Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CEUdfSuCqGQ_IJW6R2ZZhCRonog.roa
File: CEUdfSuCqGQ_IJW6R2ZZhCRonog.roa (raw, json)
Hash identifier: 9eBkARRePP9sqI64DojA97WjSLOGdbAjfWHx2xN+9g8=
Subject key identifier: 08:45:1D:7D:2B:82:A8:64:3F:20:95:BA:47:66:59:84:24:68:9E:88
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 010F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CEUdfSuCqGQ_IJW6R2ZZhCRonog.roa
Signing time: Wed 24 May 2023 16:10:17 +0000
ROA not before: Wed 24 May 2023 16:10:17 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:10:17 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=08451D7D2B82A8643F2095BA4766598424689E88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:c6:09:fe:c3:4f:e8:6a:0a:3a:14:40:7c:
f5:03:47:0e:68:1a:f3:78:ab:3f:dc:a9:e8:07:ef:
59:8f:69:32:13:71:f3:1c:c0:4b:4d:8f:fe:0b:f6:
49:1f:f4:26:1f:3d:db:cc:9e:e3:e0:e4:6d:35:f9:
73:34:16:ef:79:b8:71:6e:16:35:7f:37:fa:43:eb:
a2:51:bb:6d:25:f1:01:eb:0c:9c:8b:6b:2b:62:15:
3a:a0:a1:bf:aa:f1:19:08:4d:42:a0:5b:58:55:5c:
a5:ce:5d:fc:1f:6c:60:30:cb:2e:c5:37:5d:49:4e:
34:51:11:e7:74:81:05:1f:3c:37:6d:aa:94:33:03:
c6:74:e0:be:df:87:2d:a3:39:07:ed:6a:bc:41:d6:
15:88:36:d3:46:e8:e1:8b:80:e3:b1:85:42:43:0b:
18:38:29:1a:b0:df:02:63:33:6e:fa:9b:5d:f8:81:
c4:2d:bd:89:fe:2b:51:51:b5:ce:73:38:2e:51:7b:
95:0c:8f:65:dd:35:a3:4f:0d:fa:cb:d2:71:b4:9f:
f6:51:0c:77:1f:c2:88:b7:80:31:93:d9:17:85:ab:
59:a6:6d:09:3f:a5:ac:d9:dd:a1:b8:cc:66:ac:99:
bf:3d:21:04:96:59:4b:43:8f:d8:1c:97:b9:75:f0:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:45:1D:7D:2B:82:A8:64:3F:20:95:BA:47:66:59:84:24:68:9E:88
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CEUdfSuCqGQ_IJW6R2ZZhCRonog.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.152.0/22
Signature Algorithm: sha256WithRSAEncryption
54:23:ac:08:68:9d:df:d1:eb:ed:1a:3c:2c:fb:70:09:9d:76:
be:64:2b:e6:f5:7d:0f:73:51:bc:a0:d8:13:5c:71:55:36:a8:
04:db:84:d9:ba:77:6c:33:7c:b6:2b:e4:35:8c:c1:92:39:db:
d1:fe:6b:de:5f:83:7c:f9:54:2e:8c:f8:da:7b:42:6c:c7:19:
69:69:0c:2a:b8:45:6b:5f:01:c2:0f:4c:72:b7:ae:fe:ef:e4:
9e:7f:3a:64:dc:34:0c:ec:6b:7d:c6:e2:9f:b9:73:8c:8c:4e:
e2:8a:9b:16:76:6b:6b:e9:c1:44:84:9d:e5:6a:46:a7:7c:98:
30:40:34:cc:aa:98:6b:bf:11:37:86:4d:6b:34:9f:de:2b:b6:
8e:dc:5a:56:df:bb:cd:d5:8e:d9:40:85:9f:51:62:fc:7e:13:
50:d2:69:fe:52:b6:fb:37:38:3b:bb:c7:eb:d1:aa:85:36:13:
9d:66:80:f5:c9:f3:b9:75:c4:8c:34:7b:49:1d:ff:e3:ba:59:
bb:9c:3b:2f:55:1d:d9:c6:cd:57:23:dd:a9:72:33:e2:f8:0c:
f8:f3:91:41:c1:86:39:65:ce:8a:49:cc:dc:b5:bc:91:89:ca:
3d:c7:a3:0b:52:06:55:4e:93:73:fb:fb:73:06:27:69:fe:22:
bd:1d:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:34 2025 by rpki-client