Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MpYiIJEU5fgZy248dcafEdy7vG4.roa
File: MpYiIJEU5fgZy248dcafEdy7vG4.roa (raw, json)
Hash identifier: cf2E9f0vs/OJ2oRfKPN/geKW0AIeDMs9vCnhZmvX71s=
Subject key identifier: 32:96:22:20:91:14:E5:F8:19:CB:6E:3C:75:C6:9F:11:DC:BB:BC:6E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 4A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MpYiIJEU5fgZy248dcafEdy7vG4.roa
Signing time: Mon 27 Mar 2023 16:04:23 +0000
ROA not before: Mon 27 Mar 2023 16:04:23 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:04:23 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=329622209114E5F819CB6E3C75C69F11DCBBBC6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:a2:8a:4e:40:d6:17:43:b5:0d:1d:29:b8:
2c:9c:1c:e9:7b:48:d8:28:7b:36:00:7b:de:f7:56:
89:b9:96:53:80:93:e0:30:ec:95:93:29:97:f3:03:
84:9f:b3:e0:d2:b9:8f:a3:48:2b:90:7a:0c:b3:47:
93:7c:26:02:73:64:ed:3a:7e:07:02:58:e1:4a:86:
49:58:1d:51:ff:b3:47:95:fb:90:58:e5:b0:b4:bf:
3f:1e:c1:66:10:6c:25:38:d5:24:30:38:6f:c1:22:
cf:0f:12:c6:ab:4b:f5:a2:1d:a9:69:bf:10:5a:05:
de:0e:99:af:b2:6d:52:00:d9:c3:27:91:da:ba:6c:
30:70:7c:89:b6:ae:59:1d:4f:17:12:7a:86:3b:ff:
19:e3:a2:71:2e:98:df:e5:f7:44:b2:7e:c6:b7:fb:
ea:96:8e:7e:d8:16:07:f1:ae:e0:ee:92:39:0d:8c:
31:89:3e:ba:ad:af:d8:66:06:71:43:f7:88:92:e1:
3f:f4:cc:99:23:c8:7e:25:24:0d:2f:8a:7f:f7:91:
f3:47:f0:21:84:48:31:b1:b6:9a:41:18:3d:14:57:
29:4b:2f:29:2f:ca:a8:1c:d9:b0:80:cc:62:1c:23:
85:75:f2:dd:68:01:4f:44:d3:41:8c:2d:25:8f:3f:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:96:22:20:91:14:E5:F8:19:CB:6E:3C:75:C6:9F:11:DC:BB:BC:6E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MpYiIJEU5fgZy248dcafEdy7vG4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.96.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e1:96:51:bb:f3:a9:28:17:cc:e5:a9:4e:71:b7:4e:76:60:
06:f2:d5:f5:03:99:48:4b:43:01:29:61:d1:fd:b9:3b:26:4d:
c1:a9:ca:41:1a:c5:cc:cb:e0:58:26:19:d9:9d:4f:2a:9a:43:
c0:55:92:53:ad:0b:86:62:b2:33:de:62:9a:49:c7:ee:d9:c3:
a9:0a:d5:6d:c8:84:c7:5b:fe:bc:9e:5a:39:57:5e:92:74:42:
7a:74:b0:e9:69:b9:b0:b6:96:4e:a6:fe:10:2f:9b:88:fb:dc:
59:e4:15:04:46:2d:a5:20:5a:fb:90:74:a8:de:2b:88:c0:dc:
f7:83:1c:dd:3c:c6:36:97:d7:f5:38:88:08:82:92:cd:e3:42:
55:6e:c9:e4:5d:ca:14:31:f1:64:d5:03:49:6f:9f:bb:7e:01:
8b:d3:07:df:29:2c:55:99:db:73:3e:81:99:d2:a8:9c:fb:42:
71:fc:41:5f:f3:f2:b1:7a:7b:5b:d7:f3:79:88:65:99:3d:ff:
f6:42:26:f5:c6:6e:98:55:dc:b4:c0:9c:dd:52:48:5a:98:61:
30:7f:ee:3a:60:97:c4:8d:e5:50:00:60:bc:b9:64:4e:80:24:
a4:58:c1:85:cd:e9:68:5a:28:ca:df:29:dd:7c:88:85:84:8b:
c0:26:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org