Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4xzryXDwPj_3HKJZJtYtq3GaFSE.roa
File: 4xzryXDwPj_3HKJZJtYtq3GaFSE.roa (raw, json)
Hash identifier: JULxmQHhqDOpfjHpR7cNz0+7aCtOXlyFlFGfe8S8LFw=
Subject key identifier: E3:1C:EB:C9:70:F0:3E:3F:F7:1C:A2:59:26:D6:2D:AB:71:9A:15:21
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0294
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4xzryXDwPj_3HKJZJtYtq3GaFSE.roa
Signing time: Tue 30 May 2023 16:36:29 +0000
ROA not before: Tue 30 May 2023 16:36:29 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:36:29 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=E31CEBC970F03E3FF71CA25926D62DAB719A1521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:a1:66:c0:b8:51:cf:c5:f6:fe:c2:64:73:
bf:24:f4:9a:56:ee:37:07:ca:10:ed:eb:b8:92:48:
ff:37:dd:15:eb:28:04:42:14:53:95:ad:e5:fa:ee:
a2:5a:a9:b7:25:0c:1b:50:d6:b2:ba:00:49:77:70:
75:3a:46:a6:14:bb:29:40:b7:0b:66:f9:94:3c:0c:
f4:22:f4:47:1c:67:7d:98:01:1f:32:15:3a:c2:b0:
bf:78:e5:64:fb:04:83:66:ac:f8:2b:e5:9a:66:ef:
ff:e0:0b:fe:71:37:30:ef:51:2e:2c:a9:cb:05:6d:
a1:90:e9:2a:97:15:37:9a:b8:ce:cc:1a:ea:18:ec:
03:6b:36:f8:8f:c0:a5:1b:75:38:c6:c6:86:8b:65:
48:93:05:f0:0a:a9:69:de:09:15:7f:69:ff:8d:33:
cc:57:52:71:54:4f:49:ed:43:96:9e:99:dc:9c:a1:
1e:9d:6b:5b:43:b5:3d:6b:91:15:76:38:61:44:de:
d2:23:97:7c:f6:3a:c6:f3:04:e2:ee:ad:ca:dd:84:
6b:1a:22:12:90:0c:66:f1:e3:89:3c:c0:a4:ca:40:
3d:4d:be:96:02:be:c8:d9:a5:e0:6d:85:d4:0c:71:
27:e9:4c:57:41:71:d9:4a:4c:9b:38:88:18:c7:62:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1C:EB:C9:70:F0:3E:3F:F7:1C:A2:59:26:D6:2D:AB:71:9A:15:21
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4xzryXDwPj_3HKJZJtYtq3GaFSE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.56.0/22
Signature Algorithm: sha256WithRSAEncryption
97:fd:26:01:02:2f:16:a9:d9:14:5c:ba:64:70:5d:8e:4c:cc:
80:46:98:8a:4a:6a:06:b8:ec:f0:ab:c5:39:19:79:4a:2f:70:
75:88:13:c1:c2:2c:40:45:95:2c:d2:e2:d0:2d:c9:d8:ad:da:
8f:28:2f:bd:2e:55:c2:8b:95:8a:6e:90:69:70:ee:06:ac:fb:
08:52:6d:78:62:db:4a:36:fd:23:cb:8f:cc:68:08:45:03:5d:
f2:29:f7:56:79:da:1d:99:1b:1f:5d:9a:cf:4a:35:cd:29:11:
e8:09:4e:83:09:27:35:f0:84:84:92:7d:41:d1:b5:7e:e8:9a:
6b:83:7d:de:ec:f9:ef:a7:d9:49:69:56:4e:23:23:93:ef:79:
1b:73:75:0f:cb:e7:3b:f8:bd:57:a3:ee:23:81:ad:89:4c:28:
ba:0b:f9:0a:38:64:5b:e5:8e:65:53:56:6e:58:3b:c0:d6:8d:
9e:22:73:97:9e:d7:72:bd:45:0b:48:f9:28:48:56:6b:07:aa:
33:50:06:9a:49:42:2e:97:c5:32:3d:82:bf:16:6d:90:7f:8b:
f5:79:b2:9f:da:87:39:39:6f:6e:41:c4:ff:ba:ee:59:44:c1:
31:26:e4:53:95:72:00:b2:06:2d:aa:e8:a2:2e:c5:21:8e:75:
bd:c4:de:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org