Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZuOEXmoEB52I7UFGp4vlpvAscDI.roa
File: ZuOEXmoEB52I7UFGp4vlpvAscDI.roa (raw, json)
Hash identifier: s/1MEAgd7PGgldCPNA5lWXwU5N4jG7VhsguEw7fcTTs=
Subject key identifier: 66:E3:84:5E:6A:04:07:9D:88:ED:41:46:A7:8B:E5:A6:F0:2C:70:32
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 02B5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZuOEXmoEB52I7UFGp4vlpvAscDI.roa
Signing time: Tue 30 May 2023 17:17:31 +0000
ROA not before: Tue 30 May 2023 17:17:31 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.238.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 17:17:31 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=66E3845E6A04079D88ED4146A78BE5A6F02C7032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:8c:40:b1:9b:a0:97:d4:5b:15:34:91:39:
32:57:c5:f8:35:cf:79:fa:df:7a:bc:d7:82:9e:b2:
98:49:b9:b8:50:4f:57:de:1d:52:d0:0f:59:ce:27:
37:c7:4a:7c:33:cd:d9:32:5a:8d:d9:e1:2d:ed:13:
12:86:dd:9c:2d:a9:b3:00:49:81:d3:b5:29:91:46:
4d:97:c4:94:f6:97:5f:c0:68:09:11:51:dc:64:14:
e0:fd:50:e6:6f:44:3c:5e:b4:31:5a:23:2b:09:5e:
57:c5:7d:30:85:fb:d0:36:c3:00:82:9e:58:a7:eb:
e1:70:3b:c8:6c:82:7a:51:02:6f:31:7d:c4:c2:cf:
d9:f5:da:c0:47:f6:f1:a2:24:d3:c0:f8:2e:2f:ff:
7b:47:2c:6a:3b:7b:cd:a8:b9:af:a8:6d:7b:78:6e:
f0:40:b9:70:2b:ac:d9:2c:75:c8:df:14:b0:ee:70:
29:b6:53:1d:f2:41:8a:3b:2e:b6:74:bf:d5:b6:c4:
ec:b6:97:06:11:78:a8:ae:8c:36:95:22:7e:00:df:
dc:cd:78:ea:be:cc:9c:a7:b9:82:b4:98:53:10:9b:
4d:7c:e0:35:5d:5c:4d:e4:29:15:2e:39:b8:19:e6:
9f:72:f1:f1:26:0c:58:d3:36:c5:8c:79:26:88:fd:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E3:84:5E:6A:04:07:9D:88:ED:41:46:A7:8B:E5:A6:F0:2C:70:32
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZuOEXmoEB52I7UFGp4vlpvAscDI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.238.0/23
Signature Algorithm: sha256WithRSAEncryption
18:e4:d3:55:5d:09:ad:07:a8:88:de:43:a6:9b:4b:41:2c:33:
77:99:cd:39:5a:c7:cf:cd:01:2a:eb:09:ee:f2:ad:b1:6c:87:
e2:21:0f:5b:85:3d:63:77:0d:bd:ee:31:c7:60:31:16:01:47:
80:ef:13:06:66:c6:5f:63:4b:09:a1:24:ef:66:5b:10:81:c9:
c6:06:6c:a1:b5:1b:98:a6:57:6c:3a:a4:1e:49:ff:0e:95:5b:
50:e1:d1:9f:5f:43:a6:41:9c:d7:3e:51:c4:8c:c9:a1:44:0e:
d2:c2:7e:ee:d4:12:ff:61:dd:3b:ed:f9:4e:a2:06:16:bd:ae:
45:55:dc:d0:d0:3f:26:b8:30:83:f2:ce:0b:af:f5:14:d3:4a:
06:34:f1:96:c4:2e:16:b3:da:0a:25:93:63:ab:a0:5b:26:3b:
82:f6:2a:78:ea:8f:cd:88:de:5b:20:eb:d5:a8:68:08:62:d4:
84:d7:11:e7:57:eb:fa:38:cd:0a:8c:d8:cb:ac:67:0c:37:8c:
d8:fe:44:e7:e4:27:66:d9:7c:85:f9:af:da:04:9e:67:39:02:
e3:d7:39:0c:30:60:bf:87:ad:d0:19:93:12:5c:69:b0:a7:4c:
aa:34:f7:1f:59:d9:fd:ec:49:b5:bb:47:4c:66:f4:f9:e2:ae:
25:20:b0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org