Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/48t3LMSq9kLlF5cCS9y5N6ZnDn4.roa
File: 48t3LMSq9kLlF5cCS9y5N6ZnDn4.roa (raw, json)
Hash identifier: qcM4+Zs3OoDb+DvRUyFIucUNqKkUkvp7El7nhyHX0xs=
Subject key identifier: E3:CB:77:2C:C4:AA:F6:42:E5:17:97:02:4B:DC:B9:37:A6:67:0E:7E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 038F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/48t3LMSq9kLlF5cCS9y5N6ZnDn4.roa
Signing time: Thu 01 Jun 2023 17:57:40 +0000
ROA not before: Thu 01 Jun 2023 17:57:40 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911 (0x38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:57:40 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=E3CB772CC4AAF642E51797024BDCB937A6670E7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:fe:de:13:6b:07:c6:ec:a1:68:1b:d0:01:
f4:85:e2:a3:bd:6f:65:1f:6d:d1:24:67:ab:f3:61:
f3:38:b1:c0:ae:d1:0b:da:18:7c:78:9a:bd:87:52:
3c:13:4b:db:7a:47:2d:1c:3c:d5:a8:92:e9:50:98:
11:a5:14:28:97:2c:d0:60:7a:2c:40:8a:c3:40:39:
ec:ca:f7:2b:0a:f6:d7:9d:13:b7:b8:d1:47:26:88:
6b:8a:7c:a3:be:1d:a8:56:db:08:b3:84:1a:aa:80:
42:ec:80:cc:35:2f:47:84:a8:c1:f7:17:1c:2e:a3:
82:38:47:1e:ae:40:46:94:f3:5d:1f:af:40:6f:ac:
64:bc:d3:51:68:33:be:92:c7:99:a1:ae:35:e7:21:
6e:69:60:5c:08:11:d3:5e:90:7b:14:0c:c6:79:93:
94:8e:0b:21:83:15:d1:83:4c:9d:67:ec:ec:d2:80:
5f:e9:f8:17:26:dd:7b:bd:b1:39:8a:84:c4:42:1d:
8b:2a:f6:71:87:4f:75:00:fc:3b:48:f0:ff:ad:88:
82:17:b1:7b:19:9c:d5:6a:a2:31:96:f1:cf:7c:0a:
f3:82:6a:91:ec:fe:7d:52:98:7d:51:f5:32:59:66:
62:67:06:ef:4e:68:d8:08:30:46:dd:02:95:f8:fd:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CB:77:2C:C4:AA:F6:42:E5:17:97:02:4B:DC:B9:37:A6:67:0E:7E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/48t3LMSq9kLlF5cCS9y5N6ZnDn4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.214.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:4d:97:1c:39:b3:02:35:93:6e:16:98:df:65:16:dc:0a:2a:
ba:52:59:e7:e7:63:74:f4:1b:2a:fd:ee:4f:80:54:3d:84:79:
c6:42:ea:2a:50:d3:da:ca:b3:b2:18:cf:40:6c:d0:36:18:2f:
2b:e6:ca:e0:6c:26:c8:41:10:3a:70:db:18:dd:de:29:6d:f6:
1a:27:98:0a:0b:ea:9b:c2:3a:fb:2d:dd:b1:d1:f8:10:c3:bb:
f2:6a:01:71:a4:f3:fb:c3:c9:5e:0a:df:c7:8c:82:0d:86:db:
b9:1c:91:55:95:f7:87:66:09:c4:07:21:98:2e:70:20:f3:f6:
06:68:14:a7:35:a5:59:ee:17:a8:89:4c:9a:99:e8:e6:88:ae:
49:ee:de:cd:6a:da:f3:4f:a2:97:07:8f:de:84:06:c3:ea:45:
07:69:75:91:94:6d:85:a4:b8:e5:ba:d1:ac:c0:d7:44:27:ff:
73:12:78:24:2c:83:2a:7e:42:be:37:f8:d9:11:7b:03:ce:ef:
bf:3d:79:8d:7a:3c:b2:5b:05:2f:51:e3:9c:6c:fa:07:1d:47:
5a:2b:77:ec:db:2b:ee:79:25:b5:da:d0:6b:c3:a2:3b:b5:69:
97:20:b2:bc:9a:61:6a:ee:fb:eb:c6:f8:57:b3:ce:b3:bf:29:
93:6b:49:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org