Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZrbGoN_p5cnsHrvhTSaVwlBHXFY.roa
File: ZrbGoN_p5cnsHrvhTSaVwlBHXFY.roa (raw, json)
Hash identifier: o68HmQCn4UgPIaDIkwKCUmWx16X7vle4CorvIafZ0mU=
Subject key identifier: 66:B6:C6:A0:DF:E9:E5:C9:EC:1E:BB:E1:4D:26:95:C2:50:47:5C:56
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 022F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZrbGoN_p5cnsHrvhTSaVwlBHXFY.roa
Signing time: Tue 30 May 2023 16:30:35 +0000
ROA not before: Tue 30 May 2023 16:30:35 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.76.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:30:35 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=66B6C6A0DFE9E5C9EC1EBBE14D2695C250475C56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:a0:39:d4:23:80:e8:e3:86:c7:19:b4:8a:
13:16:af:8a:83:df:b7:b8:0c:43:7a:f9:70:66:78:
d1:00:92:be:3c:ee:aa:cb:c5:09:db:e9:60:a6:3c:
79:5f:61:9f:7e:fa:bf:40:a7:7b:ab:2e:ec:de:c8:
8c:ba:0b:a5:f9:1b:af:c1:3c:ad:eb:ea:e2:40:70:
47:11:c7:33:58:a6:1b:fe:0d:8a:0d:87:f9:e3:1a:
27:07:d6:27:23:33:7c:d0:3d:a9:87:28:a9:56:0e:
71:93:45:03:58:d1:19:d3:b3:5e:1c:8f:c1:87:ac:
1f:b5:53:c9:05:a0:33:a1:2a:7d:7c:0e:d5:8e:62:
c0:83:72:a3:ac:43:9f:32:f5:bc:bb:a7:db:e3:c3:
7c:49:cc:3b:6b:da:6d:8a:59:8b:6f:13:ac:f2:a6:
ce:6e:78:d3:e9:d5:32:57:ef:4c:24:77:9b:f2:f7:
71:fb:d9:b4:7d:46:32:e7:cd:24:81:6f:c0:26:86:
62:7f:ef:e4:09:41:e3:df:1c:8d:ab:ee:35:a8:63:
73:20:3d:3b:83:78:d6:88:5b:8d:27:46:a4:97:4b:
c0:7d:f6:5f:98:bc:a5:b3:8a:5a:4d:27:0f:18:54:
b7:4e:53:6e:7a:19:f0:df:29:54:67:2c:d2:5f:8f:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B6:C6:A0:DF:E9:E5:C9:EC:1E:BB:E1:4D:26:95:C2:50:47:5C:56
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZrbGoN_p5cnsHrvhTSaVwlBHXFY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.16.0/20
Signature Algorithm: sha256WithRSAEncryption
02:8d:72:9d:79:79:b5:ec:a9:2d:cc:64:c7:24:4f:97:f4:2e:
53:8f:c5:5b:fa:64:52:fe:da:3d:d3:4a:3e:1d:5a:e0:13:17:
1f:d8:d1:ef:3f:70:11:d8:f5:4d:c5:8e:95:37:bf:26:5b:b9:
31:19:b1:ae:82:91:89:95:20:90:a9:61:83:22:9b:21:0b:a3:
b0:ab:c0:1a:9a:45:87:7b:2e:63:8a:f7:88:bc:ec:4d:da:18:
d6:17:88:70:51:82:40:c9:e4:7a:6b:e9:67:c3:42:8d:e1:61:
42:fd:99:a2:8a:f3:02:01:64:cf:ad:5e:1f:3b:1a:97:2f:a1:
56:d6:97:44:5a:50:71:85:fd:1e:4d:9f:ca:53:cc:23:8e:01:
9b:b1:70:59:bd:bd:22:ac:e7:71:36:51:d6:58:98:2d:40:11:
05:69:35:52:67:ac:b0:5f:8d:ac:ef:8e:77:d1:71:2c:88:92:
be:2f:2b:e0:4f:30:84:3c:fa:ab:4d:41:14:0f:84:41:f0:26:
b9:7d:ca:f1:6a:89:7e:6c:e8:b6:1b:59:d9:1d:44:39:2c:7a:
bd:15:03:1a:8f:da:2b:27:29:4e:d1:e0:75:6f:f8:2d:36:ee:
8a:68:30:a3:19:4f:6d:91:24:a6:d3:cc:22:05:d5:65:f1:f9:
f9:ac:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org