Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XG6rfFdDhzRGPfo33UT0pPvLDR4.roa
File: XG6rfFdDhzRGPfo33UT0pPvLDR4.roa (raw, json)
Hash identifier: D9IKwOQncJ01yRUqL7CwnBWFP8uKmiuLz0wtesoGzgk=
Subject key identifier: 5C:6E:AB:7C:57:43:87:34:46:3D:FA:37:DD:44:F4:A4:FB:CB:0D:1E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0168
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XG6rfFdDhzRGPfo33UT0pPvLDR4.roa
Signing time: Wed 24 May 2023 16:33:16 +0000
ROA not before: Wed 24 May 2023 16:33:16 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 110.163.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:33:16 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=5C6EAB7C57438734463DFA37DD44F4A4FBCB0D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:83:a2:af:cf:66:49:0a:05:9a:21:bd:b0:
58:55:0a:52:b7:59:b2:ee:7c:39:df:e0:ef:a6:0b:
8d:4f:e9:ec:fd:fc:26:6d:c0:5d:9f:51:78:a5:03:
19:74:77:74:55:6c:23:d8:92:aa:1c:39:80:12:c7:
68:10:32:8e:5b:2b:e1:ef:22:72:37:48:8f:10:be:
2f:0f:2e:aa:b6:3f:ba:92:d9:5f:31:06:8f:99:d0:
fb:3a:f7:8f:91:62:f6:b1:d1:8b:4b:68:30:50:51:
ce:a6:38:ba:9b:bb:0c:d6:26:c7:bf:9c:71:cf:eb:
68:fe:0a:57:a8:3a:1a:0d:a4:26:a7:ac:9b:a0:a8:
d5:40:09:c6:47:60:d6:87:5d:15:77:56:cb:91:34:
d5:20:7f:db:a0:17:38:25:77:71:09:2b:2f:05:8f:
2d:05:48:df:c4:88:81:e1:3f:14:de:93:27:d8:5e:
57:b1:02:5f:77:42:d2:ca:68:a5:82:f1:34:06:19:
1a:24:50:05:bf:d8:45:c9:3d:f9:b2:7f:e6:21:34:
db:95:f8:9f:96:3d:14:90:b1:0c:cd:fe:34:1b:f2:
c4:75:31:96:63:25:16:9b:53:81:7b:9b:e3:6a:f4:
1c:16:09:7d:19:d3:48:eb:ca:5b:fb:0b:8c:08:d9:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6E:AB:7C:57:43:87:34:46:3D:FA:37:DD:44:F4:A4:FB:CB:0D:1E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XG6rfFdDhzRGPfo33UT0pPvLDR4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.163.42.0/24
Signature Algorithm: sha256WithRSAEncryption
11:37:26:0d:17:44:83:8c:67:2b:c3:d2:f5:00:85:f7:f7:fb:
5d:d3:6c:36:6a:69:ee:58:2f:d4:52:f2:65:a9:d0:94:fe:d8:
b5:46:fd:75:22:4d:44:0d:9a:96:64:81:88:0b:93:6c:dc:44:
69:6f:5f:27:39:87:c3:a0:d3:88:1a:c7:41:43:cc:ce:5b:05:
b9:54:43:a6:de:20:fb:39:36:57:6f:fb:0a:78:32:50:99:dc:
2a:f1:36:a0:35:3c:e0:b9:44:03:2c:bf:e7:19:d7:ea:84:44:
8d:87:d4:80:f8:c4:1c:1f:51:c5:6a:c0:c3:5f:b3:9f:03:cd:
8e:ba:85:82:51:9d:11:cd:9f:90:ba:9b:17:42:66:37:64:4d:
a3:a1:9d:f7:e6:dc:af:a8:64:8b:ea:dd:66:39:b8:6f:2d:9d:
ae:0a:87:2f:03:6d:ab:0b:26:ae:42:48:05:1b:1c:ec:3b:39:
5b:4a:9f:50:c3:c7:a1:17:5c:98:39:aa:02:d7:e3:6b:79:71:
ed:32:24:22:7a:0d:e8:a2:77:90:95:49:7f:58:e4:15:9f:dd:
4f:d0:b2:22:43:29:da:27:46:05:4f:87:ab:75:cb:b5:15:a1:
dc:05:98:30:5e:5b:bb:94:ac:42:c4:a9:74:21:89:da:3a:ed:
da:68:b0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org