Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S2cup_TsuMZ-65Wt84r8nuDTUbQ.roa
File: S2cup_TsuMZ-65Wt84r8nuDTUbQ.roa (raw, json)
Hash identifier: FZ435iSp7yQdKm+54mWQP6oy4YJkG6DsDWCMdn6xNdE=
Subject key identifier: 4B:67:2E:A7:F4:EC:B8:C6:7E:EB:95:AD:F3:8A:FC:9E:E0:D3:51:B4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0190
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S2cup_TsuMZ-65Wt84r8nuDTUbQ.roa
Signing time: Wed 24 May 2023 16:35:08 +0000
ROA not before: Wed 24 May 2023 16:35:08 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.0.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:35:08 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=4B672EA7F4ECB8C67EEB95ADF38AFC9EE0D351B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:3a:c8:33:1e:0d:34:ef:c7:11:e9:62:be:
94:9a:49:c5:66:fd:bd:9d:2e:42:e5:e4:cf:81:5b:
51:d4:66:11:85:b7:21:f7:e5:2f:23:83:34:fa:ec:
4d:51:c8:87:df:88:4d:ae:8f:ba:fd:bf:99:a3:9a:
ad:29:eb:8a:9e:5e:7e:6b:89:96:35:be:0e:26:22:
a9:8d:74:34:01:59:cd:33:5e:06:6f:ea:e4:d6:76:
7d:65:27:b8:db:d0:50:34:39:1d:1b:d9:89:37:22:
01:7b:fc:67:46:ca:fa:d4:0b:1e:cb:7a:8a:5d:f8:
de:ac:ff:b2:8b:0c:48:da:cd:48:c1:15:d5:51:92:
23:7d:95:79:35:85:42:8f:ae:86:c8:12:35:87:72:
63:db:24:17:e6:83:c5:1d:61:c6:52:ab:99:e7:80:
c9:dd:03:2e:8d:7a:14:e3:f2:e4:0f:95:44:85:ed:
3a:1b:11:e8:63:5b:49:23:db:1c:c7:5f:6f:d9:f1:
bc:d9:da:fb:b5:86:ae:3f:58:2c:9f:c2:d1:58:2d:
7a:84:f6:7f:b4:35:d3:cc:eb:a7:a1:59:91:16:ea:
99:ba:85:7b:83:8c:53:c4:73:41:3a:a7:32:4e:de:
91:80:08:c5:f6:a6:0d:dd:f4:d5:cc:9b:33:14:3e:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:67:2E:A7:F4:EC:B8:C6:7E:EB:95:AD:F3:8A:FC:9E:E0:D3:51:B4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S2cup_TsuMZ-65Wt84r8nuDTUbQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.0.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:3a:d1:cb:dc:42:d6:15:e8:e7:1e:21:2b:d0:38:91:30:8d:
a3:68:ac:11:b7:dd:df:a6:74:e2:70:3c:8d:ef:7f:1c:51:1b:
63:e9:06:a0:4f:ba:bb:f6:6c:83:1e:a4:05:10:5b:ca:4b:9e:
c1:9b:48:de:19:a6:91:ef:b0:93:d8:3e:7b:ca:3f:90:16:56:
35:15:0a:e3:e5:2a:8b:64:d0:0f:fa:84:0a:d9:19:c2:90:82:
57:1c:e3:b0:26:1c:84:03:ff:24:a6:b2:03:14:75:f7:99:72:
51:d4:6e:eb:6a:f9:5b:19:26:ed:05:b6:62:be:df:3a:78:95:
c8:c2:b0:0f:f5:2d:df:74:13:ec:52:39:71:fa:f7:e0:53:b2:
8d:22:04:83:5f:da:e1:c4:a7:f9:86:95:b1:db:6d:4c:df:fa:
67:47:08:9a:4f:85:84:a6:28:e8:01:91:48:dd:94:55:33:db:
d6:93:86:77:30:4c:c8:78:b9:46:7a:79:82:09:c0:e8:18:f4:
9b:03:d1:66:2a:4b:e9:81:d5:9f:06:7e:9f:60:82:92:35:a2:
9c:1c:62:22:50:bb:07:8a:77:39:7b:fc:59:93:2a:53:93:bc:
85:72:d7:ee:e8:33:49:11:03:fd:20:0a:c7:65:06:66:8c:05:
5f:99:84:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org