Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HqJfLew9ECwhqcb_ujHqowy9HlQ.roa
File: HqJfLew9ECwhqcb_ujHqowy9HlQ.roa (raw, json)
Hash identifier: OSYKIZ42jCenYKgSCGZ23+DPU5UfHFgJFwd//NzDEF4=
Subject key identifier: 1E:A2:5F:2D:EC:3D:10:2C:21:A9:C6:FF:BA:31:EA:A3:0C:BD:1E:54
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0359
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HqJfLew9ECwhqcb_ujHqowy9HlQ.roa
Signing time: Thu 01 Jun 2023 17:56:34 +0000
ROA not before: Thu 01 Jun 2023 17:56:34 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.50.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857 (0x359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:56:34 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=1EA25F2DEC3D102C21A9C6FFBA31EAA30CBD1E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:66:d1:8b:3f:af:f1:16:39:de:c5:f7:20:
3a:bb:09:3f:46:b7:74:91:a0:e4:2e:82:4c:26:81:
d0:56:07:b6:35:92:74:d0:7d:94:e1:4d:5f:55:66:
b1:02:77:7a:64:cd:06:ba:b6:d5:79:79:62:d4:c0:
db:c4:50:da:06:97:7d:65:48:e4:3e:d0:90:2d:dc:
db:8a:e1:f2:fd:14:49:4d:74:fd:02:36:c2:3f:4c:
fd:c8:31:04:f2:64:9e:b4:a3:4b:5a:53:c0:c4:c0:
ce:eb:55:ac:2f:90:0c:61:f8:8c:da:1d:f5:72:1c:
12:1a:79:20:65:e8:1e:31:e8:67:bb:80:c6:68:f6:
09:30:a5:ec:95:2c:a2:b5:5d:64:7c:f9:6e:4e:17:
7c:28:17:78:85:be:71:2f:69:e4:47:07:a1:c5:54:
89:49:db:fd:54:d7:29:f1:ea:9c:dd:77:0f:c4:69:
07:22:2c:72:4e:cc:f6:e7:6d:04:6c:1b:fd:5c:75:
2e:3d:6e:95:be:1a:23:dd:24:08:8e:bc:96:bc:a6:
61:b0:03:d5:3d:85:a3:b0:a9:3f:ee:d1:42:75:3f:
43:53:2d:bf:ae:fc:47:b6:b4:1a:4d:b8:66:cb:4d:
2f:51:4d:fb:ee:28:7d:83:ac:79:04:06:fd:a5:17:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A2:5F:2D:EC:3D:10:2C:21:A9:C6:FF:BA:31:EA:A3:0C:BD:1E:54
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HqJfLew9ECwhqcb_ujHqowy9HlQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.50.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:3a:e1:c6:af:8f:c3:18:2c:a2:a9:94:f6:f9:2f:36:cf:50:
69:8b:e9:d3:d4:65:76:d8:27:91:7d:5a:8c:05:3b:30:89:2e:
bc:ca:d4:a3:ed:87:9d:2f:58:da:43:10:36:28:69:ae:55:97:
c8:cf:61:5d:50:e4:23:af:71:56:c5:da:57:9a:ab:a3:2b:df:
9d:c3:16:31:58:ea:a1:ac:06:57:5f:91:ea:5c:f1:08:6e:8d:
1c:86:c1:b5:53:49:30:2f:b8:3c:32:76:81:75:83:ac:2f:2b:
32:d5:6f:7c:09:e8:a3:64:8e:e8:b4:02:c2:1a:df:09:22:79:
cc:24:80:58:f5:1d:dc:07:a7:1e:04:82:59:f8:69:20:4e:0c:
4d:18:ab:9e:21:84:64:a1:fb:e4:5a:7a:8a:bd:7e:95:3d:04:
6d:7f:c9:a2:67:ae:01:d4:6c:2d:8a:9c:41:3a:2a:bb:ad:30:
ca:53:32:94:94:bd:ed:5d:eb:21:53:4f:e3:25:2e:50:fe:aa:
2e:76:4d:07:43:99:a0:c8:3d:80:48:1c:7d:f6:63:c2:44:14:
21:55:85:29:a5:d4:d4:10:1a:c7:83:54:b7:22:0e:22:da:c9:
e0:7a:35:8b:2f:03:49:32:f2:3a:7d:41:04:85:8a:eb:24:4b:
69:7c:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org