Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EP6t4YfSva_uqoW0xt6xT1aUH28.roa
File: EP6t4YfSva_uqoW0xt6xT1aUH28.roa (raw, json)
Hash identifier: eVKWKtjBJbZ+js9PJcXm9jdxJwLXAlvclnPJ9KpkSZI=
Subject key identifier: 10:FE:AD:E1:87:D2:BD:AF:EE:AA:85:B4:C6:DE:B1:4F:56:94:1F:6F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0387
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EP6t4YfSva_uqoW0xt6xT1aUH28.roa
Signing time: Thu 01 Jun 2023 17:57:37 +0000
ROA not before: Thu 01 Jun 2023 17:57:37 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903 (0x387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:57:37 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=10FEADE187D2BDAFEEAA85B4C6DEB14F56941F6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1c:2a:67:bc:0e:d9:09:77:ca:74:3b:6c:5e:
ff:cd:5c:0c:31:29:87:57:78:e1:c1:e6:fa:8e:af:
9d:5b:e2:84:c5:77:3d:c6:cb:a7:dd:45:bb:6f:75:
8f:a7:ac:99:9f:a6:3a:75:c3:94:52:02:37:d4:44:
a3:8e:10:f1:91:94:9d:a8:01:47:35:51:95:35:76:
4f:32:d6:2c:02:3a:19:00:e9:61:44:37:c1:c5:77:
66:3a:1c:a5:40:e2:88:42:54:56:d8:ce:a4:87:01:
5d:6e:b3:5b:95:1c:c4:37:52:e8:17:f4:7d:4e:b0:
08:e9:24:1a:e5:b0:19:60:aa:92:95:93:26:c5:ff:
2e:ed:6d:99:0d:f6:62:1c:1e:45:71:41:16:57:8f:
f1:50:12:92:62:30:d5:eb:27:05:dd:23:5a:02:b6:
7e:b5:79:22:4f:cd:03:ee:9a:f7:da:79:fe:b6:66:
1d:d5:6c:20:a6:c8:f5:cc:6f:a5:37:a6:b5:40:58:
05:49:a1:1e:6d:b7:5f:b0:af:d5:ba:04:31:7d:09:
4b:dc:4e:06:af:73:26:21:9a:1b:66:02:03:db:be:
e4:bc:79:d4:41:75:f3:29:6a:d7:8d:f1:ec:34:7f:
2e:ea:2e:4e:23:0f:d4:ae:47:cb:aa:20:4f:d2:aa:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FE:AD:E1:87:D2:BD:AF:EE:AA:85:B4:C6:DE:B1:4F:56:94:1F:6F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EP6t4YfSva_uqoW0xt6xT1aUH28.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.236.0/24
Signature Algorithm: sha256WithRSAEncryption
82:a0:56:f7:d8:da:cf:f6:db:9b:ba:7a:92:ba:74:a8:b4:ca:
26:c8:19:9d:50:34:e1:e5:f1:cd:22:6c:95:86:00:25:f3:6f:
15:ec:b4:b1:93:66:cf:f1:f1:33:98:06:90:05:00:58:bc:a4:
d7:ce:dd:78:b1:5e:4b:8e:b0:9d:fe:b6:6a:a6:0b:7c:93:ed:
9a:66:54:85:8e:5d:7a:42:78:0e:73:60:64:6b:97:1d:29:98:
78:da:c8:bc:5d:d0:bc:75:32:bd:11:37:6b:81:e0:8d:fc:f6:
06:ce:06:65:27:c5:9a:21:62:72:c8:f3:1e:a6:61:2f:29:b1:
3a:ab:a7:0d:10:b6:f3:40:43:b3:20:e5:e9:10:d7:f3:ce:f4:
03:33:0f:ab:37:ff:87:13:40:34:a7:a1:cf:05:78:51:a4:a3:
15:9a:80:40:fc:f6:5e:ce:e7:f1:b4:d0:88:54:99:ed:16:55:
e2:19:06:48:95:77:03:79:fa:46:98:ea:c3:a5:14:ba:f7:5a:
68:d5:ac:66:a0:43:bb:bd:95:aa:ce:51:71:07:43:86:40:ff:
2a:05:ae:79:3c:ca:5f:a0:45:7d:48:f0:51:53:8b:42:24:ee:
55:9d:79:d1:ab:9b:24:4a:b5:04:9a:82:8e:95:5b:aa:3f:c5:
0b:76:23:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org