Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2NlLSnZpYmxrU7uR2TIFryeNmD8.roa
File: 2NlLSnZpYmxrU7uR2TIFryeNmD8.roa (raw, json)
Hash identifier: zfHHv94aLgU83JGfTppZBzns3uyxM7DRQKn6beqKkjk=
Subject key identifier: D8:D9:4B:4A:76:69:62:6C:6B:53:BB:91:D9:32:05:AF:27:8D:98:3F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0411
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2NlLSnZpYmxrU7uR2TIFryeNmD8.roa
Signing time: Tue 06 Jun 2023 16:05:55 +0000
ROA not before: Tue 06 Jun 2023 16:05:55 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.4.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1041 (0x411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:05:55 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=D8D94B4A7669626C6B53BB91D93205AF278D983F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:ae:48:c7:6b:2a:29:57:6a:37:b2:5c:a9:
eb:3a:09:f5:a4:dd:10:32:2c:ab:2b:64:40:ad:4f:
e5:13:dd:a8:88:12:82:15:b0:9e:79:63:43:52:f5:
e8:e0:7d:56:29:5e:4a:c9:d8:0e:5c:31:f3:0a:a8:
5a:ed:a7:bc:d1:90:3f:8a:f8:f3:18:fb:d5:07:91:
ab:47:37:00:86:22:08:67:30:87:42:88:54:62:99:
e3:fb:22:58:4a:ff:0d:75:d7:25:33:b3:92:6d:78:
6d:ad:14:f3:1b:81:48:b1:8d:b4:a8:fd:68:84:41:
28:55:49:a5:a3:5f:63:75:f7:a5:73:bd:f8:cb:aa:
8a:4a:fa:29:1d:72:61:a5:ec:3f:01:10:f9:c4:3b:
b3:27:aa:e5:29:5a:f8:fe:e3:41:ff:00:34:fc:54:
4b:c7:70:69:76:18:b9:e9:a3:07:a2:80:01:2d:ec:
38:9c:a9:d5:25:c4:d4:e3:ea:57:ff:99:00:b0:58:
0b:f4:66:38:f2:3a:83:8b:72:5c:39:cf:0f:8b:1b:
ac:5c:e0:70:5e:26:e6:40:81:03:d0:b3:ec:24:9d:
a1:33:4c:60:7b:f7:10:0e:43:89:29:e8:2e:7a:9c:
51:52:fc:00:e4:7c:74:48:6c:ab:24:cb:65:4b:8d:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D9:4B:4A:76:69:62:6C:6B:53:BB:91:D9:32:05:AF:27:8D:98:3F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2NlLSnZpYmxrU7uR2TIFryeNmD8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.4.0/23
Signature Algorithm: sha256WithRSAEncryption
56:7f:24:37:17:47:4a:73:ba:a5:6c:58:a1:3d:0d:9d:49:bc:
ae:6b:f1:8e:df:f0:fb:28:6a:46:2b:1a:ea:d7:45:b6:10:1d:
d3:f8:04:72:96:d4:60:7f:b2:e9:fe:5a:00:c0:34:fe:80:26:
cc:34:18:3a:c9:e3:07:74:29:4c:db:a7:e1:09:6b:26:34:07:
96:d1:3c:45:42:96:49:5f:de:ca:47:16:be:ee:7e:3e:fc:c8:
cd:22:81:61:ec:47:f0:a4:9c:51:02:be:64:12:48:6e:2b:64:
fd:74:8e:bb:ad:4c:05:26:a7:0c:b6:00:3f:aa:3c:e3:a8:f0:
be:13:28:6e:39:bd:0e:3e:86:11:df:22:98:97:f5:11:11:f3:
33:74:9b:65:ce:98:03:53:c8:6f:90:85:ca:15:c8:76:bd:8d:
40:f7:79:06:71:75:13:19:45:17:e3:e5:d2:ab:cf:bb:c8:79:
6a:12:fe:17:4b:9b:dc:68:4c:bd:33:46:fe:29:87:54:3a:6a:
98:83:3d:02:e6:9b:7d:b9:a4:96:74:b4:8c:3b:1e:e4:7d:84:
26:ab:46:2f:f4:ff:2b:d7:3d:d7:7b:87:31:33:63:04:56:1a:
fb:7b:9f:f1:99:51:53:73:bc:1f:70:8f:5e:ea:c6:b4:40:f0:
9a:7d:08:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org