Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_4Sc0UREBvvchzdsbfawglAtqUg.roa
File: _4Sc0UREBvvchzdsbfawglAtqUg.roa (raw, json)
Hash identifier: cltzSPTVV8qIEs5EzaEG0ZONKkRAzYbpnSY6GmKG3VQ=
Subject key identifier: FF:84:9C:D1:44:44:06:FB:DC:87:37:6C:6D:F6:B0:82:50:2D:A9:48
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: CC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_4Sc0UREBvvchzdsbfawglAtqUg.roa
Signing time: Wed 24 May 2023 16:02:08 +0000
ROA not before: Wed 24 May 2023 16:02:08 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:02:08 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=FF849CD1444406FBDC87376C6DF6B082502DA948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:8e:38:72:f4:7a:d6:2c:04:72:4b:2c:cf:
36:30:80:6a:3f:87:09:1d:41:7b:67:18:1d:01:e5:
71:f9:2a:5a:0f:12:5d:b1:91:21:c1:88:3a:40:04:
7b:5b:1a:20:a5:0a:b2:79:1f:12:91:ab:c5:eb:96:
31:84:25:ab:f7:fb:0f:5c:3b:b9:81:c1:2f:8d:13:
4b:d2:b2:d3:9e:9b:15:d1:a9:ae:2c:40:d1:10:b6:
71:ed:7f:63:9a:79:5d:c2:40:57:95:ef:36:66:1d:
e4:b7:b7:75:96:8d:1e:14:7a:18:77:b5:33:3b:4e:
87:88:86:7b:e2:b7:39:06:89:5e:cf:32:3f:78:da:
7a:7d:7b:e7:04:f5:61:ac:71:7f:cb:a9:21:f1:95:
ef:2b:07:aa:04:2a:e5:d1:c0:bf:17:22:d2:55:52:
e4:42:cd:2d:de:1f:72:a7:e8:00:db:bf:fb:ad:e9:
3f:4a:82:b4:81:2c:71:ea:7c:50:29:c6:a5:e5:81:
83:4c:8e:17:62:15:46:e0:8a:8b:b3:33:0d:10:58:
04:aa:f3:17:16:f9:f7:45:2f:ba:70:a3:85:f6:40:
d4:76:87:b4:a7:56:ae:4a:ed:d4:73:c7:d8:d2:56:
4e:e7:03:e8:90:65:b4:1a:e2:7d:76:ba:d8:69:1f:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:84:9C:D1:44:44:06:FB:DC:87:37:6C:6D:F6:B0:82:50:2D:A9:48
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_4Sc0UREBvvchzdsbfawglAtqUg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.216.0/21
Signature Algorithm: sha256WithRSAEncryption
14:d9:70:4c:66:94:3c:25:51:0c:dd:57:c8:9e:b4:45:ba:a6:
3e:71:fd:b5:1a:82:6f:87:e8:5f:20:06:93:1b:d2:d3:b1:94:
cd:07:f1:5d:1a:6b:43:3b:21:52:ef:76:c4:de:a9:cc:26:1e:
9b:49:fa:46:90:61:54:ca:0c:d3:57:97:79:7a:4e:cb:c7:fd:
d6:7b:2d:17:17:03:91:79:21:32:46:63:d5:d5:96:39:84:78:
0c:d2:34:32:eb:15:f6:45:51:99:e0:57:3b:76:bf:c6:af:56:
60:15:af:36:39:33:3a:f6:5d:9f:14:c6:74:ea:81:51:38:48:
ee:04:6d:59:4c:7d:91:6b:38:77:c2:1e:14:3a:75:63:6f:91:
69:5c:f9:73:a2:70:50:aa:a4:73:63:38:b9:6c:2b:20:72:ad:
58:b7:de:cc:08:1e:ea:59:dc:43:dc:60:d6:ae:57:af:b1:1f:
c4:40:b7:3b:a3:7e:dc:c5:ed:f5:ad:0e:c0:ac:aa:dd:a4:48:
28:e3:20:12:2b:02:0c:85:17:7b:c9:ff:a8:ae:8b:70:19:8e:
d3:39:46:cf:20:40:eb:66:17:90:a2:74:f2:a3:af:0c:ed:a0:
33:49:91:73:db:c7:37:56:e0:28:01:8f:d6:70:3d:51:b5:07:
82:77:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org