Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MbgNj-2wVmvJnL11qq6iUovjHUE.roa
File: MbgNj-2wVmvJnL11qq6iUovjHUE.roa (raw, json)
Hash identifier: 9mDMRHN0GDcvq8bb/ap0p082YCP5CzZGzByqCddYR7Q=
Subject key identifier: 31:B8:0D:8F:ED:B0:56:6B:C9:9C:BD:75:AA:AE:A2:52:8B:E3:1D:41
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0357
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MbgNj-2wVmvJnL11qq6iUovjHUE.roa
Signing time: Thu 01 Jun 2023 17:56:33 +0000
ROA not before: Thu 01 Jun 2023 17:56:33 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855 (0x357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:56:33 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=31B80D8FEDB0566BC99CBD75AAAEA2528BE31D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:87:d0:a5:79:b8:58:20:76:cf:0f:cd:92:
3b:dc:7f:3f:fc:7a:a1:cc:a4:90:66:80:ac:6b:81:
97:88:27:4b:c6:43:7a:ef:5d:40:10:db:17:85:1c:
65:2f:14:d4:a9:5f:3b:43:0a:e9:12:d6:ec:61:6c:
ef:96:e5:9d:42:b0:e8:c1:10:82:15:2e:d9:63:99:
5e:70:40:1d:83:b4:34:36:f4:b9:ed:02:39:7b:5b:
5a:5a:29:03:79:21:01:10:b7:fa:c2:15:68:96:17:
b5:3a:e3:81:d3:42:33:28:1b:af:c8:ff:c8:6d:02:
28:d8:c4:f4:12:45:75:56:28:5a:01:16:f7:21:7b:
27:98:18:0d:24:cf:15:09:ad:fe:99:90:d6:14:bc:
cf:00:79:8f:e2:04:01:9e:88:1e:55:d3:36:cf:3b:
fc:c3:1e:bc:16:a0:d0:9d:8c:b0:e7:6b:71:07:b1:
ef:5f:36:96:c1:07:1b:7e:62:93:03:23:37:27:25:
0e:3d:14:85:96:13:8a:0c:dc:8e:20:fe:d9:12:0a:
e2:ab:76:9d:23:c2:42:9c:59:7c:24:be:d5:a1:5e:
f3:b1:99:44:8d:be:2d:32:8b:59:37:89:e2:da:39:
2e:56:d2:7f:57:1f:dc:d7:65:a8:59:f9:f8:94:aa:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B8:0D:8F:ED:B0:56:6B:C9:9C:BD:75:AA:AE:A2:52:8B:E3:1D:41
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MbgNj-2wVmvJnL11qq6iUovjHUE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.215.0/24
Signature Algorithm: sha256WithRSAEncryption
26:8f:94:e5:41:bf:fb:dd:da:81:dc:b8:10:90:7c:4b:c2:98:
8a:9a:8e:19:96:57:3d:73:90:9b:65:58:a4:e2:74:18:06:94:
c0:2c:fc:27:dd:99:fc:97:0c:61:a8:a6:10:ad:be:34:f4:62:
41:04:9f:97:43:5e:66:c4:88:ce:98:c4:38:00:ca:d4:72:4f:
a3:c6:d2:44:17:db:bd:3a:bb:b3:07:a3:47:76:6c:d9:b1:7f:
70:e8:32:bd:10:5e:82:e8:5f:0d:e0:59:00:68:dd:06:fb:57:
83:de:53:e5:7d:73:e1:f1:0f:b5:19:70:5c:2c:08:2e:db:8f:
57:e5:6c:4c:82:00:eb:0f:6a:b8:80:53:fb:f6:df:83:2f:83:
b9:24:24:02:e3:75:1f:9b:5e:2a:0c:44:d6:e3:f2:ed:a3:91:
9c:70:0d:3c:6f:a9:04:cd:34:fc:6c:44:04:bd:f0:fc:40:31:
35:da:31:1f:ee:f8:28:d1:07:33:45:7d:24:3d:8d:ca:f1:3a:
fa:e7:89:76:e3:f6:8a:a1:a2:7a:32:1d:88:59:fd:9b:f6:f3:
b3:37:32:94:a5:94:6a:bc:db:21:69:b5:4d:ea:09:c3:f9:b0:
35:ac:47:24:97:29:b2:a1:56:29:82:9f:a0:0c:4b:6a:21:8b:
a6:20:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org