Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ojn4fFoUmVJVF9oVa5lZ53sdVhs.roa
File: Ojn4fFoUmVJVF9oVa5lZ53sdVhs.roa (raw, json)
Hash identifier: CuuMxlJm2UlBunFUPzT+IraiNk6fPfvq5CPe/faj3Rg=
Subject key identifier: 3A:39:F8:7C:5A:14:99:52:55:17:DA:15:6B:99:59:E7:7B:1D:56:1B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 03F3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ojn4fFoUmVJVF9oVa5lZ53sdVhs.roa
Signing time: Tue 06 Jun 2023 16:03:48 +0000
ROA not before: Tue 06 Jun 2023 16:03:48 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1011 (0x3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:03:48 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=3A39F87C5A1499525517DA156B9959E77B1D561B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:54:f4:33:0e:d8:a0:50:d2:f5:e1:e6:13:
46:85:cf:3a:df:59:98:0b:48:61:24:ac:48:8f:69:
9b:79:cb:0b:83:35:8b:72:3f:ac:da:a3:ec:3a:fc:
9e:02:05:20:5a:c5:50:a4:26:2b:14:4f:12:8c:7c:
de:62:8d:0d:44:70:6d:9b:50:44:e3:41:cf:67:09:
bf:95:be:d3:d3:13:ac:f9:47:be:59:d2:3a:76:01:
0a:2f:8b:22:4d:b4:f2:ee:eb:bd:12:49:5f:8a:79:
88:dc:d0:68:0a:c7:53:ac:d0:e2:4b:af:07:cd:f0:
1e:b4:d7:f6:39:ef:8d:58:ae:ec:e3:b7:c6:55:ad:
32:4f:62:02:46:7c:ca:96:9d:11:80:78:32:60:10:
21:9a:de:b0:3e:e1:30:9e:19:c7:89:57:9e:51:d4:
6f:c3:f8:81:dd:ad:aa:a8:7e:6f:c5:12:87:84:f8:
73:97:fc:34:e4:db:98:91:73:ee:d3:5e:20:77:2d:
66:65:61:9d:1c:09:97:e2:55:34:ee:27:b0:9a:05:
53:40:86:75:e1:c9:c9:cf:cc:96:55:af:04:54:93:
bd:72:05:fd:70:8a:40:92:a3:29:1f:21:e2:63:c5:
80:1d:17:92:2f:7b:15:64:f6:96:7e:20:8a:95:6b:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:39:F8:7C:5A:14:99:52:55:17:DA:15:6B:99:59:E7:7B:1D:56:1B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ojn4fFoUmVJVF9oVa5lZ53sdVhs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.216.0/21
Signature Algorithm: sha256WithRSAEncryption
41:aa:19:53:e6:65:de:a5:70:ee:47:72:ee:2e:dd:fe:46:10:
68:c0:e8:42:1f:33:48:75:c7:1c:68:2c:66:e7:ec:6c:f3:0f:
c4:0b:3a:75:74:5a:05:2e:94:f6:6e:39:d1:52:6c:0a:e5:41:
44:0e:d5:34:ca:87:02:0c:fa:d2:cb:38:f7:fd:52:6c:30:5f:
c8:cf:ab:ce:96:a1:d7:b6:db:c0:0c:f4:6a:81:42:43:82:a2:
75:29:c2:0c:d5:42:6f:2d:c3:c4:85:1c:07:8a:3f:fe:ce:e6:
1b:0d:cd:08:1e:5e:fd:c8:3a:0a:ea:22:b7:4f:97:44:e8:bb:
19:21:c0:b3:74:9e:7f:24:26:dc:b0:f1:ee:5a:f3:dc:cb:07:
ec:17:63:44:8c:72:0a:ec:c2:5c:79:98:8c:d4:00:09:e1:7a:
12:4c:3e:26:08:db:c8:b5:bb:a4:8e:33:d5:2b:d5:35:19:08:
4c:40:57:3e:89:4e:df:5a:ed:66:be:8a:06:c7:e1:67:b9:d9:
23:eb:6e:1e:38:12:18:f3:c7:8e:08:1a:12:e2:47:4d:55:64:
83:13:61:5b:65:25:1e:df:66:bc:74:43:0c:08:18:44:5d:ad:
df:5b:54:cf:f9:74:79:65:07:85:a1:13:c4:24:49:5b:16:55:
f2:13:06:05
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx
NjAzNDhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDNBMzlGODdDNUExNDk5
NTI1NTE3REExNTZCOTk1OUU3N0IxRDU2MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSClT0Mw7YoFDS9eHmE0aFzzrfWZgLSGEkrEiPaZt5ywuDNYty
P6zao+w6/J4CBSBaxVCkJisUTxKMfN5ijQ1EcG2bUETjQc9nCb+VvtPTE6z5R75Z
0jp2AQoviyJNtPLu670SSV+KeYjc0GgKx1Os0OJLrwfN8B601/Y5741Yruzjt8ZV
rTJPYgJGfMqWnRGAeDJgECGa3rA+4TCeGceJV55R1G/D+IHdraqofm/FEoeE+HOX
/DTk25iRc+7TXiB3LWZlYZ0cCZfiVTTuJ7CaBVNAhnXhycnPzJZVrwRUk71yBf1w
ikCSoykfIeJjxYAdF5IvexVk9pZ+IIqVa51FAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUOjn4fFoUmVJVF9oVa5lZ53sdVhswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L09qbjRmRm9VbVZKVkY5b1ZhNWxaNTNzZFZocy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMBS9gwDQYJKoZIhvcNAQELBQADggEBAEGqGVPmZd6lcO5Hcu4u3f5GEGjA
6EIfM0h1xxxoLGbn7GzzD8QLOnV0WgUulPZuOdFSbArlQUQO1TTKhwIM+tLLOPf9
UmwwX8jPq86Wode228AM9GqBQkOConUpwgzVQm8tw8SFHAeKP/7O5hsNzQgeXv3I
OgrqIrdPl0TouxkhwLN0nn8kJtyw8e5a89zLB+wXY0SMcgrswlx5mIzUAAnhehJM
PiYI28i1u6SOM9Ur1TUZCExAVz6JTt9a7Wa+igbH4We52SPrbh44Ehjzx44IGhLi
R01VZIMTYVtlJR7fZrx0QwwIGERdrd9bVM/5dHllB4WhE8QkSVsWVfITBgU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org