Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8JX-J9jIDcWA8Kx8ISsTMdmEkYA.roa
File: 8JX-J9jIDcWA8Kx8ISsTMdmEkYA.roa (raw, json)
Hash identifier: 1yZfQmgOHMpyyU2cy7eDiXEyfokvYKuYNSAVlBKm+jA=
Subject key identifier: F0:95:FE:27:D8:C8:0D:C5:80:F0:AC:7C:21:2B:13:31:D9:84:91:80
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0252
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8JX-J9jIDcWA8Kx8ISsTMdmEkYA.roa
Signing time: Tue 30 May 2023 16:32:30 +0000
ROA not before: Tue 30 May 2023 16:32:30 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.108.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:32:30 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=F095FE27D8C80DC580F0AC7C212B1331D9849180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:1c:4c:61:a3:80:af:09:20:7e:b2:fd:7a:
f5:95:cd:e3:0f:07:ca:43:de:de:8b:29:a9:c8:68:
a3:77:83:c3:06:91:c3:92:43:18:3a:fa:11:68:2c:
0a:a1:13:f7:a8:26:3e:8c:60:d6:44:5b:37:32:c0:
5a:9c:e9:ce:15:0b:58:08:33:7b:fa:d3:2d:89:1e:
33:1f:53:24:da:1f:3c:db:25:a8:87:57:f3:cf:59:
2a:55:6f:bf:64:47:c6:2d:7b:14:18:0c:3c:4c:0f:
20:4f:8f:d2:63:a1:0e:86:2b:74:60:db:a4:9a:e2:
b2:1a:b5:15:6e:c8:1b:93:2b:95:03:75:fb:2e:23:
f5:e3:ce:d6:96:cf:10:8f:0d:9a:29:3a:a6:78:12:
68:5b:14:0f:58:aa:33:88:a9:a0:64:d7:1b:91:d0:
5f:f4:0c:91:88:3b:d4:4f:5f:b7:63:88:cc:fd:ef:
d4:55:7c:de:68:b5:7d:c2:39:8a:d5:09:f4:61:3d:
dd:39:35:4b:f5:5c:1d:6c:10:52:75:94:26:89:4b:
90:e2:b5:62:13:3d:cb:66:17:25:9a:e8:24:e1:e3:
81:42:0a:9e:69:fc:d9:52:96:93:cf:f2:5c:8c:c7:
0f:fc:f5:f6:35:d9:f7:f7:92:40:5e:90:c5:72:3b:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:95:FE:27:D8:C8:0D:C5:80:F0:AC:7C:21:2B:13:31:D9:84:91:80
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8JX-J9jIDcWA8Kx8ISsTMdmEkYA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.108.128.0/18
Signature Algorithm: sha256WithRSAEncryption
51:44:c4:e9:dd:83:00:20:2c:d6:b8:62:d7:f5:83:c6:27:39:
b5:94:90:0c:a9:30:3c:00:d8:e8:cf:30:d6:8c:20:d8:45:9b:
56:68:44:72:10:d3:76:5f:41:ef:bd:f8:14:a7:7d:f0:83:16:
12:b2:4c:ec:ea:28:24:75:f2:90:3c:bf:86:e6:6c:ee:ff:7b:
32:f1:cc:50:b2:8c:aa:02:91:be:d7:e8:86:c6:26:5c:51:aa:
42:33:c7:3d:ba:7c:45:2b:fa:64:27:14:95:69:91:45:79:7d:
ad:84:fc:ea:bb:aa:38:bd:64:6f:28:fb:84:7d:02:2c:7b:b1:
9e:3c:13:42:c2:a2:05:cd:bb:dd:01:70:f0:bf:b6:18:33:14:
d9:a8:18:78:d2:b3:87:b8:c6:ec:10:1b:ca:62:95:5d:51:5a:
06:4b:63:8b:1f:ca:8d:65:ea:22:4e:0a:6e:b5:50:69:66:9f:
a2:f9:93:f8:fd:ef:a3:a0:8f:01:50:2e:db:e9:6f:eb:cb:0e:
2e:e2:e2:59:d6:1f:58:5a:db:3a:f8:e8:f8:c3:64:53:7c:1c:
39:8d:1b:e5:21:ef:59:31:67:74:71:be:f3:0b:42:0a:c6:73:
3c:d6:60:c7:08:3c:47:f5:7b:29:11:6b:b6:37:f0:b0:aa:ef:
7c:25:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org