Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/G98EWmcUE6s9d5PmZWbCauwxH3o.roa
File: G98EWmcUE6s9d5PmZWbCauwxH3o.roa (raw, json)
Hash identifier: wP2wZFkSJ+H4i7JQ0jqeWkrbd6QiEKRc66HoxRuRJoI=
Subject key identifier: 1B:DF:04:5A:67:14:13:AB:3D:77:93:E6:65:66:C2:6A:EC:31:1F:7A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01DB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/G98EWmcUE6s9d5PmZWbCauwxH3o.roa
Signing time: Wed 24 May 2023 16:40:37 +0000
ROA not before: Wed 24 May 2023 16:40:37 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:40:37 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=1BDF045A671413AB3D7793E66566C26AEC311F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:aa:56:a7:b8:e1:89:03:0a:2b:d3:0b:35:
3a:d7:fc:d7:49:f8:89:66:24:b7:fd:1b:0e:e4:78:
38:5b:09:a9:e5:65:15:bc:63:94:49:f0:78:26:c4:
2f:46:02:a7:42:d2:33:e6:71:ef:a5:67:6e:08:b9:
fa:24:ca:7d:ef:c0:5d:73:22:1e:e7:4d:1e:0f:1e:
c9:e7:9c:2e:55:1c:9e:cb:23:d1:cd:95:38:3a:0b:
71:32:e6:cf:7e:23:3b:5f:cb:20:fa:f7:90:73:5f:
70:fa:4b:e2:9c:5b:5a:f1:89:b3:ac:c0:53:91:dc:
f0:35:2c:46:16:84:63:2d:34:1f:8c:24:25:99:a4:
e4:a7:47:20:ac:22:3d:9d:1c:bd:1d:80:fb:2c:1b:
e6:73:ad:c4:f6:9a:35:b0:3a:7b:cc:e0:1b:17:a3:
4e:f2:05:9e:4a:92:7d:fd:ff:0e:57:e9:3a:b1:0e:
6f:f9:13:40:70:a0:28:45:2b:56:2a:14:d1:f1:24:
01:65:24:38:d7:0d:14:d5:c0:e5:12:14:8e:39:df:
55:dd:ad:86:97:4d:6c:79:5a:87:17:f0:00:91:84:
2e:7b:06:cd:52:56:31:dd:71:f9:76:34:f7:ff:00:
7b:ad:64:f9:c6:d5:ce:a5:4d:40:44:41:a8:ad:f3:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DF:04:5A:67:14:13:AB:3D:77:93:E6:65:66:C2:6A:EC:31:1F:7A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/G98EWmcUE6s9d5PmZWbCauwxH3o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.244.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:c5:ea:64:1a:45:be:8b:06:e1:74:6f:da:8a:1b:85:a7:8a:
f4:7f:90:02:1a:63:bf:16:6f:48:2c:cf:82:68:4e:29:8a:b6:
51:b5:09:23:7c:a7:2e:52:e2:a1:95:de:32:10:01:5d:03:5d:
89:81:64:50:12:96:54:c6:ca:e3:6c:9b:42:cc:67:d1:f8:88:
01:0b:22:08:cc:c9:9a:14:b8:9f:29:13:19:51:7e:46:5f:dd:
ef:96:08:3a:80:81:7b:0f:ce:d5:4b:88:f9:db:59:e1:f3:c0:
d1:bc:03:e2:6b:e3:76:e3:07:91:8c:d4:40:04:0f:9a:59:77:
3e:a9:c4:2e:ad:f6:e0:3f:ed:05:82:b4:5a:d8:fd:c0:b2:95:
5e:fe:83:be:95:8f:18:6e:66:ad:e3:ca:45:76:7a:42:3b:9e:
d7:9d:8b:8f:43:3a:04:c1:f9:cd:f2:1e:f4:a9:92:c1:b7:07:
7d:6f:e6:ff:6f:28:32:cf:a9:b2:09:98:65:17:02:2e:5b:4e:
18:fa:51:ac:1e:b0:e2:c5:ea:c0:80:49:96:75:48:df:05:22:
a4:fc:fc:4c:db:0c:ea:0e:a8:fb:57:28:9f:90:cc:1d:3b:e0:
9e:6a:59:77:01:10:ef:7d:51:34:b9:9b:0c:00:66:ce:6d:e5:
5d:3e:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org