Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WrXTltvljAuJqt2-7QDvyzoG--A.roa
File: WrXTltvljAuJqt2-7QDvyzoG--A.roa (raw, json)
Hash identifier: 0fkMNjASlg4kxhk3OTl9RVC7SXkPkMeK/CCSHr0S7Tk=
Subject key identifier: 5A:B5:D3:96:DB:E5:8C:0B:89:AA:DD:BE:ED:00:EF:CB:3A:06:FB:E0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0373
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WrXTltvljAuJqt2-7QDvyzoG--A.roa
Signing time: Thu 01 Jun 2023 17:57:31 +0000
ROA not before: Thu 01 Jun 2023 17:57:31 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883 (0x373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:57:31 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=5AB5D396DBE58C0B89AADDBEED00EFCB3A06FBE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:10:57:c7:e7:38:0f:cf:8f:29:41:94:c5:
be:40:8c:44:f1:c9:89:6e:14:98:4e:31:cf:b8:b6:
ea:2c:19:ee:28:6c:56:07:4d:94:95:c8:83:30:51:
be:c2:e5:3a:ee:b8:bf:75:ed:58:0c:45:9e:a4:44:
0c:19:ae:fd:fd:60:6e:ff:10:4f:e6:16:67:1a:6c:
38:c0:f5:c7:ab:d7:75:73:cf:15:cf:98:e0:c9:24:
a6:21:8a:e4:b1:c4:27:b2:62:5d:fd:1d:4c:3e:d6:
e4:df:b5:76:96:b0:a2:4f:ef:09:d6:da:3f:7c:91:
59:b9:c7:f5:6e:e5:b0:ae:9b:82:89:6f:7c:27:e7:
24:e8:2b:cd:93:64:df:19:68:22:18:30:44:db:f1:
9a:db:2c:f5:65:b7:33:02:f3:a5:09:c4:dd:76:d3:
a0:85:3b:a0:e4:73:04:f9:c0:fb:b6:1a:4d:03:50:
32:97:84:67:0e:e0:99:d8:2a:b2:a8:d5:fa:b5:37:
2d:da:8f:36:c1:40:8c:3d:65:d3:0f:e0:0b:f1:50:
ba:04:1b:09:4f:a9:69:41:84:6d:bd:82:3a:93:c3:
61:35:e4:40:2a:06:42:83:68:52:3a:31:0f:11:6d:
b2:ed:b7:8e:d0:b5:a4:d0:7d:4a:e3:fc:bb:41:84:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:D3:96:DB:E5:8C:0B:89:AA:DD:BE:ED:00:EF:CB:3A:06:FB:E0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WrXTltvljAuJqt2-7QDvyzoG--A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.211.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ef:d2:45:24:35:b4:5d:6b:a9:be:8c:8c:9d:63:c6:d4:50:
c0:bb:60:0b:46:ef:67:df:12:c7:55:e5:b5:b8:9c:50:13:3b:
a8:98:4a:90:aa:9b:f2:47:bd:14:40:ce:76:b4:24:f3:34:75:
a1:b0:f2:51:9b:e0:99:ea:f0:95:2a:c8:5e:ca:af:10:53:f0:
6f:4f:84:fa:cf:3c:20:7c:c2:74:be:81:7c:df:69:3d:7e:97:
ba:f4:15:2b:f6:f6:a7:03:3f:dc:bc:d2:76:97:56:32:a6:f5:
e7:d2:11:c4:5e:58:92:4b:63:d3:cc:5d:16:90:f9:28:f3:6e:
68:ab:90:e7:6d:1a:02:60:bf:d4:bf:ba:c5:fd:d9:bd:b1:5c:
51:ff:8f:6e:81:71:e3:b5:91:80:78:b0:1e:b2:1e:1f:ed:ae:
ef:15:6e:a9:22:5b:8e:13:0f:45:93:60:ea:ce:d0:35:99:39:
0e:69:8e:96:89:f6:02:8d:e8:03:18:bd:d8:2a:22:e0:5b:ff:
92:a3:71:09:43:af:56:56:13:df:24:ab:40:93:9f:95:97:34:
19:22:76:fa:a7:85:e5:54:e3:17:ff:4b:0c:ab:2c:b2:bd:b6:
75:3c:96:42:36:38:48:eb:1c:b8:b0:c6:e1:53:07:09:d6:7f:
3e:97:4a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org