Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/X2yZ_8UXqvE0qLrh59gSbh0nHf8.roa
File: X2yZ_8UXqvE0qLrh59gSbh0nHf8.roa (raw, json)
Hash identifier: xPjlT47U/ZlZ/YdZIVeV0q16CV4lg2ZWfqDDakvW1TE=
Subject key identifier: 5F:6C:99:FF:C5:17:AA:F1:34:A8:BA:E1:E7:D8:12:6E:1D:27:1D:FF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0212
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X2yZ_8UXqvE0qLrh59gSbh0nHf8.roa
Signing time: Tue 30 May 2023 16:29:33 +0000
ROA not before: Tue 30 May 2023 16:29:33 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.104.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:29:33 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=5F6C99FFC517AAF134A8BAE1E7D8126E1D271DFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:50:98:8f:3f:fb:58:17:88:27:40:53:99:
cd:c3:e2:57:05:81:59:8c:17:de:5f:d2:83:68:73:
11:5f:5a:43:6f:6f:a3:96:df:b2:37:5c:42:9d:00:
42:d1:24:89:48:8f:7c:9a:85:42:a3:1d:40:73:14:
d3:61:13:a5:26:d8:22:97:5d:10:cd:05:8c:f6:12:
64:02:f2:90:d6:ed:6d:d9:b5:45:df:57:61:6f:57:
03:af:24:91:be:fe:f4:4f:3e:f5:d3:81:96:d2:5d:
16:c9:92:9f:e0:c2:ab:17:bb:8a:55:8c:fa:ab:69:
17:86:68:70:b2:c7:13:6b:1e:2f:9a:f8:90:15:4e:
64:cf:0e:6e:7c:9f:45:eb:75:82:52:c4:7b:d7:82:
50:81:32:ba:11:0a:2c:f4:f8:60:eb:a7:fc:80:3a:
8d:5f:c4:24:a5:f3:16:94:45:6a:42:f2:f1:c4:ff:
76:a9:83:bd:b9:0a:f9:50:f1:be:de:aa:da:08:96:
79:bd:a8:b8:c0:c5:69:9c:2b:8f:c4:e8:cc:7b:22:
90:76:30:4d:4c:ff:30:cd:e9:b9:b1:c8:7e:56:53:
42:72:2e:75:3c:0f:9c:16:20:48:e2:53:8f:e2:0a:
d9:dc:fa:3c:1e:b7:b9:38:dc:c5:da:36:15:43:ce:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:99:FF:C5:17:AA:F1:34:A8:BA:E1:E7:D8:12:6E:1D:27:1D:FF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X2yZ_8UXqvE0qLrh59gSbh0nHf8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.104.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:71:7a:85:93:b2:9c:0c:57:3a:38:9b:f0:f9:6f:91:ff:70:
96:48:0b:e6:3e:55:00:2b:85:e3:39:93:55:73:15:58:b2:b8:
09:b0:47:41:24:ca:fb:a3:45:05:6f:a2:e1:59:01:d3:53:6c:
bd:65:88:c7:93:98:09:99:7c:dd:ed:c8:6d:7d:a4:31:2e:b1:
ce:65:11:98:0d:44:94:2b:2e:a0:6f:4a:00:21:f5:0c:5d:cb:
b5:e7:17:9c:65:80:0b:d3:92:0c:17:e6:43:7e:38:10:4f:12:
ee:5f:67:af:ba:69:87:a8:53:67:b9:cd:78:c1:a1:1e:d5:5a:
42:8a:f5:67:1a:4e:71:c2:b6:eb:9f:c0:6f:18:36:52:8b:df:
da:60:bc:cd:83:4f:0d:44:49:4d:29:7c:70:56:a8:5c:da:37:
06:49:ac:e0:f5:a8:e9:5a:2e:0a:f7:7f:4b:5f:80:3e:7b:fa:
91:92:2a:df:38:ba:67:f3:3a:14:6e:ad:38:50:a4:7e:0a:d1:
5f:a3:65:9d:ff:9d:a0:d6:4e:78:b3:02:3d:0a:c4:54:8e:b1:
7f:15:fd:64:ed:4f:99:62:6b:9e:c0:e6:32:4d:45:d3:97:2c:
9a:d8:d9:67:eb:fd:a5:c3:c8:84:e3:1d:b8:2f:b6:3d:b9:c1:
17:5d:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org