Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZOhWpqILfNL_Usuwmcg7x9JYNA4.roa
File: ZOhWpqILfNL_Usuwmcg7x9JYNA4.roa (raw, json)
Hash identifier: weqR681xNY6AAPMup83H/m857B8APWRqbA2M9bGZWKE=
Subject key identifier: 64:E8:56:A6:A2:0B:7C:D2:FF:52:CB:B0:99:C8:3B:C7:D2:58:34:0E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0392
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZOhWpqILfNL_Usuwmcg7x9JYNA4.roa
Signing time: Thu 01 Jun 2023 17:57:41 +0000
ROA not before: Thu 01 Jun 2023 17:57:41 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.226.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914 (0x392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:57:41 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=64E856A6A20B7CD2FF52CBB099C83BC7D258340E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:c1:54:10:be:2a:f7:c9:b1:dc:92:f9:fe:
dd:77:aa:a8:62:e4:74:1e:32:67:58:f9:92:b7:a5:
34:4c:a7:d2:50:4b:9f:bd:17:24:1b:c0:fd:94:5b:
11:2b:e7:ee:35:13:26:e2:e5:b3:35:c8:83:92:a4:
3b:ac:e5:cd:28:a1:c3:af:c1:dd:c3:5d:df:49:8a:
ee:f3:c2:0d:ff:8d:c9:82:df:51:8a:6c:65:89:f1:
4e:6d:e8:20:c0:ce:cc:5f:d1:97:d0:3a:6f:86:db:
9a:e5:8f:7e:95:48:e8:4f:cf:f2:ae:df:e6:2e:b1:
bc:fe:d0:53:b1:22:62:8b:3e:6e:84:66:a0:d5:01:
78:ae:3f:48:33:9a:8d:57:c6:0f:ec:6d:62:ae:7a:
da:9f:8c:c3:b1:eb:ac:8e:4a:53:54:a2:ca:0b:4a:
c5:0c:5c:c0:09:93:f2:96:c8:fb:9e:75:5b:58:a0:
67:3f:f3:ea:ad:c5:eb:7b:a0:a2:4d:f8:6a:b7:c3:
c1:db:a8:01:17:02:0b:28:49:ef:0b:a1:f3:43:08:
c3:64:8e:25:f5:ad:49:9e:10:98:6a:d8:74:16:70:
49:6f:f3:cd:9a:83:78:a9:aa:00:02:37:b1:fc:8d:
f4:c9:c2:d4:52:dc:68:8e:a4:e8:45:b5:e9:f4:40:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E8:56:A6:A2:0B:7C:D2:FF:52:CB:B0:99:C8:3B:C7:D2:58:34:0E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZOhWpqILfNL_Usuwmcg7x9JYNA4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.226.0/23
Signature Algorithm: sha256WithRSAEncryption
e4:d0:fa:b8:d2:03:d9:94:c6:53:32:70:2c:90:48:cd:6a:1f:
cf:0f:aa:27:69:96:b4:35:d2:59:bc:d6:2e:36:83:99:7c:53:
ef:5f:12:11:96:2d:4f:a6:56:6a:a8:cd:19:9e:0f:c1:09:78:
31:81:ef:12:c6:5a:29:a5:8c:a3:d9:fc:30:a2:87:30:ed:8b:
d0:4a:e7:9c:5b:51:45:34:74:45:57:9a:b1:81:0c:44:58:89:
c6:02:c9:8d:75:3c:e3:a5:44:05:70:f3:a6:97:26:2a:2a:df:
20:ee:ae:88:e9:84:11:9f:6a:53:05:fc:14:a4:94:06:6d:96:
81:1b:ec:73:c3:5c:b0:4d:f3:72:20:2f:97:10:22:69:72:6c:
f9:f9:28:96:29:62:0f:12:58:8f:b6:88:95:59:b0:1d:87:3c:
d3:79:1c:54:0d:2d:94:62:10:58:0a:5e:8f:e7:4c:ba:8a:d3:
eb:7a:29:14:10:2d:59:f5:38:1b:10:cd:91:72:a5:c0:7f:4d:
48:9f:32:8d:73:5e:bc:9e:1d:2d:76:b9:30:af:90:14:18:d1:
bf:46:a3:0e:85:f3:1f:34:75:b9:68:92:f2:42:f0:a9:a6:a0:
e9:b7:ab:04:76:1d:38:e2:88:77:63:63:a3:d4:ed:86:38:b6:
ea:d0:bf:04
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NzU3NDFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDY0RTg1NkE2QTIwQjdD
RDJGRjUyQ0JCMDk5QzgzQkM3RDI1ODM0MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDExMFUEL4q98mx3JL5/t13qqhi5HQeMmdY+ZK3pTRMp9JQS5+9
FyQbwP2UWxEr5+41Eybi5bM1yIOSpDus5c0oocOvwd3DXd9Jiu7zwg3/jcmC31GK
bGWJ8U5t6CDAzsxf0ZfQOm+G25rlj36VSOhPz/Ku3+Yusbz+0FOxImKLPm6EZqDV
AXiuP0gzmo1Xxg/sbWKuetqfjMOx66yOSlNUosoLSsUMXMAJk/KWyPuedVtYoGc/
8+qtxet7oKJN+Gq3w8HbqAEXAgsoSe8LofNDCMNkjiX1rUmeEJhq2HQWcElv882a
g3ipqgACN7H8jfTJwtRS3GiOpOhFten0QJSrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUZOhWpqILfNL/Usuwmcg7x9JYNA4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1pPaFdwcUlMZk5MX1VzdXdtY2c3eDlKWU5BNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExauIwDQYJKoZIhvcNAQELBQADggEBAOTQ+rjSA9mUxlMycCyQSM1qH88P
qidplrQ10lm81i42g5l8U+9fEhGWLU+mVmqozRmeD8EJeDGB7xLGWimljKPZ/DCi
hzDti9BK55xbUUU0dEVXmrGBDERYicYCyY11POOlRAVw86aXJioq3yDurojphBGf
alMF/BSklAZtloEb7HPDXLBN83IgL5cQImlybPn5KJYpYg8SWI+2iJVZsB2HPNN5
HFQNLZRiEFgKXo/nTLqK0+t6KRQQLVn1OBsQzZFypcB/TUifMo1zXryeHS12uTCv
kBQY0b9Gow6F8x80dblokvJC8KmmoOm3qwR2HTjiiHdjY6PU7YY4turQvwQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org