Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dSC_wZPJBCPU7X6YyB-j_djhlRc.roa
File: dSC_wZPJBCPU7X6YyB-j_djhlRc.roa (raw, json)
Hash identifier: vgKkhXjcCgjzP/2CN1M3h8r/l5NwZ1kvvAdLxSpmDiI=
Subject key identifier: 75:20:BF:C1:93:C9:04:23:D4:ED:7E:98:C8:1F:A3:FD:D8:E1:95:17
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 83
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dSC_wZPJBCPU7X6YyB-j_djhlRc.roa
Signing time: Wed 29 Mar 2023 16:04:49 +0000
ROA not before: Wed 29 Mar 2023 16:04:49 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:04:49 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=7520BFC193C90423D4ED7E98C81FA3FDD8E19517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:0b:11:7f:52:b1:77:a1:b3:10:7f:fa:c4:
12:6d:0e:22:7b:b2:73:41:83:40:bb:d4:6e:32:ed:
c1:6b:a9:ba:37:80:0b:5b:9d:08:da:ce:6b:2f:87:
30:bd:fa:04:fe:7f:84:eb:61:5b:18:85:14:2e:5f:
b2:66:aa:0f:75:f4:62:d3:a5:ae:27:ba:ae:e7:f3:
92:41:a7:94:4f:99:5d:18:3c:24:8d:e4:cf:39:c6:
54:cd:7e:36:5d:4b:20:26:09:f6:1c:e6:aa:07:46:
06:9e:a9:01:69:95:64:ea:82:0c:0c:a6:0d:16:34:
bb:b2:e9:c5:16:33:0d:a7:02:54:84:d5:d4:d5:b7:
43:e3:3e:d5:87:f7:f4:23:fd:8b:a2:e2:ec:13:84:
80:67:73:d1:ac:92:89:44:2f:89:47:9d:2f:8a:67:
c6:65:04:33:a9:69:56:f1:34:f7:9a:6a:a0:d6:ce:
ef:3d:02:49:89:a1:c9:1a:63:a0:56:2e:e3:c8:12:
ea:30:ad:a4:9b:6e:1f:5a:e9:f2:96:88:77:9d:f7:
e3:65:9f:b2:67:b6:8a:83:fb:02:73:f7:04:27:6f:
19:5a:21:78:21:20:80:e9:9f:40:b0:8a:30:6a:9b:
74:70:7a:d6:a7:a6:b1:87:5c:69:e6:87:db:e2:ab:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:20:BF:C1:93:C9:04:23:D4:ED:7E:98:C8:1F:A3:FD:D8:E1:95:17
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dSC_wZPJBCPU7X6YyB-j_djhlRc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.224.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:f6:aa:db:59:80:7e:8f:04:2a:69:99:42:c3:1e:16:b9:f7:
d1:a5:64:c2:44:15:90:ce:f6:e8:f8:ae:04:fb:a8:fa:eb:e3:
35:a8:4a:b6:29:aa:30:9e:a5:8a:83:a7:2b:4f:c2:1d:6d:77:
3d:50:dc:6f:91:6b:d9:51:70:a0:6e:ca:7b:7e:f5:10:12:03:
59:3c:d7:52:d0:52:8e:e8:d7:51:36:f3:ad:49:b5:fa:8d:15:
ca:68:f5:77:56:13:46:4a:9c:41:b2:2f:e7:7c:8a:2e:fe:6e:
40:5a:ce:35:7e:8c:75:30:d1:6e:70:cf:a8:bf:1d:b7:72:14:
98:56:2f:1d:5c:49:28:29:18:5a:8f:cf:8e:e9:b4:f5:f0:a7:
ca:39:40:e8:8a:4c:03:98:af:d1:a5:dc:06:db:97:05:fa:9e:
ce:d2:07:15:e1:17:fc:9c:fb:af:4c:cf:89:a4:98:4c:b8:42:
b6:6e:28:97:f3:3e:83:b6:3e:f0:eb:79:50:49:e6:f0:84:ab:
53:eb:2a:b7:d2:dd:02:8f:b1:10:94:d4:79:62:25:e6:10:43:
15:ff:68:1c:bf:d5:45:b7:db:02:9f:41:84:66:82:fb:5e:59:
15:0a:79:41:d4:b0:9f:9d:88:a4:e6:4a:79:a7:2e:1e:23:ab:
78:1b:3a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org