Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/70rmgDlzAZKWvvlXBLfSJp40e9Q.roa
File: 70rmgDlzAZKWvvlXBLfSJp40e9Q.roa (raw, json)
Hash identifier: nX/hS8gOF61kqU1bNMaOJARuIoNRFPAYynkEepodLuk=
Subject key identifier: EF:4A:E6:80:39:73:01:92:96:BE:F9:57:04:B7:D2:26:9E:34:7B:D4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 039C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/70rmgDlzAZKWvvlXBLfSJp40e9Q.roa
Signing time: Thu 01 Jun 2023 17:59:28 +0000
ROA not before: Thu 01 Jun 2023 17:59:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924 (0x39c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:59:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=EF4AE6803973019296BEF95704B7D2269E347BD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:89:0b:7d:97:3a:88:9f:24:76:1f:7b:16:
07:3c:c7:1a:cd:a4:2e:8c:62:73:35:bb:34:85:5a:
1d:9f:bb:a1:85:2d:66:dd:74:1e:98:76:3f:b1:3c:
26:33:b3:62:5d:a7:71:c2:8b:1e:fd:50:30:09:41:
07:df:57:37:15:9e:7c:c2:ac:58:8e:7e:8c:1c:58:
e2:23:e4:c2:af:58:2a:54:e1:a5:1f:05:c9:fb:46:
70:18:5f:9f:54:01:22:45:41:ca:a2:5a:4a:63:de:
2e:78:5d:4e:0c:7e:7e:94:97:ad:9c:fd:3e:56:07:
73:77:a3:5e:1f:4d:b6:55:bb:05:5a:ab:c3:ba:c9:
73:21:ff:11:cc:80:ed:09:62:03:48:1b:a8:1c:50:
5d:87:df:7c:b2:2b:cc:0f:bb:13:62:7d:05:f0:21:
28:29:50:a9:d2:27:7a:30:05:b9:0c:5c:96:c6:2a:
fd:eb:af:b9:f9:24:f6:ad:04:7e:80:05:d3:fa:2b:
b8:61:27:e2:e8:ff:00:47:36:a2:f3:98:2b:5b:95:
69:dd:07:5c:3b:a3:77:bc:f4:19:cc:94:b9:b3:8c:
10:12:d0:6d:59:19:be:70:34:a8:70:f8:4b:08:a0:
69:94:c6:9f:aa:0d:f0:b8:2d:12:2f:48:5a:ce:73:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4A:E6:80:39:73:01:92:96:BE:F9:57:04:B7:D2:26:9E:34:7B:D4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/70rmgDlzAZKWvvlXBLfSJp40e9Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.206.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e9:93:c0:41:75:c3:c1:f2:30:a8:4d:01:81:1f:a6:2f:62:
44:79:29:29:ed:9c:1e:9d:41:f2:e4:87:39:0c:75:07:a2:5a:
a7:7d:85:bc:64:00:4f:f3:d6:b1:f9:ed:51:bc:e3:b4:29:d6:
e5:ab:70:18:d4:a9:99:09:85:37:66:bf:3b:46:2b:3b:cf:56:
9e:67:05:ef:13:57:ed:e6:fe:53:a3:fc:67:66:cf:f7:52:fa:
cf:62:b0:6f:05:36:00:71:82:30:9b:97:31:1f:5c:eb:18:50:
3c:f5:2a:a4:d0:5b:67:b0:62:0b:12:b4:11:28:cd:ec:aa:01:
bd:02:81:4f:89:30:72:a0:63:6f:59:52:79:9a:52:ad:51:24:
37:d2:b7:98:e6:90:7c:e1:69:f8:d1:8e:73:04:24:de:d9:c6:
2d:db:84:e9:0f:5b:d9:17:cc:f7:98:8d:01:fc:b6:3e:11:a6:
22:ff:61:99:31:f0:3f:c4:d8:41:e5:b3:f7:e1:56:6b:ac:10:
84:e3:fa:d3:18:93:7d:8f:db:97:0d:ec:ab:46:aa:f2:53:4d:
a6:47:c3:7c:92:81:1d:d1:92:71:7b:ca:4f:ad:36:33:7a:12:
28:f6:b0:d6:82:3d:f9:81:ae:36:5f:b9:13:fd:b2:62:7a:97:
7f:c7:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org