Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-qfQ2ZxGFEXw2orjOhn_PxdABsU.roa
File: -qfQ2ZxGFEXw2orjOhn_PxdABsU.roa (raw, json)
Hash identifier: iHgAMPBoh6wp3opWwc9YSWjtYSfwWRG4utO2TeYZX6Y=
Subject key identifier: FA:A7:D0:D9:9C:46:14:45:F0:DA:8A:E3:3A:19:FF:3F:17:40:06:C5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0366
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-qfQ2ZxGFEXw2orjOhn_PxdABsU.roa
Signing time: Thu 01 Jun 2023 17:56:39 +0000
ROA not before: Thu 01 Jun 2023 17:56:39 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870 (0x366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:56:39 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=FAA7D0D99C461445F0DA8AE33A19FF3F174006C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:c8:e1:90:0a:32:74:f6:fc:d6:ca:41:3d:
20:26:1a:80:a6:03:bd:8b:6f:76:ba:bb:cd:86:d9:
01:0e:b6:89:f7:18:fc:a0:a7:2e:8e:fb:30:46:87:
71:7f:8a:66:d8:7f:94:42:bb:0a:f2:df:65:c4:f3:
88:7f:23:41:44:7c:11:9b:3e:45:d8:85:85:f2:3f:
3f:6e:22:8f:38:16:26:c3:ca:32:a9:af:ff:32:24:
0a:65:6d:27:24:0e:ea:d0:55:73:b7:a6:d1:8a:2f:
2d:6d:5a:f0:d9:df:62:77:40:15:c7:b4:75:c8:52:
41:d1:45:20:c3:77:02:1f:aa:84:13:26:69:19:0d:
1e:26:b9:c8:ad:92:7e:30:52:fb:c1:be:bc:b7:fd:
66:65:77:30:17:0b:64:7b:4e:a8:d0:42:2c:5a:bb:
66:d8:e8:69:35:f4:06:77:2e:52:2d:13:fe:7c:ba:
95:b1:dd:ba:ff:7c:f2:ed:ae:5c:49:c3:44:f2:dd:
06:25:21:ad:c1:2d:c2:d8:e2:e8:0a:1b:b0:7c:fe:
01:0c:1c:99:16:16:f3:fc:fd:34:55:b0:93:e1:82:
9e:87:56:ec:c5:3b:68:cb:b3:22:57:5b:2f:70:b1:
60:0d:91:f4:52:2d:e2:1b:06:9b:90:a8:8f:31:8f:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A7:D0:D9:9C:46:14:45:F0:DA:8A:E3:3A:19:FF:3F:17:40:06:C5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-qfQ2ZxGFEXw2orjOhn_PxdABsU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.228.0/23
Signature Algorithm: sha256WithRSAEncryption
39:5f:c3:ed:26:be:04:69:ba:1a:70:86:d0:18:ad:6b:e1:c4:
d4:a2:98:f9:ec:d7:f9:51:d1:23:2a:bb:4f:98:ac:19:f6:d4:
dc:27:a8:82:a3:3f:04:f4:40:a1:f6:8a:c6:b6:76:bf:48:e5:
8e:e8:65:83:ac:86:9d:7f:eb:9b:85:c2:41:60:03:e0:99:5f:
ea:b7:78:b9:c8:5f:c7:18:ba:65:65:ef:53:23:b8:8b:c6:3b:
b3:de:2d:d1:ab:7e:47:b5:4c:1d:c2:5c:95:f8:fc:05:cf:34:
b1:a1:ad:1e:96:af:ff:38:61:c9:de:4f:21:6f:61:93:b7:98:
51:c3:99:ca:b9:19:90:e1:61:71:e9:52:d4:45:eb:ae:7e:d4:
20:ce:23:60:36:91:07:7c:1e:cf:6f:19:e2:b2:62:66:cf:2c:
f2:96:00:e5:59:08:97:b8:90:24:5d:9f:72:35:32:32:f6:41:
14:56:c0:e6:48:ab:6c:7a:29:10:77:c6:58:af:aa:67:c0:d8:
4f:15:20:c4:32:db:b9:2b:a5:d8:73:2e:ba:b2:79:51:cc:73:
46:8e:06:2b:d9:95:4a:e1:91:a1:8a:b3:c3:ce:de:47:e1:0b:
79:f1:6a:59:61:d1:13:86:34:a6:35:bd:28:e0:da:fa:92:dc:
95:fe:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:05 2025 by rpki-client