Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Po42Ka5tJRPslrudtw0U3cIoDKk.roa
File: Po42Ka5tJRPslrudtw0U3cIoDKk.roa (raw, json)
Hash identifier: VhwypO7GO8sKFOUFGJ3/TaK3XTq30wqX/eE+wogtVho=
Subject key identifier: 3E:8E:36:29:AE:6D:25:13:EC:96:BB:9D:B7:0D:14:DD:C2:28:0C:A9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0178
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Po42Ka5tJRPslrudtw0U3cIoDKk.roa
Signing time: Wed 24 May 2023 16:33:21 +0000
ROA not before: Wed 24 May 2023 16:33:21 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:33:21 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=3E8E3629AE6D2513EC96BB9DB70D14DDC2280CA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:9a:e8:fc:a9:52:03:b3:2f:fb:64:34:90:
0b:35:d4:4d:fc:a1:59:53:84:4e:14:55:70:97:4a:
cc:ab:aa:f0:e8:21:e3:91:82:1f:e4:1a:f5:70:25:
af:80:86:b1:63:41:22:0e:2e:16:e0:23:ae:d6:56:
22:7c:e5:61:29:7e:2c:42:2c:a5:9f:74:63:97:1a:
38:fb:6b:0c:4b:7e:3f:0c:97:e5:47:3c:05:42:e2:
e0:d1:a3:b3:84:8b:f0:45:2e:f7:07:d9:42:c4:f0:
12:ae:53:37:e8:50:6b:24:51:03:6d:c9:f4:7d:b3:
f5:ae:25:6c:69:c8:d8:e6:d3:e8:c9:28:26:cc:96:
7a:d1:8f:35:9a:ba:a4:2d:1d:9c:e0:ce:a1:c8:c9:
b9:9b:27:b4:1f:c8:8a:f3:3f:2a:99:31:69:b6:b7:
34:2d:89:fe:58:16:7b:ef:c4:76:63:72:6c:81:3f:
45:29:84:0e:ba:de:3b:2f:9d:58:42:a8:87:9d:33:
29:21:ba:9a:5c:a3:ff:81:0c:19:5d:ea:0d:75:7b:
4b:75:2c:4d:ec:5f:48:58:ce:ce:8f:88:bb:63:f0:
9d:40:73:6e:ec:73:38:4d:ba:90:74:aa:c6:01:2f:
d6:6a:3a:48:8a:d4:86:1b:d1:22:63:3f:ae:19:45:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8E:36:29:AE:6D:25:13:EC:96:BB:9D:B7:0D:14:DD:C2:28:0C:A9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Po42Ka5tJRPslrudtw0U3cIoDKk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.88.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:00:42:40:65:0e:4d:22:05:04:d5:49:78:dc:8c:25:2d:a5:
c3:7b:fd:5e:50:30:bd:37:d4:a2:56:f9:a5:87:01:87:f1:e1:
da:1d:77:b7:18:3d:2e:7b:54:37:dd:bf:a5:db:78:19:40:5b:
f1:eb:a1:76:d1:2a:68:ef:f2:70:26:a6:19:d3:05:d3:4c:ba:
ec:39:77:19:d3:a4:e1:e2:d4:df:22:cc:46:0b:c3:87:a7:88:
46:be:61:09:c3:30:75:d5:01:2a:20:59:6f:22:0d:0a:5c:09:
a8:48:bf:fe:91:6a:c7:40:16:f5:c7:3e:ee:03:a1:a6:03:72:
53:16:56:ac:e8:a6:b7:55:65:e5:a2:85:0e:d9:65:67:cc:1e:
f1:05:79:a9:40:a1:7a:f4:df:ab:0e:16:d5:31:8d:e1:e0:47:
ca:98:3d:c2:9f:46:4a:e4:d3:b5:34:44:b9:f2:57:af:3f:b4:
2e:0a:2a:c2:11:a7:a1:30:d3:a2:09:64:35:c7:a5:cc:91:90:
ce:10:92:e5:fd:91:f6:32:db:47:63:04:34:8e:ba:df:5f:ff:
c3:d5:15:b2:2a:fe:40:92:98:c9:5f:77:0b:8d:ee:d7:07:b8:
52:51:b0:f5:e2:84:95:4d:8c:41:43:7e:f2:83:c7:e5:32:48:
a0:2c:cb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org