Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UmCLjsuOFl4k8uPXDRCpX8uGlAM.roa
File: UmCLjsuOFl4k8uPXDRCpX8uGlAM.roa (raw, json)
Hash identifier: wiTZL2MBD0UWYPhZ8moBcd3HAiZacEhCvLhxc69WEqo=
Subject key identifier: 52:60:8B:8E:CB:8E:16:5E:24:F2:E3:D7:0D:10:A9:5F:CB:86:94:03
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: C7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UmCLjsuOFl4k8uPXDRCpX8uGlAM.roa
Signing time: Wed 29 Mar 2023 16:08:57 +0000
ROA not before: Wed 29 Mar 2023 16:08:57 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:08:57 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=52608B8ECB8E165E24F2E3D70D10A95FCB869403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:67:80:c6:44:e7:a3:00:e1:7b:0c:bc:fb:
94:2c:9e:8a:7d:b9:98:54:cf:27:ad:08:27:20:ff:
60:83:2b:12:d9:83:fb:0e:d6:8c:d0:e9:b0:40:c5:
3f:1d:81:c1:2e:80:51:f1:01:b8:2f:c0:7a:1f:e8:
f2:bc:4c:df:64:71:6c:30:84:cd:85:db:93:bb:d0:
97:d2:de:62:10:1b:1e:5f:c1:f1:50:79:3f:fe:70:
a5:fa:11:ff:64:4b:2e:aa:2e:d6:96:41:b5:3a:42:
ea:0a:c5:16:cd:ab:34:92:67:76:cc:e1:bb:09:9a:
71:58:21:82:3f:a8:9c:04:8c:19:b1:7e:63:92:21:
18:4a:86:00:e3:1f:10:3c:79:9c:f6:75:8c:98:57:
7c:ee:af:31:b5:16:8a:2a:79:63:63:83:ca:8d:84:
65:b8:f8:65:65:02:ee:cd:6b:6b:d2:83:db:c8:4e:
01:b1:6d:b7:b8:21:a4:05:ca:29:10:88:83:fe:61:
a8:55:98:97:45:05:c5:8a:e0:99:d1:4f:4b:f3:51:
2a:47:82:3e:3a:99:65:3c:27:bf:b5:c2:d5:97:b3:
f6:d2:df:c3:44:a4:c8:67:8c:52:54:16:de:6e:8c:
db:03:0b:7e:4d:ed:e3:88:c6:8b:ea:33:57:3b:8a:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:60:8B:8E:CB:8E:16:5E:24:F2:E3:D7:0D:10:A9:5F:CB:86:94:03
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UmCLjsuOFl4k8uPXDRCpX8uGlAM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.140.0/22
Signature Algorithm: sha256WithRSAEncryption
19:64:d8:24:12:0c:b5:10:74:ea:31:c5:35:cc:ae:5a:4b:0b:
b7:b6:27:77:dd:bb:e4:2e:e4:15:86:69:87:34:56:29:9c:44:
f8:39:e3:90:fd:96:30:f0:68:9a:bb:7d:44:47:67:bb:25:18:
3b:a3:d8:b5:f6:8e:c7:0a:04:d7:96:0b:c7:18:0e:2c:ac:88:
a5:92:a4:ec:27:9a:42:02:c0:de:33:3a:51:fa:70:a0:4d:00:
8a:28:79:d1:72:31:90:da:d7:01:12:3c:a6:97:62:49:e3:7d:
a1:3e:93:9c:ae:74:46:c2:d1:17:45:cd:11:16:bf:d6:7c:fd:
3f:c5:24:23:15:76:be:43:72:30:a6:bc:78:45:de:76:c2:43:
5d:9a:72:38:5d:76:59:3b:d2:2f:76:0f:dd:00:f3:39:9d:82:
ac:15:81:f4:db:7c:37:07:af:93:50:ba:0f:d5:96:b3:86:8a:
00:32:52:5e:8d:a2:80:b4:95:a7:6d:2d:27:96:87:fe:84:67:
d6:3d:9d:83:1e:29:6b:87:58:20:4a:f1:4c:26:f7:98:54:e3:
e7:3f:4d:64:ac:92:e7:a1:58:d3:a7:5a:30:1e:b0:dc:73:fe:
ed:94:f5:79:64:dc:e5:7d:65:61:fb:a1:97:b3:bd:3b:db:ec:
07:76:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:23 2025 by rpki-client