Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AQSoiflElQP-T3wrUepnjSdMyMo.roa
File: AQSoiflElQP-T3wrUepnjSdMyMo.roa (raw, json)
Hash identifier: Tll108VdM96qcng590DmmusT9vOBe7erEgmZvku3Fzo=
Subject key identifier: 01:04:A8:89:F9:44:95:03:FE:4F:7C:2B:51:EA:67:8D:27:4C:C8:CA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 02B8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AQSoiflElQP-T3wrUepnjSdMyMo.roa
Signing time: Tue 30 May 2023 17:17:33 +0000
ROA not before: Tue 30 May 2023 17:17:33 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 17:17:33 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=0104A889F9449503FE4F7C2B51EA678D274CC8CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:75:2a:18:1c:5c:a9:fa:dc:06:7a:5d:5f:
20:8f:fa:5f:23:af:cb:18:27:7f:70:8c:f1:4f:13:
4d:f1:21:74:51:e1:c0:65:6f:f4:4e:8d:a5:2e:53:
5f:a8:57:1e:77:b8:89:0b:c7:ef:b0:fc:20:4d:a4:
fa:5d:e3:63:06:bf:b4:a5:35:82:3b:85:75:4c:5d:
1a:17:81:b0:da:ab:73:b8:7f:fd:cb:f2:27:70:18:
e3:c7:ed:0a:9e:f5:0a:7a:7b:92:b8:ce:29:c6:5d:
32:9c:6b:0a:57:7c:c0:1c:56:87:69:71:c3:cb:7d:
33:5f:f6:fd:59:39:58:6a:d8:2d:bc:31:c0:13:e8:
f0:da:42:a0:80:9b:84:0a:b1:33:c7:11:ed:59:35:
d1:95:4e:bf:82:c2:34:82:45:74:07:b1:28:ce:a4:
16:54:74:7a:73:a9:12:51:54:e5:aa:29:55:f2:3e:
c4:fb:da:8e:44:f9:24:67:f5:8e:9c:6c:30:f6:e5:
a2:ee:83:d8:5f:57:9e:07:49:8c:58:9b:dd:a8:da:
98:ce:6b:7b:4e:3a:57:18:02:3e:72:05:80:33:c4:
ac:2c:b1:4e:9c:de:30:35:4b:11:81:c6:28:10:4a:
e9:9b:9c:a0:e6:06:20:5e:2d:90:e9:07:cd:b6:18:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:04:A8:89:F9:44:95:03:FE:4F:7C:2B:51:EA:67:8D:27:4C:C8:CA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AQSoiflElQP-T3wrUepnjSdMyMo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.11.0/24
Signature Algorithm: sha256WithRSAEncryption
76:79:cf:cf:37:ed:d0:49:bb:ff:9e:eb:d3:94:72:03:ce:78:
bb:65:5d:a3:a0:80:83:59:48:96:35:58:47:34:fc:ea:8e:c3:
ca:45:49:ce:a3:e6:2e:5a:39:37:a1:5f:39:b0:b7:f2:ef:74:
2c:44:09:53:b6:91:2d:6b:87:b4:81:bd:2a:9e:c9:48:27:93:
c4:84:ba:62:b2:3c:4d:d9:b0:dc:65:f6:13:11:7c:43:f0:d5:
57:76:58:d1:69:28:6b:f3:41:ad:d7:f0:7b:49:b8:fb:3a:41:
e6:12:f8:63:9b:cd:1f:0f:bb:da:e6:50:8c:ca:c0:e1:e1:34:
e3:fb:d5:41:f9:dc:e0:7d:b0:7a:16:6f:6d:19:e2:fa:46:84:
89:8a:bc:9a:c4:cc:41:2b:3d:6d:61:39:14:0c:05:59:47:72:
26:37:13:a7:34:19:b4:f9:79:a7:6a:68:65:3e:ce:ed:62:61:
a4:ed:a5:e2:6b:ae:1c:bb:fd:d3:b8:85:57:52:09:3f:33:56:
31:9d:47:cc:e2:08:e1:bf:ec:9b:81:79:7a:e8:f4:9c:72:0b:
5d:e7:28:81:20:9b:1a:21:16:33:79:d5:97:58:90:c8:be:d9:
c6:f5:f2:06:2d:1b:b4:ac:d8:61:ad:37:44:31:fe:91:e7:b5:
9b:97:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org