Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IRsczdhc9mqgVHxTMTovHLg1erY.roa
File: IRsczdhc9mqgVHxTMTovHLg1erY.roa (raw, json)
Hash identifier: zbqyp/BJ6NEMi4T4m0WbcrztBuh2D/lS1CRLcrqKBAg=
Subject key identifier: 21:1B:1C:CD:D8:5C:F6:6A:A0:54:7C:53:31:3A:2F:1C:B8:35:7A:B6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0380
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IRsczdhc9mqgVHxTMTovHLg1erY.roa
Signing time: Thu 01 Jun 2023 17:57:35 +0000
ROA not before: Thu 01 Jun 2023 17:57:35 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.48.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896 (0x380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:57:35 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=211B1CCDD85CF66AA0547C53313A2F1CB8357AB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:09:74:90:70:2e:67:9c:06:51:36:0b:9e:
75:5f:f2:30:f6:dc:9c:ab:6b:c8:cd:74:c9:e6:79:
bf:50:42:32:fe:62:6e:e2:56:3c:83:92:50:d3:48:
f6:66:07:c0:6b:33:2b:b0:3c:47:c5:7a:f9:f3:eb:
98:14:9b:a8:48:f4:ca:6d:73:7e:80:1d:2b:fc:a8:
d7:7d:10:2e:94:05:00:d3:d8:cf:5c:f8:98:f0:72:
84:af:48:03:f5:cc:dc:0a:2b:74:f7:e4:74:40:59:
3b:13:87:60:58:ec:31:ce:ec:73:f1:ac:41:4c:34:
64:63:1a:97:57:7e:7a:9d:f5:6d:56:d3:a1:87:74:
f7:f9:b1:65:ba:e5:92:70:c6:b5:c1:3c:ac:42:c1:
79:ec:63:d1:a4:96:c6:ec:32:f1:41:11:dc:99:78:
6a:90:cb:17:f0:96:a7:00:3f:bb:34:bc:62:90:c0:
1e:3b:c5:22:99:1d:bd:68:b3:0e:9f:54:df:86:55:
85:62:0f:d4:bb:76:11:d6:56:54:ce:9a:f8:a9:24:
05:37:fe:78:45:cc:37:12:3d:6c:37:8c:ae:39:9c:
fc:68:93:1e:c0:70:0d:eb:89:86:5f:01:4f:fb:29:
39:62:72:67:19:4e:33:de:a5:19:12:15:7b:09:f1:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1B:1C:CD:D8:5C:F6:6A:A0:54:7C:53:31:3A:2F:1C:B8:35:7A:B6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IRsczdhc9mqgVHxTMTovHLg1erY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.48.0/23
Signature Algorithm: sha256WithRSAEncryption
31:33:2b:8c:02:62:e9:b6:2b:5e:a7:17:be:9b:a6:ab:fc:be:
8a:03:be:05:3a:75:65:5f:49:92:0d:d6:1a:b9:7c:42:dc:fe:
5f:d4:42:13:21:4c:54:ab:0b:ec:93:7b:a5:ee:24:6a:3a:be:
7f:db:4c:e1:81:94:72:0b:c2:07:0b:0d:2a:15:f0:2d:df:a3:
b7:f9:97:a4:51:4d:cb:34:bb:6a:b4:86:7e:bf:9f:23:64:7d:
49:e6:02:ff:06:3f:2c:47:97:d5:0c:14:8a:f8:37:79:13:fb:
b4:e5:be:f8:e5:b9:2a:0e:4a:0d:b1:27:a4:79:b6:18:80:6f:
bf:23:55:2c:e6:31:c4:6a:df:ba:36:25:9e:95:13:c5:f6:f0:
b4:d9:57:1e:74:0e:27:5b:bb:c8:a5:74:4d:ce:51:4e:23:a5:
81:ab:18:3a:33:52:90:aa:41:3c:80:53:e0:77:df:3e:53:f5:
3e:37:c2:28:14:5b:5f:3e:b7:5f:ea:91:39:b0:2a:21:72:b7:
37:b3:5a:17:95:7a:2c:f2:c3:1f:23:fd:af:1d:7a:e2:10:fc:
22:70:90:5e:5b:be:00:a1:78:2f:d8:e4:7e:e1:7b:ff:b9:8c:
d4:d2:a9:f5:22:49:4a:bf:69:c1:22:d4:6a:55:c1:db:15:f4:
9a:5a:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:09 2025 by rpki-client