Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6NdpWc6boEqYpe4fMnEkaTAYML0.roa
File: 6NdpWc6boEqYpe4fMnEkaTAYML0.roa (raw, json)
Hash identifier: zTkAjlqrkB3g7aFZowcmAg+8lgZ2DqOhApAaaRGDZCM=
Subject key identifier: E8:D7:69:59:CE:9B:A0:4A:98:A5:EE:1F:32:71:24:69:30:18:30:BD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 032C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6NdpWc6boEqYpe4fMnEkaTAYML0.roa
Signing time: Thu 01 Jun 2023 16:07:28 +0000
ROA not before: Thu 01 Jun 2023 16:07:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:07:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=E8D76959CE9BA04A98A5EE1F32712469301830BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:f2:6e:86:48:88:b4:cf:2e:c9:51:16:40:
ab:c5:76:dc:30:08:9a:62:83:67:d8:81:3e:a7:4a:
0d:02:96:26:b8:4f:c2:0d:ba:c6:f2:2d:fc:fc:5c:
df:16:9f:63:f0:67:7b:5f:a9:fb:87:1f:7d:08:4b:
c2:6b:31:66:96:04:77:c3:02:ad:58:97:a7:f7:89:
33:53:69:72:0c:a5:b8:c0:8b:c0:a2:24:a3:ff:2e:
2b:80:4f:56:ad:cc:54:22:a3:44:d0:81:10:81:7f:
61:59:8f:e8:20:41:6a:b1:fe:41:8f:80:af:ab:de:
78:b3:cb:d1:bc:d6:fa:c2:a8:68:cc:10:bb:83:19:
a0:f4:1c:ca:1b:51:b0:e6:61:51:32:91:17:21:f8:
74:29:e7:d1:ab:98:c7:e2:75:72:5a:de:d7:a3:7f:
ae:5b:86:3e:4d:dd:cb:bd:fa:d3:42:86:60:7d:ea:
fd:23:b6:59:be:b0:b8:55:f2:ec:1d:60:9d:0d:92:
18:59:74:23:28:c9:5d:71:9a:74:fa:44:1f:f9:d9:
cd:45:06:15:f0:82:f2:11:a8:94:88:1b:88:bb:c3:
91:0a:45:78:52:ec:a2:e4:d9:99:f8:30:af:cb:a7:
c6:07:e7:5b:36:bb:d8:ed:92:e8:e4:fa:b3:fd:97:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D7:69:59:CE:9B:A0:4A:98:A5:EE:1F:32:71:24:69:30:18:30:BD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6NdpWc6boEqYpe4fMnEkaTAYML0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.216.0/22
Signature Algorithm: sha256WithRSAEncryption
78:17:e1:6c:b3:ff:72:39:00:97:bf:fe:bf:80:f6:38:9b:21:
a1:ea:e6:ff:b7:4e:92:a9:7f:a3:13:44:dd:34:68:ad:77:b7:
c0:eb:22:46:52:c8:ea:46:a7:a5:b7:c5:a0:3f:c9:88:12:2d:
fe:90:25:57:4d:b6:02:c1:25:aa:39:25:f1:35:45:6f:fe:0a:
16:45:bd:42:99:85:34:10:1e:a1:c6:32:a6:d7:15:59:5c:5e:
ac:9a:9f:cd:a8:f3:36:73:ba:06:80:e0:a6:b1:44:01:73:df:
92:8c:2f:fe:2c:a8:00:a6:f9:d6:a7:97:2e:73:38:e2:bd:0f:
37:a2:b7:ea:c1:f3:af:4f:46:99:96:53:5a:ef:a0:2c:37:f4:
84:2b:e7:0e:13:d8:ac:35:9f:81:54:e4:9a:c0:7d:e9:17:67:
a6:b7:a6:57:3e:5f:44:1f:c8:b3:44:fe:67:ee:c1:28:ec:6e:
53:ed:2b:d4:de:60:06:0f:c7:51:47:37:ed:4f:2c:57:50:f9:
09:60:69:66:49:0e:f6:3e:d6:e8:10:5c:ce:d4:34:89:59:c3:
b4:98:cd:99:30:70:d7:35:0f:90:01:dc:6b:95:a6:0d:64:5f:
c7:cd:a3:d1:f6:f9:8b:d6:a6:56:1b:47:89:ee:4e:8e:e9:1a:
eb:df:db:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org