Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZVJeRPEgTL1vSZHx-hi4NJ5LKhs.roa
File: ZVJeRPEgTL1vSZHx-hi4NJ5LKhs.roa (raw, json)
Hash identifier: zXI/HPbo5ZvoQtE8WrA9aMFMYYEKe9hcOJR5rUCAi8g=
Subject key identifier: 65:52:5E:44:F1:20:4C:BD:6F:49:91:F1:FA:18:B8:34:9E:4B:2A:1B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0404
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZVJeRPEgTL1vSZHx-hi4NJ5LKhs.roa
Signing time: Tue 06 Jun 2023 16:05:49 +0000
ROA not before: Tue 06 Jun 2023 16:05:49 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028 (0x404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:05:49 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=65525E44F1204CBD6F4991F1FA18B8349E4B2A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:18:39:7b:a4:26:fa:60:e4:2c:95:1c:96:bb:
b5:31:bf:3d:fc:79:d8:57:70:45:4e:15:de:77:ef:
80:d7:ff:1c:33:5d:a1:11:5d:b9:d2:86:72:49:7f:
1c:de:e0:45:c5:79:7f:bc:2c:73:9a:79:e0:d0:f9:
38:d9:80:8f:2d:0e:0d:74:fa:11:58:73:10:35:75:
c0:7e:f4:55:70:46:0e:be:25:31:3e:31:ff:1d:e8:
74:7c:33:88:04:ed:f7:24:f7:6b:53:02:d1:dd:61:
f2:e5:42:3e:6d:11:97:c3:5b:a8:1f:5f:b6:33:77:
df:e3:b0:63:18:e2:b4:06:6f:3a:ce:30:73:3c:10:
d5:0d:15:49:4e:64:31:11:a9:70:cf:b1:0f:21:58:
05:39:d3:42:6c:91:83:7b:b7:dc:ad:4e:97:eb:5e:
be:c4:b1:21:21:61:c3:f4:de:5a:99:dd:9f:fa:3d:
a0:10:75:2e:33:f2:5e:1d:ab:4f:e1:ce:a0:6a:1f:
df:1c:e9:6c:47:f9:42:e3:e2:88:90:07:32:97:8c:
05:d5:90:04:6a:c1:c6:68:f5:7f:7b:81:08:38:4a:
42:28:17:c5:66:57:5e:7e:36:84:85:a7:11:92:cb:
37:3c:be:99:ae:d9:95:3d:13:64:8d:64:fe:5b:61:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:52:5E:44:F1:20:4C:BD:6F:49:91:F1:FA:18:B8:34:9E:4B:2A:1B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZVJeRPEgTL1vSZHx-hi4NJ5LKhs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.35.0/24
Signature Algorithm: sha256WithRSAEncryption
60:83:4a:e0:cc:f1:d2:78:73:17:d5:7f:4a:aa:b0:21:a7:80:
54:18:79:ef:ea:da:08:93:73:78:e5:3e:da:d4:36:15:88:68:
79:73:38:46:05:6e:fe:7c:0c:1b:d5:65:b1:f0:e9:00:2c:7f:
43:96:3b:54:e2:4f:44:d8:9d:85:b3:27:4b:b6:c5:0b:42:e0:
9c:73:8f:72:5c:d4:af:ce:15:ce:be:67:e6:e7:f6:34:8b:7a:
f7:bb:81:29:13:bd:92:7d:8c:a6:d9:60:f6:ac:65:62:50:ee:
66:d9:4c:1a:1f:fe:03:95:74:25:4b:83:28:de:13:e9:67:8d:
4c:f5:a3:ec:68:a1:eb:54:2f:fb:d5:d8:40:af:71:7c:17:87:
a2:b5:76:b4:a7:e1:1b:7c:d0:f6:7b:c0:b1:16:53:e2:3e:28:
f7:da:fa:67:88:4d:c6:63:d2:43:a6:03:27:33:4e:b1:4e:41:
0d:33:47:3d:a1:72:d0:e4:e6:bf:99:c1:44:d6:0e:1d:77:ca:
1e:22:0a:48:d5:fe:81:0e:7e:db:be:f3:1a:12:d5:63:dd:e1:
bb:cc:b7:3a:90:6f:86:2d:cf:f8:95:bc:49:f6:c9:1e:bf:36:
c0:b8:3e:ce:b4:96:db:b5:15:44:6b:56:1a:2d:62:c5:8b:ca:
48:c7:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org