTMLsaOnFIlE3TsaCqtF1ALA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.116.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:e1:56:c8:a6:f3:f3:50:ff:d7:aa:1f:f6:38:1f:c6:dc:9a:
b7:61:bf:c3:d3:d2:1e:38:62:09:5d:3a:f1:b0:c2:90:14:c9:
51:f3:82:1b:ba:c7:35:90:f0:e1:15:3a:26:03:db:e9:51:4b:
90:d9:05:50:db:1f:8f:59:9e:4b:87:0e:fa:74:eb:5e:3b:f6:
4b:74:b5:45:e6:24:e6:c2:97:d9:13:4e:a1:d3:d5:01:18:3c:
64:0f:35:c5:f6:60:0a:93:ef:6d:8a:ae:31:cf:1b:01:6a:e1:
2d:8a:0e:d8:1d:42:6d:01:d2:51:64:c9:61:4a:cb:dc:74:ba:
2e:02:f8:05:53:71:53:78:95:b2:77:ab:07:43:61:b4:d0:2b:
92:e0:b8:aa:4d:a9:8c:b9:44:34:eb:56:94:dd:a4:ed:e3:7c:
fe:79:3c:f1:cf:95:6c:94:e1:7b:b0:fb:88:42:e7:7e:99:c7:
2f:89:84:01:1c:99:43:a5:fd:ff:16:33:4c:b0:15:0f:b6:b1:
98:4a:c6:47:b6:b4:6d:eb:30:9c:ed:f5:08:84:30:1f:3e:b7:
0f:93:d5:3d:bf:81:fc:08:9e:4c:2c:1e:3f:1b:9f:0d:4e:bc:
ea:a4:4f:a1:90:df:53:63:52:d9:58:81:7e:0d:c7:3b:3f:05:
d7:af:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org