Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/d6HS-15eO38IrYgLKmAE15eOdyM.roa
File: d6HS-15eO38IrYgLKmAE15eOdyM.roa (raw, json)
Hash identifier: mZT2JmayxiidLk93fG4MMw3vaH5DQTRVfRCniU5YuHo=
Subject key identifier: 77:A1:D2:FB:5E:5E:3B:7F:08:AD:88:0B:2A:60:04:D7:97:8E:77:23
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01AF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d6HS-15eO38IrYgLKmAE15eOdyM.roa
Signing time: Wed 24 May 2023 16:35:22 +0000
ROA not before: Wed 24 May 2023 16:35:22 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:35:22 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=77A1D2FB5E5E3B7F08AD880B2A6004D7978E7723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:76:a7:37:24:82:2d:35:16:46:15:d7:b9:
9b:4c:0a:b2:1b:e3:70:a3:f3:e6:a9:98:50:b3:a4:
e5:98:15:6e:50:9f:1d:37:60:b1:d0:06:80:32:d8:
14:84:95:4f:7d:f3:8f:86:1c:e9:20:c7:22:09:f7:
c3:3a:c3:5e:65:ff:0b:58:5e:61:5c:26:3b:d6:cb:
b6:ce:80:ae:46:14:47:21:34:35:92:2b:b7:eb:b4:
ad:31:d0:6e:2d:9d:93:c0:bc:0d:38:5d:2f:58:c4:
65:67:33:52:d3:23:b9:48:ae:64:91:8e:2c:ea:12:
ea:51:2e:cc:03:5c:6d:ea:74:8e:25:63:d3:d2:6e:
f1:15:33:65:ac:ee:73:a4:90:24:e6:e9:00:68:02:
06:fb:a8:6b:3f:fd:2b:22:24:3a:ba:4f:90:94:65:
4e:5a:1d:43:1e:f5:ca:9f:ca:16:b5:8a:9b:39:3c:
42:a1:e3:5c:2f:fd:6c:a3:ec:53:bd:1e:4d:b4:c0:
20:19:28:a0:b4:c6:7d:16:ca:3c:d8:33:1e:09:54:
4a:91:dd:59:36:a2:a7:83:a3:ad:61:d1:da:c9:42:
c1:b3:ff:0b:a9:91:96:10:d5:55:cf:e3:99:b4:20:
db:00:35:b4:2f:e6:8a:d1:af:46:af:78:e6:3f:4f:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A1:D2:FB:5E:5E:3B:7F:08:AD:88:0B:2A:60:04:D7:97:8E:77:23
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d6HS-15eO38IrYgLKmAE15eOdyM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.72.0/24
Signature Algorithm: sha256WithRSAEncryption
32:19:d3:e3:c0:82:7c:47:18:2a:8a:67:5d:52:a5:c5:1a:f5:
cb:74:af:93:af:9a:81:d2:25:d3:43:1b:2c:8f:2f:4a:24:a4:
3d:e4:2f:1d:38:48:57:47:3f:ac:28:d9:1b:16:55:89:61:21:
75:17:25:29:f8:9b:a4:0a:19:d7:18:47:7f:fb:85:b1:be:e5:
70:4e:66:08:10:10:70:ba:15:0f:9b:92:46:f7:53:8e:f3:3d:
dc:69:89:13:10:d9:65:72:a9:e5:e7:18:5d:cb:49:6f:6a:f7:
8b:79:a0:f0:99:63:f0:b0:a3:45:14:b0:f2:ee:33:97:3e:fa:
e9:38:38:0a:a2:ac:c8:e1:af:60:12:7b:ff:e5:32:0a:08:f5:
91:a6:6f:cc:4f:ed:19:9c:70:55:4b:71:45:17:eb:e5:cb:fe:
4c:88:b7:48:f2:91:aa:7d:08:63:0c:53:7a:c6:19:e6:65:fa:
23:57:6f:c5:ab:b9:5e:aa:6c:1d:0e:87:39:97:94:27:05:dd:
f8:4b:e1:21:1b:5a:75:a4:f4:4d:1f:53:47:84:a1:2c:5a:78:
c5:36:31:89:9e:30:53:ed:51:2a:3d:b7:8e:51:8b:cf:1a:4c:
c8:c6:b7:59:47:d8:43:54:84:fa:8b:25:82:55:36:9e:1c:77:
25:a3:52:c1
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjM1MjJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDc3QTFEMkZCNUU1RTNC
N0YwOEFEODgwQjJBNjAwNEQ3OTc4RTc3MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClvnanNySCLTUWRhXXuZtMCrIb43Cj8+apmFCzpOWYFW5Qnx03
YLHQBoAy2BSElU9984+GHOkgxyIJ98M6w15l/wtYXmFcJjvWy7bOgK5GFEchNDWS
K7frtK0x0G4tnZPAvA04XS9YxGVnM1LTI7lIrmSRjizqEupRLswDXG3qdI4lY9PS
bvEVM2Ws7nOkkCTm6QBoAgb7qGs//SsiJDq6T5CUZU5aHUMe9cqfyha1ips5PEKh
41wv/Wyj7FO9Hk20wCAZKKC0xn0WyjzYMx4JVEqR3Vk2oqeDo61h0drJQsGz/wup
kZYQ1VXP45m0INsANbQv5orRr0aveOY/T9JVAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUd6HS+15eO38IrYgLKmAE15eOdyMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2Q2SFMtMTVlTzM4SXJZZ0xLbUFFMTVlT2R5TS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABT0gwDQYJKoZIhvcNAQELBQADggEBADIZ0+PAgnxHGCqKZ11SpcUa9ct0
r5OvmoHSJdNDGyyPL0okpD3kLx04SFdHP6wo2RsWVYlhIXUXJSn4m6QKGdcYR3/7
hbG+5XBOZggQEHC6FQ+bkkb3U47zPdxpiRMQ2WVyqeXnGF3LSW9q94t5oPCZY/Cw
o0UUsPLuM5c++uk4OAqirMjhr2ASe//lMgoI9ZGmb8xP7RmccFVLcUUX6+XL/kyI
t0jykap9CGMMU3rGGeZl+iNXb8WruV6qbB0OhzmXlCcF3fhL4SEbWnWk9E0fU0eE
oSxaeMU2MYmeMFPtUSo9t45Ri88aTMjGt1lH2ENUhPqLJYJVNp4cdyWjUsE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org