Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NZtlkddxaOGql5aR3cm67wn-uAc.roa
File: NZtlkddxaOGql5aR3cm67wn-uAc.roa (raw, json)
Hash identifier: z+fSz0CBmexr6uQRKHKgRCVYrmKDyNFdSA5skazJmvs=
Subject key identifier: 35:9B:65:91:D7:71:68:E1:AA:97:96:91:DD:C9:BA:EF:09:FE:B8:07
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01A5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NZtlkddxaOGql5aR3cm67wn-uAc.roa
Signing time: Wed 24 May 2023 16:35:19 +0000
ROA not before: Wed 24 May 2023 16:35:19 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 110.163.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:35:19 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=359B6591D77168E1AA979691DDC9BAEF09FEB807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:b0:2d:99:8f:80:33:a3:48:ae:c1:b8:7f:
e2:d4:7c:8d:93:1f:79:e4:32:d6:ac:a7:a2:04:43:
ff:00:97:5d:c0:8f:58:1a:5e:02:17:2f:60:37:b3:
9c:8d:59:f1:06:6c:3b:54:6e:f4:e9:20:39:df:ab:
4c:00:91:62:02:0d:ac:b5:1f:91:6a:c6:c2:48:ce:
60:c0:82:56:83:f3:7a:3a:10:4b:28:bf:03:55:e3:
3e:91:d5:f0:01:d1:35:27:22:af:7a:07:04:c4:be:
0c:e7:6f:8f:69:bd:17:20:5d:c7:76:c6:86:24:12:
30:d8:21:c1:6f:78:38:94:ee:b9:19:6a:69:a6:91:
73:10:23:81:05:8d:c5:d4:e2:9b:f0:62:e9:bb:07:
bd:77:7c:dd:6e:cf:69:a6:3c:13:7b:c7:6f:94:cd:
b4:10:3f:60:99:23:2e:7e:c1:09:26:e4:30:65:6d:
c2:60:96:0d:20:ab:7c:25:93:91:56:b3:51:b8:3d:
0d:13:58:0f:cb:f6:40:58:0b:78:e6:4d:06:19:cf:
1f:8b:0d:96:1e:99:bf:d7:02:79:31:22:5a:15:42:
62:4b:18:b9:a1:fe:45:d1:a6:b1:f2:3c:3c:1d:06:
b3:a5:f5:23:52:2e:06:99:bf:38:da:db:7b:f8:b5:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9B:65:91:D7:71:68:E1:AA:97:96:91:DD:C9:BA:EF:09:FE:B8:07
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NZtlkddxaOGql5aR3cm67wn-uAc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.163.20.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:66:1c:e8:f1:af:60:3b:1c:14:8d:8b:a3:25:03:ad:3d:46:
fb:51:8e:0e:9d:15:24:ea:52:49:4b:ed:9f:a3:43:c5:95:50:
b4:26:7d:1c:b1:62:5f:57:8d:77:40:86:f2:6d:56:59:6c:71:
16:d7:0b:bb:84:3a:33:be:19:c8:13:8e:67:87:e4:f6:ce:14:
45:a9:6a:34:4b:85:68:9a:a1:13:69:fb:3e:9c:06:9d:e3:a3:
42:b5:74:82:e0:66:2f:e9:8c:4a:88:0d:a3:f2:44:c9:61:4a:
32:8f:fd:bf:d2:30:d5:f2:e6:48:3d:d8:c6:f9:1e:72:60:df:
ce:a2:0e:50:a5:55:52:72:58:21:82:0c:5b:7d:44:13:73:2a:
e4:cc:4c:9c:a6:8e:2e:54:72:ce:0f:15:48:93:a4:b1:56:fb:
dc:d3:f0:f7:e6:47:6e:3e:0d:ba:27:b3:f9:5a:84:02:16:99:
48:46:13:db:4f:a1:0d:f0:fa:c8:17:32:eb:4c:07:89:2f:d7:
f9:56:1e:1a:f6:6b:1c:28:45:ca:3b:f9:f5:50:8d:34:37:49:
9c:c2:56:49:01:8c:12:17:b4:bc:61:bc:bf:69:5f:d2:6f:79:
c1:4f:89:55:c0:1b:9e:15:ae:ab:3a:cd:d2:b1:f5:b0:43:86:
ce:52:aa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org