Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2XQy9v9FlnNdKy07pxvO1zcFocw.roa
File: 2XQy9v9FlnNdKy07pxvO1zcFocw.roa (raw, json)
Hash identifier: UAo5GE6CPDiYT8PZqkupX/eYDbR5FFu/Qe/To4oIeJo=
Subject key identifier: D9:74:32:F6:FF:45:96:73:5D:2B:2D:3B:A7:1B:CE:D7:37:05:A1:CC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: F9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2XQy9v9FlnNdKy07pxvO1zcFocw.roa
Signing time: Wed 24 May 2023 16:03:14 +0000
ROA not before: Wed 24 May 2023 16:03:14 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:03:14 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=D97432F6FF4596735D2B2D3BA71BCED73705A1CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:dc:38:eb:43:36:72:9b:d5:c0:f9:96:86:
35:05:5f:89:23:75:13:d7:93:3a:50:35:08:6b:60:
96:36:66:85:b6:9b:d9:2b:06:5c:51:06:3c:0b:ee:
42:a0:f9:67:b6:9a:b2:6f:4d:08:22:d4:da:1d:98:
c5:5c:b7:13:ca:59:b2:03:62:6b:95:84:07:8a:f0:
66:f7:3c:be:44:84:19:4f:e7:41:c5:8a:04:a5:71:
fd:d4:00:50:df:1e:77:18:d4:02:97:ec:c1:4a:44:
b0:62:72:d2:02:a5:e9:7d:f6:fe:90:06:e3:18:3d:
c2:a9:c8:27:b3:3f:75:be:1c:55:4c:e1:cf:f7:e0:
db:fb:d5:13:d5:a7:84:85:be:3f:a8:23:02:7d:15:
cf:71:57:1b:53:83:1f:56:51:2a:57:0c:09:70:66:
80:ef:ec:8d:6c:3f:e9:c1:52:c9:61:94:9a:a9:54:
c6:e4:7a:3c:04:b6:d4:5d:b3:34:e4:4c:f1:4c:7b:
1e:32:bc:a5:1c:32:73:de:23:47:f1:72:bc:d7:1e:
da:3b:03:f4:93:db:8f:2e:c6:77:12:79:20:5e:67:
10:db:11:98:87:24:07:28:ca:7a:e2:f5:04:3f:d3:
27:83:3b:90:42:f3:cd:5e:4a:2a:87:1e:4d:64:6b:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:32:F6:FF:45:96:73:5D:2B:2D:3B:A7:1B:CE:D7:37:05:A1:CC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2XQy9v9FlnNdKy07pxvO1zcFocw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.176.0/22
Signature Algorithm: sha256WithRSAEncryption
33:8e:92:50:9e:f8:b6:e2:b1:90:ee:e7:0e:7a:3f:ec:fa:39:
4e:93:f5:81:f7:55:95:eb:33:7e:bd:99:08:7b:68:ae:89:05:
a7:e0:a2:46:2a:f7:83:2d:05:96:ad:d9:49:48:1f:3a:a1:ed:
ab:00:0d:72:44:e2:42:f4:da:fe:f8:fc:8f:3b:91:3c:cf:76:
16:ae:f8:de:8d:26:e8:1a:ef:5a:17:f1:ae:4f:42:8f:d6:81:
be:08:c8:86:36:02:57:e1:7c:43:16:f3:a1:71:59:60:08:3a:
b1:00:40:45:1e:87:87:39:60:5c:0f:6f:da:76:5f:37:85:59:
aa:bb:15:8d:de:7c:80:18:e9:3a:23:14:cd:c6:9a:b5:6a:d2:
e1:96:e9:2e:91:5c:81:60:69:0f:ee:e5:40:30:d7:25:6f:82:
61:63:8e:83:24:96:93:aa:2f:46:ee:57:97:11:f9:da:f7:8a:
0f:33:1e:23:ec:02:3a:97:37:de:96:7a:65:3e:f8:1f:59:a8:
2f:d9:a7:c5:0a:b0:29:5e:10:60:7c:46:1b:8a:71:7c:1e:75:
c0:13:c6:3c:c5:b2:13:9e:bd:bd:0c:32:ac:4c:4c:a5:33:24:
e6:eb:e2:cc:a6:ad:31:66:50:8c:cf:49:60:88:3b:fd:82:24:
09:5f:90:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org