Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/E9fKVSeelcRYOG4VxUKdoZYkImI.roa
File: E9fKVSeelcRYOG4VxUKdoZYkImI.roa (raw, json)
Hash identifier: RZKc1mutoEmBaC5R7pe9oxXCmmFvpw7q/elZMGR42N4=
Subject key identifier: 13:D7:CA:55:27:9E:95:C4:58:38:6E:15:C5:42:9D:A1:96:24:22:62
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 035A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E9fKVSeelcRYOG4VxUKdoZYkImI.roa
Signing time: Thu 01 Jun 2023 17:56:35 +0000
ROA not before: Thu 01 Jun 2023 17:56:35 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858 (0x35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:56:35 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=13D7CA55279E95C458386E15C5429DA196242262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:51:ed:7e:59:f6:bb:e5:cf:5e:8c:91:52:
fe:c5:8f:8e:e6:dc:22:5c:ec:ef:a3:cd:9c:b5:36:
63:b3:7d:d8:87:4c:8e:ba:c9:91:ff:f4:92:3b:d7:
53:cc:cc:66:0a:3d:1c:4c:10:cd:35:d3:02:e2:9c:
c7:41:cf:61:20:d0:15:84:e2:f3:a2:9d:c8:0f:b0:
bf:61:6e:04:95:86:77:63:4d:7e:8e:50:bd:69:10:
e4:31:3e:7f:64:63:6b:3a:d1:ed:f7:b7:dd:49:0e:
ab:de:a5:d1:d3:6d:ca:49:b9:68:49:6c:d5:9d:83:
1e:f2:b8:f9:70:4c:18:4a:ef:5e:95:b1:bf:d6:c7:
4a:cc:34:cd:be:8f:0a:de:29:25:9b:e0:7b:2b:22:
7f:c1:89:d0:d4:f3:39:5b:74:9e:c3:31:84:0c:a1:
5c:22:82:ac:6a:1a:de:91:b5:77:51:94:c4:a8:96:
29:22:43:ff:4a:c2:2a:91:56:78:d8:0e:2f:c2:e8:
e0:bf:af:9b:ac:41:df:1b:25:1d:2e:62:be:53:68:
dc:48:a9:67:f0:c6:bf:88:e4:e4:29:db:97:2c:32:
eb:37:69:65:6e:43:86:03:c9:1e:03:55:65:f2:c7:
fa:c1:6c:48:72:bf:a7:98:2d:9b:90:a8:57:4f:83:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D7:CA:55:27:9E:95:C4:58:38:6E:15:C5:42:9D:A1:96:24:22:62
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E9fKVSeelcRYOG4VxUKdoZYkImI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.128.0/19
Signature Algorithm: sha256WithRSAEncryption
43:78:c8:80:40:11:94:09:50:f4:b1:db:56:b8:6d:3a:06:25:
ac:98:33:e6:08:05:c1:1f:c6:56:96:32:cf:66:b8:14:8f:0c:
33:9a:d2:2d:18:5c:d8:75:76:45:df:8c:af:5c:95:b7:ac:d0:
1d:a1:47:6c:fc:5d:9f:41:25:26:c7:af:73:97:c6:bf:51:f5:
07:87:9c:97:82:fa:8d:57:b4:ca:89:3d:1f:16:3d:2e:ac:71:
1c:f0:ee:7b:9a:b8:37:17:ed:51:b7:f9:96:92:ee:27:1e:47:
47:1b:8b:ec:24:11:ec:7e:9c:29:38:35:31:08:fb:64:69:06:
20:87:a5:5e:44:e9:1d:54:35:fb:11:08:3f:10:22:48:79:c9:
a1:2e:95:8b:21:9b:43:30:cc:c9:c2:15:5e:a1:f2:73:51:27:
86:3b:a3:96:ea:ea:8e:a3:90:16:62:40:df:67:f2:4d:ee:de:
e2:c2:22:4d:d8:ed:c3:d3:59:56:e6:02:7a:96:d7:20:e8:1a:
e2:49:38:37:63:3d:60:96:33:39:90:bf:a4:27:43:d6:d7:25:
b4:3f:48:3a:0f:97:21:a1:c5:e2:09:27:d8:1f:47:51:2c:b5:
e1:34:77:60:5b:6f:91:2c:7b:bc:4c:4a:f9:b6:1d:7b:95:ef:
bf:78:1a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org