Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8ghrOUUq5W-JK2dBaqTy0D0ckSg.roa
File: 8ghrOUUq5W-JK2dBaqTy0D0ckSg.roa (raw, json)
Hash identifier: /dBHBJlZE4nap2Vta5n/0DQBSvtQe7fvmnC2pHFvrVk=
Subject key identifier: F2:08:6B:39:45:2A:E5:6F:89:2B:67:41:6A:A4:F2:D0:3D:1C:91:28
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0115
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8ghrOUUq5W-JK2dBaqTy0D0ckSg.roa
Signing time: Wed 24 May 2023 16:30:12 +0000
ROA not before: Wed 24 May 2023 16:30:12 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.73.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:30:12 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=F2086B39452AE56F892B67416AA4F2D03D1C9128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:32:6f:8a:35:e4:29:9f:75:76:d6:ec:ac:
52:4c:18:ee:6c:21:03:e2:44:f0:40:f0:be:3d:3a:
b3:ef:f9:6a:b5:fe:a5:68:91:3b:6c:0b:6a:26:c5:
7c:7f:9f:86:ad:ec:f6:82:37:1c:58:67:cf:b1:1c:
a0:23:ec:43:e8:07:db:ae:24:f0:4f:5a:5e:62:31:
95:73:97:cd:a9:35:b2:d0:49:11:df:b0:f9:77:90:
bc:f5:9c:c8:5c:f4:47:e6:00:00:40:5b:a3:a3:19:
68:df:c4:9e:d9:20:04:f1:09:1a:8d:8d:64:1d:dd:
68:3c:b3:d4:a0:e2:44:22:fd:7d:cb:07:0b:e9:a9:
e0:87:11:c4:59:1c:bb:02:3c:29:3b:04:b0:40:8f:
4d:c5:e9:1b:cd:9d:ec:f8:f5:d3:f4:db:d5:f7:f3:
84:b1:fe:19:44:67:0f:0b:24:59:0b:1a:0f:c3:9b:
c2:d6:59:d3:99:ea:48:a6:9c:1b:71:c1:57:84:db:
c4:89:83:09:57:5e:6d:72:26:c0:58:bb:ea:08:5d:
76:88:20:3e:b9:50:0e:a2:ae:05:ad:68:54:c8:56:
cb:f7:e7:49:b3:01:d5:7b:94:c0:32:1e:9f:3e:e8:
2d:a1:88:b4:aa:cd:d9:fe:6f:40:aa:14:37:c2:9c:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:6B:39:45:2A:E5:6F:89:2B:67:41:6A:A4:F2:D0:3D:1C:91:28
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8ghrOUUq5W-JK2dBaqTy0D0ckSg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.239.0/24
Signature Algorithm: sha256WithRSAEncryption
55:58:4a:58:cb:5f:e3:1f:70:91:71:38:03:9b:12:2e:7b:0c:
aa:5c:90:56:2a:36:91:bc:57:08:1e:90:d6:ac:54:04:33:e8:
aa:09:c1:0f:97:b6:e9:12:a5:e2:d2:71:ce:08:94:8f:ad:b1:
f3:00:82:a1:f1:e7:1f:61:7f:c1:e9:08:12:df:64:29:54:d3:
ec:21:1f:6d:f0:d3:ba:75:b8:ce:42:25:f2:96:73:f8:4f:c9:
d1:b7:68:9d:67:24:62:0e:90:2e:30:ab:eb:62:8a:7f:1e:56:
3d:a0:51:f2:48:4a:eb:15:9b:a3:11:42:fb:f2:a6:85:e6:88:
f1:ee:cd:27:c1:45:4c:2c:34:ec:5b:09:58:bd:52:4e:34:f4:
12:8b:08:f1:b0:c9:64:fe:48:9d:b9:42:5a:22:e4:fc:06:2b:
52:2e:b6:3a:5c:c1:99:9d:c0:36:37:0b:71:12:f1:e1:55:5c:
59:cb:f6:5e:2d:5b:2c:db:34:f7:c3:90:b6:bc:05:4d:7b:0b:
96:99:ea:3d:88:8b:38:29:54:09:c9:2c:5e:21:8f:5e:13:9c:
d8:26:7a:11:3a:34:1d:1b:ff:a5:b3:5e:2f:f5:60:8c:c1:a4:
77:af:ed:f9:ed:a0:8a:c7:11:57:98:bb:43:1b:7b:6b:ec:95:
c6:34:6a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org