Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/T1oyMvm-XfqgHZ5PAOjp-glqn-s.roa
File: T1oyMvm-XfqgHZ5PAOjp-glqn-s.roa (raw, json)
Hash identifier: XS7Sb8gYDkQu91CDazcF+Ku0EKrNLRyLxhEzkG+JxAc=
Subject key identifier: 4F:5A:32:32:F9:BE:5D:FA:A0:1D:9E:4F:00:E8:E9:FA:09:6A:9F:EB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: F7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/T1oyMvm-XfqgHZ5PAOjp-glqn-s.roa
Signing time: Wed 24 May 2023 16:03:13 +0000
ROA not before: Wed 24 May 2023 16:03:13 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.242.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:03:13 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=4F5A3232F9BE5DFAA01D9E4F00E8E9FA096A9FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:19:3d:1b:64:8c:2c:ec:36:4b:cf:05:fe:02:
e1:27:c7:ba:70:3e:9f:2a:3a:ed:91:4f:e7:92:ad:
94:41:a8:1e:5d:ee:3c:5f:a8:e8:16:c0:db:2c:04:
c2:13:54:84:8e:c7:79:d0:93:19:07:95:fc:4b:65:
c1:8a:28:61:dc:26:54:9e:ee:37:e7:32:ed:68:58:
28:55:35:c1:c2:b0:e6:02:67:8a:3e:82:07:e1:8f:
1a:db:52:e4:05:47:b0:5d:08:ed:4c:f7:bc:c1:bf:
85:b0:87:ec:4b:a5:ce:36:2c:f0:f2:21:83:f6:ed:
91:40:78:70:e5:1b:38:16:e6:de:6e:7f:da:1a:dd:
d5:61:9f:90:64:43:6c:9c:1a:93:9b:76:b7:26:da:
a1:dc:3a:da:93:4b:8e:d3:7f:5c:51:33:0b:64:0f:
f7:d7:30:c7:67:c8:27:13:2a:54:96:24:f0:ef:fa:
4c:e7:70:6c:30:b9:44:7f:26:9c:be:28:00:82:36:
89:cc:4f:46:2b:75:31:51:9a:84:c5:a7:00:07:76:
ca:a6:83:7f:be:c1:c1:23:6a:90:7c:f7:eb:b7:d4:
19:0d:9a:54:3f:d0:c5:4d:7a:d8:60:93:3b:7e:44:
17:a9:de:4b:66:90:b5:4a:e6:39:74:4b:f9:fa:2e:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5A:32:32:F9:BE:5D:FA:A0:1D:9E:4F:00:E8:E9:FA:09:6A:9F:EB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/T1oyMvm-XfqgHZ5PAOjp-glqn-s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.242.0/23
Signature Algorithm: sha256WithRSAEncryption
66:e4:9b:67:f9:1d:ab:f0:6e:55:34:ae:d9:54:ba:f9:ed:ff:
70:56:38:75:cd:e7:43:17:54:1b:9d:32:bc:ea:a7:44:b1:7e:
5f:97:36:e0:a4:59:43:32:9e:29:ea:26:a2:62:ff:ff:08:c9:
4b:69:80:2f:be:37:c0:d6:3d:09:fa:8c:f1:90:17:ff:b8:2e:
08:4c:5b:c9:ba:cc:07:fa:29:5f:71:98:ca:af:c3:84:0e:ad:
07:c7:ce:45:9e:e1:f9:2e:6a:f3:d6:67:49:e3:85:5d:f7:d9:
52:e1:88:4d:b7:14:04:ca:a8:3a:0b:3d:ee:6e:74:e2:a8:2d:
85:8b:6e:cb:60:1c:50:f3:c1:28:be:b3:db:f8:8d:eb:bf:f7:
8d:89:22:06:4e:ef:2e:9a:c0:70:99:12:7b:69:6f:ac:28:3e:
dc:8a:cb:0b:45:a9:2d:33:28:2e:4f:0f:07:cc:f8:d4:6a:9c:
ec:56:1f:3b:86:b2:d4:cc:3b:32:a2:0c:a5:91:91:36:04:74:
d9:83:0c:c0:1e:72:72:02:7e:a1:fd:a1:2a:49:cc:02:be:15:
f8:e6:44:ae:37:a6:fb:32:b9:34:c1:c4:b7:90:b6:73:f2:ee:
0f:27:d0:97:f4:15:79:dd:46:4b:cc:5a:bb:43:a0:67:4a:84:
65:d5:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:57 2025 by rpki-client