Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pwoo3RZsCWQC9llphKAZ594XNh0.roa
File: Pwoo3RZsCWQC9llphKAZ594XNh0.roa (raw, json)
Hash identifier: C7BJMhv6U+tjNt7nTU8qADUhMQMr8ZCtMInwpLY6N/Q=
Subject key identifier: 3F:0A:28:DD:16:6C:09:64:02:F6:59:69:84:A0:19:E7:DE:17:36:1D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 026E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pwoo3RZsCWQC9llphKAZ594XNh0.roa
Signing time: Tue 30 May 2023 16:34:18 +0000
ROA not before: Tue 30 May 2023 16:34:18 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:34:18 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=3F0A28DD166C096402F6596984A019E7DE17361D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:f4:42:47:86:15:19:d6:82:a1:41:22:f5:
da:0c:f1:2d:ee:7f:e9:91:90:5b:ad:5b:ad:09:fd:
dd:9c:18:28:ac:46:05:57:a9:fd:aa:87:fb:9d:01:
f1:57:77:80:a8:26:9a:41:13:b9:4e:8d:67:1c:3a:
61:9d:70:e7:b2:f5:83:a7:b8:99:1d:df:1f:35:32:
81:43:60:d8:f2:19:60:76:e1:55:e5:25:33:fd:29:
b0:a1:3e:3c:a8:91:6f:9a:15:95:c0:f1:ca:f8:c8:
22:bd:03:f6:c4:6f:05:13:d6:b7:ef:5c:83:0d:62:
82:65:da:74:79:01:47:4a:66:f9:35:3a:81:b0:d1:
f5:5e:d3:6e:51:9c:ae:0d:6f:0f:95:36:0c:46:bb:
92:14:18:19:14:18:aa:4f:61:85:21:b9:01:97:5d:
e2:70:ab:ec:55:23:ee:cd:a6:fd:e2:3a:53:ba:93:
9c:89:e0:8d:aa:cd:82:a0:5b:07:69:f0:8d:01:8d:
7c:09:70:a4:19:a0:ab:b1:64:35:1c:25:ef:a4:46:
51:c5:b7:ec:40:e2:68:c6:7b:d6:a6:8b:5d:40:9b:
88:5c:5e:6a:8b:22:05:46:3d:4c:cf:8f:78:3d:44:
4d:d2:f4:15:a9:3a:6a:bb:bb:cd:7c:c4:d1:ee:44:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:28:DD:16:6C:09:64:02:F6:59:69:84:A0:19:E7:DE:17:36:1D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pwoo3RZsCWQC9llphKAZ594XNh0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.237.0/24
Signature Algorithm: sha256WithRSAEncryption
36:8e:3c:01:30:0e:1d:26:ba:e7:7e:fd:bf:cf:b2:e3:4b:c3:
b8:c8:3a:35:93:ed:36:78:5f:80:e6:9e:ae:ab:d1:d7:1b:0a:
f6:c7:a7:69:96:0d:a7:a7:55:e8:47:6f:1e:c1:45:3b:a1:a6:
bf:16:8f:bf:79:99:31:0a:e0:4a:2a:00:bb:bb:20:42:88:a7:
c5:91:d3:06:ae:c9:8c:7a:0a:c9:ac:70:2a:95:34:e3:bc:95:
a9:3b:46:a1:49:d8:53:3f:1d:3c:a6:51:80:d7:8a:a2:ad:3a:
4a:21:a4:7e:72:8a:b7:25:df:31:23:52:24:ba:10:9a:19:2f:
c8:6a:5d:02:33:7a:6b:e6:dd:d7:38:d2:71:b7:52:af:bb:af:
56:bc:0a:4f:93:4a:fb:c0:6a:6b:28:ea:a8:6b:51:7f:7b:b0:
0c:9c:13:35:e7:f6:49:cb:58:8a:ae:f6:20:53:5f:04:8e:7e:
c8:9d:b6:61:ca:86:67:9f:f2:94:85:db:ac:c5:8b:4c:16:6c:
18:ce:32:00:80:53:0c:c6:39:8c:d2:b3:d6:36:9f:dd:75:f8:
ab:78:16:d0:e9:2a:e7:72:85:52:3d:0d:f5:8a:61:ae:bf:d8:
b7:d8:a6:a4:7e:2b:1a:4e:6f:f9:ee:72:40:2c:31:ad:ac:82:
57:b3:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org