Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IOKNExoAMDb9EeM9FQfe8wNmwqw.roa
File: IOKNExoAMDb9EeM9FQfe8wNmwqw.roa (raw, json)
Hash identifier: /ykADMZD8/6Bud3PRfYkRikngQWG1GbmHY94gcklf+w=
Subject key identifier: 20:E2:8D:13:1A:00:30:36:FD:11:E3:3D:15:07:DE:F3:03:66:C2:AC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0290
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IOKNExoAMDb9EeM9FQfe8wNmwqw.roa
Signing time: Tue 30 May 2023 16:36:28 +0000
ROA not before: Tue 30 May 2023 16:36:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.103.18.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:36:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=20E28D131A003036FD11E33D1507DEF30366C2AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b4:73:0b:d6:fc:65:8a:e2:28:2f:df:fb:4e:
73:6e:e1:79:7f:65:47:fb:af:66:29:ee:ef:4d:e2:
c1:2c:8f:7e:f4:2f:31:8b:4d:20:78:3b:f9:64:82:
89:3d:e8:41:3a:6d:07:9f:c6:bd:df:91:c5:ba:91:
3d:7c:e7:3c:10:f0:a9:0a:60:da:62:b4:9d:cf:0a:
e1:63:95:e6:7c:9b:90:e7:60:35:82:f2:64:41:9e:
f7:b4:65:6e:63:1c:48:ae:6d:e6:c8:d6:dc:5f:37:
ac:96:99:73:4b:2a:67:f3:92:0c:38:3c:4c:d7:9f:
5b:79:17:e4:b1:47:49:d1:03:79:63:d9:3e:51:1c:
e1:6b:63:9b:1d:a5:0b:34:6f:52:5f:d9:15:40:ef:
f6:85:19:85:e2:8b:0f:96:b4:99:f5:1c:d1:bc:2a:
fa:08:b0:e1:bd:d1:5d:ad:89:f3:25:be:3e:9b:28:
09:1a:08:c4:b4:62:9d:c4:1a:d2:85:84:44:34:43:
f2:4b:06:ee:b6:27:ee:ba:a0:7e:56:4b:e7:68:5e:
9c:32:de:3e:19:01:18:ae:66:c0:c9:d3:05:8b:4f:
b4:ff:29:fd:2c:f4:3a:17:74:6d:b9:90:31:63:59:
7b:92:ed:d2:a2:85:ac:28:cf:b5:56:85:b9:f5:7c:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:8D:13:1A:00:30:36:FD:11:E3:3D:15:07:DE:F3:03:66:C2:AC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IOKNExoAMDb9EeM9FQfe8wNmwqw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.103.18.0/23
Signature Algorithm: sha256WithRSAEncryption
30:0c:56:ec:f6:b9:7a:2a:85:89:b5:2d:9b:99:17:b4:b9:43:
77:36:af:45:6c:90:af:2c:59:c0:c8:b3:41:f9:42:9e:c8:8e:
77:d2:bb:48:65:17:56:0a:f8:04:b1:d9:6b:64:de:9e:7a:a2:
bb:d4:f4:25:c7:a5:10:21:09:67:c7:fe:61:2c:88:23:24:78:
ab:cd:ec:d3:c9:c5:5a:14:93:80:f9:bc:d0:79:73:eb:88:70:
b9:3f:8d:df:e8:e9:b9:03:9a:f1:e8:c2:8b:69:0a:bf:62:5e:
02:d0:7d:ca:88:90:10:95:1c:fa:1e:17:dd:7a:c6:90:6a:4a:
12:db:29:9f:9e:d2:35:40:b8:40:d1:ef:a2:6c:1c:a7:6b:60:
5b:dc:55:4e:00:55:7e:79:0f:4f:0c:b9:32:16:3a:ef:d4:4c:
03:c5:65:c7:96:23:b9:d7:a3:0e:68:a1:4d:fa:44:29:e4:13:
2c:cd:7d:6c:64:1e:d9:da:d2:fb:1d:f4:06:21:65:26:86:1b:
34:84:27:3b:9a:bc:99:e4:c3:99:2e:fc:01:63:f5:e2:1a:1d:
d0:cb:2e:51:b3:dd:53:04:05:ac:af:50:6c:67:14:ae:f0:d4:
2e:57:96:28:b4:11:a6:24:d6:92:fd:41:e5:c4:e7:be:eb:3e:
48:11:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org