Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1cQzBT9u4MkZwAatRD2-hOAo04g.roa
File: 1cQzBT9u4MkZwAatRD2-hOAo04g.roa (raw, json)
Hash identifier: lmCLt8yGt4y2pHWmibobaBzz+G53W1mlLKtf0GQoUr4=
Subject key identifier: D5:C4:33:05:3F:6E:E0:C9:19:C0:06:AD:44:3D:BE:84:E0:28:D3:88
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 03F8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1cQzBT9u4MkZwAatRD2-hOAo04g.roa
Signing time: Tue 06 Jun 2023 16:03:49 +0000
ROA not before: Tue 06 Jun 2023 16:03:49 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.38.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1016 (0x3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:03:49 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=D5C433053F6EE0C919C006AD443DBE84E028D388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:5e:be:69:c0:bc:c9:f6:6c:96:d3:a5:39:
5b:1a:f6:66:47:8d:6f:d0:7b:90:db:24:34:60:5a:
62:c8:ba:54:ac:79:7d:9d:cc:a9:e0:b3:7a:5b:75:
6b:b8:1c:8b:92:1b:09:b8:55:56:29:4f:53:3f:d2:
d9:cd:08:01:ee:81:d4:b8:60:94:92:da:61:c8:ab:
22:c2:33:82:d9:ee:8a:7c:64:83:0e:eb:a4:12:a5:
5a:71:25:35:27:c5:19:3d:5c:2b:56:59:77:1e:5c:
eb:3c:f7:3d:de:4e:cf:2c:b5:3c:1c:4b:07:94:19:
27:d1:d1:f7:f0:50:ed:3b:c6:58:34:ae:d1:d6:8a:
3f:59:92:55:8e:4e:70:0e:d7:87:3e:45:84:1c:bf:
24:ce:35:21:bc:81:f1:ba:35:09:a7:ca:1d:6f:16:
52:64:94:b3:11:1d:7c:8d:46:49:d1:31:dd:f6:b4:
e6:4b:af:07:52:89:a2:03:3e:fe:c9:e5:72:97:a9:
ce:55:5a:48:55:af:b1:12:21:df:29:b4:42:b2:e0:
d1:3f:09:ab:63:2d:24:03:05:e8:1b:d8:ee:95:46:
b4:a2:78:46:3b:89:b8:d3:37:b8:5c:41:b2:33:d7:
54:cf:0e:53:90:9e:41:d7:a0:b1:c6:40:40:61:32:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C4:33:05:3F:6E:E0:C9:19:C0:06:AD:44:3D:BE:84:E0:28:D3:88
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1cQzBT9u4MkZwAatRD2-hOAo04g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.38.0/23
Signature Algorithm: sha256WithRSAEncryption
42:0f:41:29:47:ff:b4:de:12:25:64:73:d0:1b:fc:44:6d:dd:
a0:db:36:ac:2b:05:77:9b:13:39:35:eb:0f:94:bc:cb:86:8d:
96:b6:11:08:3d:d9:b0:7a:40:b7:cf:50:9c:79:b5:6f:35:70:
7c:0c:17:f1:f1:b9:51:d1:b5:ce:11:af:c4:b8:e9:d2:8d:21:
ad:2f:6b:81:94:6e:d6:93:2b:ef:84:09:e8:00:3c:6b:b5:0d:
7c:ab:5e:d3:6b:27:19:9d:f0:a8:07:50:1a:34:1e:47:d7:c0:
91:02:38:e5:07:9a:1c:f9:58:78:e2:9d:e7:78:9d:45:f5:8d:
9f:7c:16:e6:04:d1:eb:17:74:15:35:11:41:af:42:06:e2:e0:
e6:5f:35:12:c1:80:b0:f6:21:82:bd:8e:44:6c:f2:5a:8a:08:
b8:8d:ad:62:55:76:ed:f0:8a:37:4b:61:24:77:23:ab:7b:dd:
07:cf:32:9f:d5:65:6a:42:64:d0:38:41:ee:04:c3:1b:1f:ca:
cf:50:ed:71:8f:86:b4:50:57:08:f2:b8:c1:e1:2d:73:91:5d:
c7:90:2e:e3:5f:a3:2c:af:e3:64:69:27:39:90:74:a4:37:1e:
4c:b8:ab:b1:97:42:d9:ac:4f:53:64:0a:a5:94:a2:28:f3:13:
f1:7c:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org