Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Inwfnzk2xznZgPZEpj5fdsC5zg.roa
File: _Inwfnzk2xznZgPZEpj5fdsC5zg.roa (raw, json)
Hash identifier: Dl7sDwYgIoDtQA22gxsymLX8+hTgflOnxtirWxATWv8=
Subject key identifier: FC:89:F0:7E:7C:E4:DB:1C:E7:66:03:D9:12:98:F9:7D:DB:02:E7:38
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05B9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Inwfnzk2xznZgPZEpj5fdsC5zg.roa
Signing time: Tue 22 Aug 2023 05:25:35 +0000
ROA not before: Tue 22 Aug 2023 05:25:35 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.109.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1465 (0x5b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Aug 22 05:25:35 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=FC89F07E7CE4DB1CE76603D91298F97DDB02E738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:9d:d4:2e:75:ee:1b:ae:bb:72:f0:aa:d1:
7b:1f:fb:49:02:5f:62:5f:8d:86:c2:89:4d:2f:03:
e2:53:ee:b7:23:92:35:83:6c:60:14:fe:33:f0:59:
24:32:88:65:9b:58:8a:67:ba:04:87:be:0e:13:32:
32:6f:45:62:10:90:42:e7:a9:38:a2:d3:7b:e1:56:
86:6f:23:fd:2b:da:80:e6:19:b1:dd:55:2b:97:e1:
0f:c8:d1:a5:d4:89:09:68:04:4e:c5:ec:13:12:3a:
6a:0e:3e:8b:7d:8c:9f:8a:eb:24:8f:9c:1c:c1:e6:
db:12:31:2a:18:fb:ab:1d:3b:ba:c9:04:12:ac:ed:
12:f3:88:2d:74:ea:bd:32:d7:65:11:70:9e:53:8c:
1c:29:8a:f2:ad:5e:12:7b:5b:2e:df:28:1b:b1:08:
b9:6a:b6:88:71:0e:2c:73:61:4c:62:e7:a8:24:6c:
83:84:fd:70:37:ae:67:23:f6:79:ab:42:37:92:ff:
09:04:cf:ef:5e:9a:24:56:d3:19:15:43:5f:93:39:
be:0c:73:7b:b2:72:0c:38:3f:1c:32:23:35:89:f1:
01:b0:20:c8:b4:e0:01:3c:64:cb:9b:75:75:3f:cb:
1f:c6:82:26:65:88:2c:9d:58:07:da:2a:1b:ef:69:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:F0:7E:7C:E4:DB:1C:E7:66:03:D9:12:98:F9:7D:DB:02:E7:38
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Inwfnzk2xznZgPZEpj5fdsC5zg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.109.8.0/21
Signature Algorithm: sha256WithRSAEncryption
cb:62:2b:fb:80:4c:95:e4:00:59:20:b8:71:09:f3:d6:da:2f:
b6:a0:35:41:06:01:7a:2a:15:8d:e2:09:3d:8b:3b:70:05:2b:
9f:9d:b0:2f:13:87:11:34:f3:41:9e:97:19:d4:6c:b4:bb:7a:
cb:e0:a8:f2:38:f1:53:41:ab:d7:da:18:50:08:23:af:03:d0:
7e:8c:5e:25:7e:2c:c6:b0:e1:00:39:d3:a0:61:64:04:87:dc:
9f:5f:7c:a0:07:03:4f:6f:44:fd:b8:4a:42:43:e8:c9:9f:b9:
fa:98:3b:95:a7:79:f3:ab:0a:9b:63:fc:f1:18:5c:68:90:fd:
51:b9:6c:a2:b1:7c:6d:72:3e:74:7d:cd:12:19:fa:71:37:8e:
f9:ec:c7:0d:a8:5b:65:03:95:3c:60:e7:67:81:a1:21:3e:ae:
e0:2c:7a:45:83:a8:d7:0b:07:bc:c1:41:9c:f4:f8:0d:6e:21:
f5:eb:31:dd:fc:95:53:42:9a:3b:1f:ee:a5:b3:9b:3f:fd:3a:
70:82:01:ba:74:b4:a6:18:2a:b3:a7:ac:b2:23:12:6e:ee:0a:
f4:84:8b:e8:d8:e4:4e:b8:42:d0:cd:9d:77:90:32:6c:46:04:
c6:33:c8:51:00:37:4f:11:c0:6d:6f:76:16:db:7c:10:a1:47:
06:55:6d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:50 2025 by rpki-client