Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OUrzU9XDrFiIEHBJHSsslFMmfp0.roa
File: OUrzU9XDrFiIEHBJHSsslFMmfp0.roa (raw, json)
Hash identifier: TQEunzrteCTY0JmOwdWYTRwzbyPjqH01INmu66J930Y=
Subject key identifier: 39:4A:F3:53:D5:C3:AC:58:88:10:70:49:1D:2B:2C:94:53:26:7E:9D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 4C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OUrzU9XDrFiIEHBJHSsslFMmfp0.roa
Signing time: Mon 27 Mar 2023 16:04:24 +0000
ROA not before: Mon 27 Mar 2023 16:04:24 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:04:24 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=394AF353D5C3AC58881070491D2B2C9453267E9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:2e:84:86:22:81:b9:7f:dc:0c:60:94:22:
10:ad:91:3f:16:e8:a3:db:31:af:4d:c1:d4:62:ad:
62:a0:d7:cf:54:2a:7f:4e:31:31:f1:17:13:12:b3:
35:ab:d6:59:ff:ec:bf:ed:7f:4a:ef:7f:dc:16:f1:
89:96:17:f9:a0:3f:43:97:5d:24:a6:cf:00:c1:c0:
f1:18:43:b5:c7:19:57:6e:91:d3:81:06:b5:7b:77:
16:a8:34:21:09:12:a6:36:21:64:5c:22:ab:b2:fb:
38:c9:a1:a6:b6:a6:bb:5a:1e:d0:21:09:30:fe:fc:
83:8f:ea:cc:60:a4:7c:b1:28:b1:13:f4:51:19:84:
8d:dd:3a:57:62:13:af:1e:a7:04:31:03:f0:3b:f2:
6f:a7:73:b8:ec:12:1d:16:18:1c:69:37:3e:92:6e:
35:fd:18:f7:87:c7:dd:49:48:ae:61:c3:d7:b5:6a:
f9:6e:50:f9:e4:99:9e:09:6b:77:56:2c:47:48:29:
e9:44:06:ea:5a:ac:0e:f5:d8:ed:8f:35:b7:d7:74:
95:4c:04:22:82:fc:44:9d:de:12:68:69:1c:e1:82:
ca:ed:a9:26:68:8c:41:0d:c6:47:41:b3:73:ee:be:
7c:c5:a9:c5:f3:96:5e:ec:b7:7d:e3:29:05:f2:71:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4A:F3:53:D5:C3:AC:58:88:10:70:49:1D:2B:2C:94:53:26:7E:9D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OUrzU9XDrFiIEHBJHSsslFMmfp0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.124.0/22
Signature Algorithm: sha256WithRSAEncryption
63:2c:f1:12:39:ee:db:b3:6b:f2:64:42:de:8d:78:74:b2:d1:
e1:3c:09:d4:32:68:f7:96:aa:85:c8:6a:05:7c:fd:ed:d3:2b:
ac:1d:6e:88:d7:16:5c:e1:7c:7e:4b:49:d2:75:bb:da:ae:01:
9c:91:fa:68:e1:44:67:9f:a2:69:3b:3d:03:ee:86:c3:f8:64:
86:50:38:e4:3c:bf:cd:db:41:0f:a2:2c:31:eb:87:c5:ec:99:
35:5d:f9:ee:b1:ff:15:a9:ed:a7:f2:ad:cd:54:01:bf:de:de:
d3:ce:b9:08:9a:93:13:51:8d:0e:9d:e3:b0:d4:36:bc:c2:4a:
b3:28:49:1f:cc:61:19:5a:23:43:5c:30:e4:b8:31:2a:ff:a4:
21:6c:15:b4:fb:27:9e:8c:e3:cc:eb:98:56:c9:b5:d8:43:2c:
5c:90:bd:f6:30:5b:04:dd:9a:8b:e6:a1:b2:12:ed:01:4d:bc:
6f:5c:93:1b:5d:8d:20:e7:b5:7c:bf:0f:13:cc:82:1f:94:ea:
e5:93:17:66:1e:65:79:45:7c:f6:be:90:ca:c4:36:c9:80:67:
34:b4:bf:7e:71:e3:db:40:89:60:e2:2e:d1:17:44:d2:d1:10:
ae:90:86:8b:63:82:5c:be:61:69:f5:f6:ae:2a:81:9d:1d:20:
fc:ff:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org