Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BE9qeIXGYA2kJcu6NGzkN8c693s.roa
File: BE9qeIXGYA2kJcu6NGzkN8c693s.roa (raw, json)
Hash identifier: rq4LFHwfvXPFJihuI9le4Kw74Ua3EcCoRLeI32Gd+YE=
Subject key identifier: 04:4F:6A:78:85:C6:60:0D:A4:25:CB:BA:34:6C:E4:37:C7:3A:F7:7B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 71
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BE9qeIXGYA2kJcu6NGzkN8c693s.roa
Signing time: Mon 27 Mar 2023 16:06:44 +0000
ROA not before: Mon 27 Mar 2023 16:06:44 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:06:44 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=044F6A7885C6600DA425CBBA346CE437C73AF77B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:f0:cc:09:87:b7:dd:04:4e:55:43:cf:3a:
43:e2:1e:94:9d:aa:7d:bb:fa:93:ae:5e:be:40:e0:
73:2b:0c:cc:e9:a5:bc:22:0e:8f:73:d9:b4:91:b7:
46:53:ee:0a:92:96:73:93:9d:99:6d:fb:1e:c0:fa:
b9:b7:f5:e3:0f:ac:23:6f:0c:1c:dc:d0:2f:66:cf:
58:64:c6:af:cb:79:ef:88:f6:71:1f:1e:29:54:74:
0e:95:ac:01:4c:1f:b1:72:b2:78:b0:f7:8c:06:c0:
18:98:dd:b1:70:7d:f0:3a:46:19:59:9f:6c:35:0c:
2a:bb:89:1b:49:4e:d2:1c:25:9a:f4:87:9c:8e:f4:
96:a3:42:87:15:e1:6d:72:53:86:25:64:d6:fe:47:
7d:30:4e:ab:92:91:71:d7:6f:2a:c5:ad:b9:3d:82:
dc:76:2f:78:e0:b2:c3:bd:14:e2:b2:11:f8:02:a0:
40:f8:c3:52:42:b2:d1:d5:c0:d3:e5:c8:96:4b:21:
b9:2e:7b:a6:4e:7c:82:b2:06:f1:5d:3e:8b:4f:e1:
e2:b7:fb:30:80:1e:5a:18:fa:9e:76:e1:74:ee:d4:
a0:22:06:ad:f5:45:85:69:1d:4a:bf:1c:a7:59:88:
9a:5a:b0:d3:fd:15:78:32:0d:cd:60:dc:bf:cc:c5:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4F:6A:78:85:C6:60:0D:A4:25:CB:BA:34:6C:E4:37:C7:3A:F7:7B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BE9qeIXGYA2kJcu6NGzkN8c693s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.72.0/22
Signature Algorithm: sha256WithRSAEncryption
47:89:bb:c6:c3:e2:39:01:c7:46:d8:fb:73:5b:69:b1:c6:e1:
91:00:ec:cb:d3:47:c2:0f:43:cb:51:70:72:0d:43:30:80:87:
58:f8:86:5f:ab:4b:7f:f1:7f:3a:26:87:f9:d1:ee:f3:17:48:
e0:5f:73:0a:36:a0:1e:17:a4:de:a7:55:88:56:13:29:9c:67:
8f:bb:b4:c4:59:a3:74:01:8e:98:d8:41:4c:e8:af:29:6f:99:
2b:1d:28:26:a2:ba:8b:c6:fd:59:68:fe:83:91:17:6c:72:e9:
4e:1b:e9:7c:4c:13:83:91:03:8f:0a:36:d9:44:d1:d9:40:ec:
0f:15:4e:83:1b:b4:24:be:40:95:3a:da:94:9f:e2:e1:ba:ff:
6f:d7:48:22:bc:74:a2:1e:45:14:af:50:3b:60:9e:93:a2:6a:
b9:db:6c:28:9e:98:41:d1:eb:4e:93:b8:45:98:b2:c2:cf:cc:
7f:f9:02:73:1e:bb:38:53:77:f7:aa:2a:4f:17:dc:59:10:72:
33:24:54:8d:37:ac:71:81:27:7a:2c:45:2b:37:29:3c:90:2e:
eb:b1:58:71:ff:13:4d:a8:a5:f3:f5:a8:9b:91:8e:d7:f7:d7:
75:46:43:d6:14:4b:a0:35:2e:0d:ed:41:79:55:f8:23:8c:a4:
40:37:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org