Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/X57owndEPIhnReauBzWdhXx2vhk.roa
File: X57owndEPIhnReauBzWdhXx2vhk.roa (raw, json)
Hash identifier: 8yPmqENDbfYg5vXBOAx77RKoS8m4jcTQ1CHL1BKV4u8=
Subject key identifier: 5F:9E:E8:C2:77:44:3C:88:67:45:E6:AE:07:35:9D:85:7C:76:BE:19
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 9D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X57owndEPIhnReauBzWdhXx2vhk.roa
Signing time: Wed 29 Mar 2023 16:05:43 +0000
ROA not before: Wed 29 Mar 2023 16:05:43 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:05:43 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=5F9EE8C277443C886745E6AE07359D857C76BE19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:00:ba:56:4f:56:87:c5:91:e7:5b:f5:13:e4:
18:44:a1:0b:27:ec:95:1f:48:33:c2:97:1a:87:a5:
30:36:39:2f:3f:3a:91:a3:4b:a2:f9:ab:a5:24:55:
fa:6f:fd:b7:90:cc:50:25:0d:71:75:f4:f0:89:4a:
45:5e:ea:48:eb:6e:02:9c:79:f7:a8:af:91:15:1e:
f5:00:c8:ab:bd:42:79:42:e6:a6:2d:9e:0c:37:43:
5f:c1:e5:b5:ff:f4:dd:b8:16:be:2c:73:14:fa:40:
2f:68:a1:63:ba:85:68:d7:42:28:f9:09:55:81:5e:
0f:5e:09:18:02:18:21:a9:0e:b0:e6:12:4f:be:77:
5f:18:02:f2:d1:6a:f2:d6:b5:37:fb:ed:e7:63:5b:
07:49:5a:22:82:3b:13:ca:d9:f5:55:c4:0a:68:39:
cf:7f:e5:9a:15:0c:15:43:d4:00:04:04:98:a7:b1:
cd:1c:96:39:e1:bd:04:e4:d9:5f:25:e9:4f:bc:d1:
06:14:6f:f7:cf:e9:4d:d6:9b:b4:bb:bb:b2:c7:89:
0c:08:d5:34:04:cf:6f:7b:e8:85:cd:61:17:e8:a3:
ae:d6:0e:ee:c2:77:3b:33:47:f9:38:09:17:ea:92:
81:6e:f5:cc:69:52:04:38:39:b2:9b:c8:80:82:5e:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9E:E8:C2:77:44:3C:88:67:45:E6:AE:07:35:9D:85:7C:76:BE:19
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X57owndEPIhnReauBzWdhXx2vhk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.176.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:f0:38:50:36:b9:d9:94:97:0e:a2:9f:41:7d:11:44:3b:12:
36:c5:7c:6f:29:f7:f7:87:e9:dd:59:3d:ff:58:ba:29:65:8a:
0b:7d:0f:b5:e0:1a:1a:ff:38:07:cd:6c:4d:74:c0:eb:ac:d8:
b9:ac:cb:dc:23:85:fc:a0:96:6d:39:26:59:59:6d:5a:50:6f:
cd:f9:df:56:44:19:3b:18:3b:97:86:27:35:97:47:a9:96:ed:
ba:4f:aa:62:0e:90:ba:a3:05:2f:37:b3:2c:29:ff:89:46:0d:
0d:8e:5a:e2:f3:35:00:8e:9f:b8:c9:46:91:fc:a2:62:3a:48:
39:09:51:a5:e8:a9:5c:bf:5c:6d:ba:71:ec:69:8f:1a:7e:8b:
b8:f9:15:55:a5:55:bd:b0:ed:69:03:15:c7:99:a8:9e:12:be:
de:a3:01:30:1f:82:5c:5b:05:a3:2b:4c:58:4c:e9:d0:b7:ab:
3f:4d:6d:2e:d6:20:d4:9b:7f:4e:09:61:cd:63:37:57:cf:a9:
e2:89:ec:cd:93:09:cb:06:7c:03:05:96:99:f8:bd:42:66:74:
fd:1d:c5:ae:36:0f:ec:aa:fe:6e:a0:a9:64:f3:15:82:a0:22:
56:8b:43:10:00:44:d4:fe:f7:11:64:fb:6c:c7:f4:6b:67:de:
bb:07:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:12 2025 by rpki-client