Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/E8fAAlaCPtQiuIDHtlUQLloNhl4.roa
File: E8fAAlaCPtQiuIDHtlUQLloNhl4.roa (raw, json)
Hash identifier: w9vRtr1gO7VfF21tMNDvvX0Ghm+ScDvxYrRgOrJZkao=
Subject key identifier: 13:C7:C0:02:56:82:3E:D4:22:B8:80:C7:B6:55:10:2E:5A:0D:86:5E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0307
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E8fAAlaCPtQiuIDHtlUQLloNhl4.roa
Signing time: Thu 01 Jun 2023 16:05:27 +0000
ROA not before: Thu 01 Jun 2023 16:05:27 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 775 (0x307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:05:27 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=13C7C00256823ED422B880C7B655102E5A0D865E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:98:a0:01:0e:7f:72:08:57:92:d5:c6:3d:
0c:05:9b:6a:e0:cb:f2:e2:7d:a8:15:05:d7:3f:02:
9f:de:cd:7e:5e:96:0a:85:a3:dc:84:86:9c:d7:b7:
26:7c:e8:28:07:42:35:75:48:e7:05:8c:bf:9d:21:
cc:5e:e0:b5:5c:d2:ed:f1:6b:2b:7d:20:f8:7a:de:
20:84:0b:35:9a:9d:fa:90:bb:1d:7b:92:7b:99:e3:
8b:78:cc:68:8c:ae:9e:6a:2c:5c:55:08:d9:15:8c:
dc:84:f2:fe:7b:31:34:3e:24:8a:87:c7:4d:34:83:
f9:d5:2d:96:e8:c6:15:5c:2e:ab:96:68:d4:48:ac:
1c:a1:a8:91:4d:6e:b5:fa:25:fc:1f:b4:b3:7c:45:
e8:25:7f:bb:50:b1:47:0f:5b:f6:6a:83:7d:9d:fe:
3a:c1:79:4a:09:58:d8:38:28:2c:7d:bc:ab:1a:a2:
f0:2e:93:be:c6:1a:e9:45:aa:3a:53:12:ef:78:e1:
78:60:57:09:86:bf:51:07:ca:58:7e:9f:cc:79:91:
8d:0d:0e:ab:dd:31:ab:34:17:8c:30:f9:1b:af:18:
f1:da:ea:b0:4f:d1:4f:d8:72:30:1f:75:e8:2d:22:
9a:1a:b1:7f:52:47:7f:b8:03:00:72:c6:90:67:79:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C7:C0:02:56:82:3E:D4:22:B8:80:C7:B6:55:10:2E:5A:0D:86:5E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E8fAAlaCPtQiuIDHtlUQLloNhl4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.240.0/20
Signature Algorithm: sha256WithRSAEncryption
58:d9:c4:57:5f:03:f6:8f:12:59:98:34:9e:74:7f:93:05:de:
6a:36:0c:cb:43:7a:58:89:4b:62:1e:f4:78:0b:83:b6:0c:56:
aa:4a:21:af:a8:18:7e:38:69:4f:1b:c6:ec:86:b2:58:07:fe:
16:6d:8d:d6:c2:58:1e:a2:a7:bd:e7:60:e4:62:83:60:3d:38:
7c:5f:0e:85:0a:91:12:5e:59:48:f0:7d:e9:65:94:76:7c:70:
25:a9:8c:1d:a0:b6:40:cf:46:9b:c9:09:09:6a:cd:59:a5:cc:
3c:b0:40:02:b6:79:19:b0:12:6c:40:bf:51:a3:31:89:45:21:
a6:3e:c9:33:57:ac:20:cc:57:c9:61:a0:90:ed:90:ff:49:71:
b0:9d:27:3a:f1:7c:bd:41:eb:14:40:d8:f0:59:76:13:b8:23:
47:d7:22:72:b7:d0:3a:31:ae:64:81:ad:80:2b:a8:a3:cc:2d:
52:59:e3:08:9c:f6:7f:b3:99:a9:35:07:ae:72:ba:7e:e2:6a:
26:ad:e2:9d:0e:0f:03:c1:31:8a:55:80:99:18:eb:2d:e7:d6:
38:c6:06:d9:49:ab:85:d0:5b:64:c5:3e:41:23:f0:81:14:c8:
a5:31:37:2e:b8:6f:39:7b:5c:e4:11:2b:1d:7c:e9:e0:f1:e4:
2e:c9:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org