Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZG1MYdr85UytHThE8QlstiwXhs8.roa
File: ZG1MYdr85UytHThE8QlstiwXhs8.roa (raw, json)
Hash identifier: cnvE8DAjN2QsJ/+JXd8UJgGvnCH5Jf7y9L1ZU6IuVHE=
Subject key identifier: 64:6D:4C:61:DA:FC:E5:4C:AD:1D:38:44:F1:09:6C:B6:2C:17:86:CF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 042D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZG1MYdr85UytHThE8QlstiwXhs8.roa
Signing time: Tue 06 Jun 2023 16:09:10 +0000
ROA not before: Tue 06 Jun 2023 16:09:10 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069 (0x42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:09:10 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=646D4C61DAFCE54CAD1D3844F1096CB62C1786CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:13:49:e8:a0:f1:f0:6c:47:b5:67:e3:de:
3f:ae:00:fe:f8:30:5b:90:3d:04:c2:0b:73:26:e1:
fa:fb:f5:f6:ce:cd:bc:e0:10:27:61:64:67:19:84:
db:21:d1:6f:1e:a8:ef:b4:9c:ed:b0:e1:89:fd:cc:
14:95:d5:b9:32:65:a3:e6:9d:c5:44:eb:b1:ea:96:
da:e7:8d:b7:3d:06:59:c7:83:a3:25:67:95:46:bb:
06:38:24:d1:6f:8d:98:41:d5:0d:28:4f:b0:37:27:
dd:7c:ae:b6:41:0b:74:bc:e4:1b:97:db:4f:78:32:
a0:b1:c2:68:e2:54:8d:80:f6:a7:2a:ff:e8:b7:a9:
70:08:1d:3b:e6:2d:12:5d:46:dc:b5:10:5b:3c:ec:
9a:b0:3b:b8:1f:5f:47:85:08:bf:91:24:27:4a:8d:
2a:af:72:53:30:ec:ef:5c:e5:49:59:53:90:d5:de:
44:e9:f9:83:e8:1c:bf:ad:3c:ba:96:05:02:61:df:
9b:d0:a0:4a:35:71:3b:d5:2d:45:c9:50:0e:3a:58:
9e:64:47:73:95:cc:e5:68:88:15:c5:23:2e:b3:3c:
67:f2:cc:16:d9:c7:c5:8a:71:d1:bc:52:23:53:b3:
75:0c:39:43:8c:05:24:30:e3:d7:4f:72:e4:8b:5c:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6D:4C:61:DA:FC:E5:4C:AD:1D:38:44:F1:09:6C:B6:2C:17:86:CF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZG1MYdr85UytHThE8QlstiwXhs8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:7f:7c:93:66:fa:02:5f:e6:fb:e8:c1:bc:0d:46:6f:1f:b1:
7b:b1:01:6b:fa:cc:b5:18:ef:6c:63:d7:25:dd:2b:67:e5:9a:
24:70:8b:12:4c:ad:fa:c5:53:94:96:68:1e:ec:e6:1a:2b:9b:
29:37:df:6f:7a:c3:0b:90:20:25:7b:7a:a7:ed:24:4f:5b:a7:
3e:c8:b4:3f:40:bd:3f:8d:84:53:0a:22:ee:6b:64:93:46:44:
57:80:1d:0b:1f:a0:0b:40:b7:fd:51:70:14:32:02:27:1a:4b:
dc:18:2f:af:f0:87:d9:51:f2:69:4f:74:02:01:65:2f:e8:9e:
b8:16:a3:1b:b6:77:62:83:c9:fb:5a:3c:53:f2:29:ee:01:83:
78:9d:ae:59:41:0f:89:75:a8:45:b2:5c:4d:91:e6:44:fe:fd:
c7:e3:b5:5b:69:ba:18:87:05:c1:2c:d7:48:05:1a:6c:c7:16:
e2:29:ba:3b:0c:01:1f:60:6a:75:04:e8:3e:67:0b:e9:7e:dc:
83:1b:f7:dd:e9:de:a7:8a:58:41:aa:76:2b:ce:21:1d:e2:3f:
70:d0:e3:9f:9a:04:8a:47:7f:a9:5d:7e:51:0a:66:b0:7e:12:
ad:21:ce:1e:71:d5:22:f2:0a:33:76:7e:19:26:5f:7e:16:c1:
a8:b7:41:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org