Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bEaQ7IoOtaPEdGJSXWYjr1ZQxvs.roa
File: bEaQ7IoOtaPEdGJSXWYjr1ZQxvs.roa (raw, json)
Hash identifier: OWucM3efyivaIrYHaqDgRTQjnY/YEfZg9wPvslIZfwk=
Subject key identifier: 6C:46:90:EC:8A:0E:B5:A3:C4:74:62:52:5D:66:23:AF:56:50:C6:FB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 02B7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bEaQ7IoOtaPEdGJSXWYjr1ZQxvs.roa
Signing time: Tue 30 May 2023 17:17:32 +0000
ROA not before: Tue 30 May 2023 17:17:32 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.114.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 17:17:32 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=6C4690EC8A0EB5A3C47462525D6623AF5650C6FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d6:17:c0:76:0a:60:39:29:a1:62:9e:90:15:
aa:ce:63:67:e1:bb:51:1f:53:1e:2c:2f:bb:1f:92:
ec:65:d3:0a:86:1b:1d:38:ec:29:56:40:9e:91:53:
8e:a1:cb:16:c5:fd:95:a9:d2:4c:7e:77:c2:c2:32:
f7:af:e7:6b:c9:56:cf:56:a9:1e:6d:55:05:24:01:
11:8f:d4:a0:f0:66:1e:ad:a4:cd:24:4c:9a:13:be:
7c:d7:ce:a1:fe:df:64:ee:09:c3:53:84:17:c2:80:
0b:af:40:42:88:2b:4b:9f:1d:cb:aa:dc:9b:1c:c1:
9a:05:1e:02:39:3f:6a:51:f7:a9:33:22:6e:fa:ea:
56:96:37:26:c3:c2:cd:61:44:60:1f:ac:c1:23:32:
48:c8:fc:ee:a6:30:e4:60:44:9a:2f:53:08:00:89:
99:e0:73:1c:2a:47:86:f1:3b:92:15:5b:0d:c5:9e:
3e:15:17:4d:c4:9b:b9:84:a7:2f:32:62:dc:a7:f6:
c3:e4:9a:0d:c7:bc:e2:26:92:a9:a9:24:8c:33:f8:
b2:ba:36:49:34:71:a9:e1:f8:c7:8f:35:4c:2b:2c:
d4:7e:08:03:4a:81:bc:a5:9e:64:25:47:83:91:63:
1a:7e:5d:ea:a8:f0:d1:aa:03:b0:00:cc:ac:aa:71:
ef:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:46:90:EC:8A:0E:B5:A3:C4:74:62:52:5D:66:23:AF:56:50:C6:FB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bEaQ7IoOtaPEdGJSXWYjr1ZQxvs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.114.0/23
Signature Algorithm: sha256WithRSAEncryption
84:9c:4f:30:a6:cd:a6:43:8a:c2:8b:be:67:68:bf:3c:50:1a:
df:4a:88:c2:85:ae:8c:a5:21:ea:9d:76:71:4b:1a:8b:4e:ad:
19:be:f0:58:f6:8c:21:e9:0a:66:2f:b0:23:75:89:0c:6c:a0:
8e:c9:1a:7d:da:fd:12:89:15:14:06:b3:35:28:44:70:74:68:
b4:6f:a8:cb:94:8d:11:69:4d:dd:6c:6a:e0:82:56:04:57:fa:
9e:3f:cf:cd:4c:12:3c:c8:12:5e:03:c0:8f:fd:ed:d8:a6:d6:
bc:3d:78:10:4b:6e:e7:65:dc:59:a4:22:e3:d5:3c:51:c0:dc:
6d:a2:2f:28:45:c9:84:e4:8e:cf:f4:21:6f:ba:2f:68:7c:11:
fd:ec:cc:5c:f1:45:b8:f0:6e:b2:05:1f:ec:82:c3:39:de:60:
c0:80:36:78:23:5e:f7:e5:08:d3:ca:25:bf:0c:cf:82:04:f2:
f5:60:2b:2c:de:46:63:6d:75:8c:97:cd:ca:73:78:e8:34:14:
ee:7a:c9:d7:3d:c7:45:4c:88:e6:d0:59:6f:dc:04:dd:4e:ae:
b9:c5:29:e0:87:8b:3d:38:ad:ae:2b:da:bc:0c:ee:40:84:49:
b6:65:6d:5a:4e:6c:53:32:11:e3:d5:4f:71:99:c6:c4:58:79:
18:71:01:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org