Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3ToU7q8PY1RCoUdckfZSAzD0yFs.roa
File: 3ToU7q8PY1RCoUdckfZSAzD0yFs.roa (raw, json)
Hash identifier: I8Fz/8AEzGrV2bKT22S139F7408/HqMWaHJaExcn5YE=
Subject key identifier: DD:3A:14:EE:AF:0F:63:54:42:A1:47:5C:91:F6:52:03:30:F4:C8:5B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: E7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3ToU7q8PY1RCoUdckfZSAzD0yFs.roa
Signing time: Wed 24 May 2023 16:03:07 +0000
ROA not before: Wed 24 May 2023 16:03:07 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:03:07 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=DD3A14EEAF0F635442A1475C91F6520330F4C85B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:a8:06:a5:6b:1d:49:92:24:02:bf:4c:e5:
64:22:c4:7e:75:b6:03:86:15:3e:8b:19:31:53:28:
c8:92:df:d0:10:50:ee:14:1f:54:a6:e1:0d:21:a5:
61:de:80:3b:56:9c:bc:2b:f9:ec:ae:00:37:4f:2b:
b8:71:12:2a:28:f0:e0:c3:fe:fe:76:51:be:b2:4a:
09:77:fa:ac:76:12:bc:b0:64:15:16:4b:4e:17:de:
bc:a9:83:06:73:98:ae:e2:7b:85:51:9f:69:0b:65:
26:15:a7:88:97:9e:2b:0b:b6:d1:6d:c6:eb:ba:bd:
0d:39:b2:16:a6:46:33:98:d8:a8:54:6b:89:bd:b2:
27:73:04:d2:98:c3:32:9f:a0:df:2c:4b:d9:45:76:
39:87:d7:82:72:2e:69:7d:4f:50:8f:b2:47:8f:a5:
6f:ba:f1:c4:36:d3:d7:4b:31:e9:1c:d2:22:35:3b:
e5:60:56:be:3a:9f:78:a0:02:98:b1:2c:a4:b7:e8:
b2:9a:b7:6b:aa:28:3f:1a:4f:25:9a:b4:ae:8f:28:
ed:ad:f8:d2:57:f3:f1:75:fc:1e:de:c5:8b:4d:e2:
0e:92:4d:e7:ad:7e:d7:d7:71:02:10:13:ce:43:67:
2a:f4:2b:29:d0:50:dd:ea:63:25:71:c8:05:62:c4:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3A:14:EE:AF:0F:63:54:42:A1:47:5C:91:F6:52:03:30:F4:C8:5B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3ToU7q8PY1RCoUdckfZSAzD0yFs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:d5:79:3d:80:de:30:0e:30:75:b0:2a:e6:03:43:44:4b:b5:
eb:d5:03:26:10:86:ba:a2:3e:b3:2a:8e:55:cf:84:44:74:90:
0e:73:8c:b3:ee:ba:d0:a8:00:f8:3c:91:7e:da:63:75:66:4d:
17:a0:32:11:e1:5e:f3:f9:4f:2e:b1:8f:20:ec:fb:a9:7a:ba:
bc:00:50:97:15:2c:95:c4:c5:74:c8:b6:ff:e8:d7:52:97:06:
30:b6:ce:c9:25:11:8f:5e:05:5a:df:52:53:f9:e6:3a:bd:ac:
ce:2e:82:66:5b:f2:ee:99:31:0e:4c:8e:35:61:b0:7f:f2:da:
66:fb:05:9b:a9:70:5a:4e:4e:4d:84:d4:28:b4:8d:81:79:68:
7d:ed:b3:16:a7:5e:be:76:f9:c7:cb:24:b5:2e:dc:9f:ac:ef:
8c:4a:ab:3f:bf:4e:c3:82:22:05:02:1a:58:26:29:43:c0:16:
eb:db:3c:8c:02:71:d2:75:ef:94:d2:db:6a:bd:56:7f:3a:32:
e1:67:bd:e5:ee:13:de:b7:a9:dd:3b:8c:0d:79:85:64:07:91:
64:83:2a:27:50:6c:93:9b:77:ec:62:e7:04:74:65:69:82:82:
7f:de:dc:9a:3a:bd:d6:40:e4:50:dc:a9:86:06:ea:4e:bc:49:
21:23:0c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org