Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aLpjb2RdlEOqBBG18rzxtswenho.roa
File: aLpjb2RdlEOqBBG18rzxtswenho.roa (raw, json)
Hash identifier: 1nDVGLB/BM1Ah4zkHWUoRkoNGq/ZkNNv3NcqT9KoUfI=
Subject key identifier: 68:BA:63:6F:64:5D:94:43:AA:04:11:B5:F2:BC:F1:B6:CC:1E:9E:1A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0413
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aLpjb2RdlEOqBBG18rzxtswenho.roa
Signing time: Tue 06 Jun 2023 16:05:55 +0000
ROA not before: Tue 06 Jun 2023 16:05:55 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1043 (0x413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:05:55 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=68BA636F645D9443AA0411B5F2BCF1B6CC1E9E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:4b:70:5c:97:e7:64:1d:66:7b:1b:e1:ea:
5c:a8:01:f8:f0:9a:fb:3d:5d:9a:b9:35:1f:7b:18:
57:97:60:2e:ed:a8:31:f3:57:1a:a5:03:20:49:a5:
95:82:95:1b:81:2f:2b:64:1d:f4:b4:68:fc:e2:0b:
71:ed:87:21:ac:9c:3f:54:91:a4:69:57:86:b0:0d:
d0:42:e1:bf:81:8e:2e:0d:dc:bd:34:34:1f:90:33:
29:64:51:9e:24:97:64:e3:40:6c:32:41:33:2a:1d:
d8:bc:dd:a6:94:d8:59:0e:ba:2a:42:1c:1a:15:ff:
2a:f0:41:77:a1:45:cc:53:f1:fc:3f:98:55:3c:1b:
63:91:30:36:91:08:2b:06:50:9b:ca:ab:28:43:b5:
65:26:95:70:0f:3a:7c:51:d4:54:d8:84:9e:31:54:
90:a1:29:d6:63:2a:72:33:2d:92:76:90:ba:a4:58:
44:2e:f3:dd:63:c4:51:6b:a5:0a:76:7d:c5:5e:d5:
52:1b:ea:93:05:bc:93:b4:00:56:c4:37:cb:ef:65:
0d:35:cf:07:07:b4:f0:e0:59:66:7d:e8:65:8a:c3:
38:32:67:bf:3e:2a:92:15:64:1a:dd:9b:63:83:87:
b2:7c:05:83:44:74:e6:48:1e:24:27:de:8b:03:de:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BA:63:6F:64:5D:94:43:AA:04:11:B5:F2:BC:F1:B6:CC:1E:9E:1A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aLpjb2RdlEOqBBG18rzxtswenho.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:60:8f:2d:1f:cb:f6:f8:b8:80:b3:27:eb:fe:51:89:42:05:
b6:39:cb:a3:73:8a:bb:26:0c:47:73:5b:3c:c7:f6:89:c6:8a:
9b:35:6e:4c:e3:a5:0c:1c:9f:f7:ff:5f:6d:7b:85:f1:aa:1e:
ea:14:fa:e3:c9:a0:00:c4:28:95:d2:de:26:50:dd:32:cf:06:
c5:c2:50:5c:c4:b0:b7:a3:a6:62:8a:a1:ea:b2:cf:56:15:9d:
f6:89:03:16:71:ac:64:0d:5e:c6:62:63:bc:51:e7:ed:20:64:
60:c6:18:bf:32:35:f2:34:d1:74:50:54:27:1b:9e:68:08:a4:
9e:26:da:45:5e:79:98:7f:14:b9:a3:fa:5b:dc:9f:79:6b:75:
73:80:66:e6:7c:0c:08:ad:9a:e0:d1:32:69:dd:5a:4a:4d:69:
60:6b:a1:51:94:f3:2b:b1:ca:1e:c5:36:12:b5:6b:9e:2d:ba:
9b:7a:2b:87:89:18:6c:4d:e5:4e:71:35:d2:24:6a:17:54:21:
f0:86:c4:98:f7:08:03:8b:cd:df:79:4c:16:e1:22:69:b6:50:
12:2e:b3:57:fe:5f:4c:ca:73:a8:3a:2e:d6:26:eb:27:70:74:
c1:b2:d3:93:6e:b8:94:82:68:ce:a6:eb:75:ae:67:78:9c:72:
94:99:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:10 2025 by rpki-client