Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RMM8YIVJvuOy3lTHIgPPlFQn_NA.roa
File: RMM8YIVJvuOy3lTHIgPPlFQn_NA.roa (raw, json)
Hash identifier: 2XTds8MokDuG/4IAUxDrvfSWZHrEEV7O9y+emGrZNgA=
Subject key identifier: 44:C3:3C:60:85:49:BE:E3:B2:DE:54:C7:22:03:CF:94:54:27:FC:D0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0230
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RMM8YIVJvuOy3lTHIgPPlFQn_NA.roa
Signing time: Tue 30 May 2023 16:30:36 +0000
ROA not before: Tue 30 May 2023 16:30:36 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:30:36 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=44C33C608549BEE3B2DE54C72203CF945427FCD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:53:5b:f6:9d:49:8d:8f:4d:3b:b6:5b:27:
d1:2c:8e:fd:3f:f0:04:ab:36:4e:93:56:17:0d:a9:
e4:f8:1c:e6:a6:86:2c:8c:a2:d2:f8:87:59:41:43:
9b:da:63:54:f4:43:1f:3c:41:29:b0:33:aa:8a:bf:
0c:7a:4e:e3:6b:20:18:d0:40:04:d7:c0:51:6f:e4:
68:3c:2f:c6:1a:61:81:b0:a4:b1:be:a1:35:27:e6:
d4:9b:5c:af:03:63:1e:04:cb:e7:ec:df:0e:9f:cd:
dd:de:5e:c6:50:d2:aa:44:ab:62:51:cd:4b:47:4e:
82:42:88:df:c3:31:bb:64:c3:bc:0a:a2:4b:3b:88:
93:0b:33:3f:37:1e:89:aa:f2:17:07:4d:d4:db:d1:
bc:bf:5a:9e:a4:f4:8c:dc:ce:c1:fa:32:68:ad:21:
fa:34:18:2a:ef:17:62:92:e2:f4:60:18:80:8c:d7:
2d:fd:a8:5e:f0:c5:62:78:9d:dc:1d:66:68:87:a9:
13:d0:00:5e:71:96:66:58:5a:ea:5d:cd:cb:2c:05:
de:ca:43:e1:e6:49:51:d7:97:21:9a:16:0e:56:ac:
19:92:44:64:c4:75:ca:cf:f2:ce:6f:74:29:88:48:
0c:19:89:01:5e:2e:c8:46:ad:50:60:7b:f0:c2:1a:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C3:3C:60:85:49:BE:E3:B2:DE:54:C7:22:03:CF:94:54:27:FC:D0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RMM8YIVJvuOy3lTHIgPPlFQn_NA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.192.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:da:c2:b5:8c:64:c1:96:d3:61:a2:14:36:b0:da:4c:11:78:
88:00:af:29:c3:6d:1e:7e:95:15:0e:be:6a:fa:ab:aa:74:aa:
7b:05:ce:ce:89:e3:13:61:5e:94:dc:37:46:3e:09:08:ab:c2:
47:d5:44:3f:36:fd:61:d1:0c:7e:8f:08:4e:d0:76:0b:ed:8f:
96:d8:9c:26:b0:5a:5d:b0:ab:e9:41:82:cb:38:0e:ff:f4:08:
34:e5:e7:53:d1:d7:c1:27:d0:53:bd:5c:fb:2b:37:9f:8d:76:
31:7b:72:e8:bf:d5:c7:72:6a:ee:cc:2d:74:4c:16:87:e4:cc:
51:91:93:77:c6:5a:1e:1b:dd:26:39:93:82:a3:61:28:9e:39:
18:48:5f:46:d3:86:6b:cd:f7:30:82:54:9a:03:7b:c4:9b:f1:
65:47:87:df:85:7d:a1:c8:a2:22:36:5f:cb:a7:d9:90:a2:12:
e3:96:8c:4c:0a:e2:36:84:d2:90:9e:a3:f4:13:fb:2a:4e:fb:
87:14:f1:21:fc:c2:dd:10:65:c5:de:ce:33:26:2c:37:0b:ea:
b2:3e:00:df:88:36:bb:61:94:8e:1d:70:59:db:b4:ae:a5:e1:
62:e8:fb:b5:92:26:2e:e7:05:19:8c:3d:86:25:7f:b7:e2:be:
b1:10:0b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org