Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dqEYqy_DHG-77PJfGqLmjk_NUsw.roa
File: dqEYqy_DHG-77PJfGqLmjk_NUsw.roa (raw, json)
Hash identifier: kKaLX8FgHSuDthNh3wMwQsDB7zeQwCRcBaKj36icmAc=
Subject key identifier: 76:A1:18:AB:2F:C3:1C:6F:BB:EC:F2:5F:1A:A2:E6:8E:4F:CD:52:CC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 028B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dqEYqy_DHG-77PJfGqLmjk_NUsw.roa
Signing time: Tue 30 May 2023 16:36:26 +0000
ROA not before: Tue 30 May 2023 16:36:26 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.76.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:36:26 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=76A118AB2FC31C6FBBECF25F1AA2E68E4FCD52CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:a9:8f:07:7f:51:75:cf:f9:87:2d:25:ce:
40:d3:93:9c:88:dd:cf:3c:f2:cf:e8:8a:41:96:09:
85:15:7d:14:ea:7e:a8:31:9b:21:3c:5a:71:fe:38:
0e:d2:e0:93:4d:49:8d:fe:a4:61:d7:4f:fb:fd:67:
a2:61:45:5b:64:c2:06:38:20:e0:33:79:8a:bf:be:
f0:ca:3c:7d:12:33:a7:e2:95:c4:14:4c:a2:11:04:
a6:e0:74:f8:92:b9:35:87:43:de:5b:76:b4:72:2a:
b8:75:da:cc:f8:85:99:2c:b4:86:ec:32:19:f8:8f:
00:21:94:08:3c:48:1a:06:d3:81:9b:4d:1e:fb:45:
c9:30:90:0f:a6:cf:30:9c:2e:74:d6:94:5d:09:45:
8d:92:26:e0:8a:aa:95:7e:b6:d6:62:17:05:3f:7b:
45:71:f3:47:17:ba:4f:7a:e7:22:c7:e2:04:82:a2:
0e:4a:4c:69:0f:54:84:ab:d9:59:69:82:36:38:38:
30:76:98:1b:ce:e8:6b:f8:a5:7a:65:1a:33:b8:d1:
7e:bf:22:8c:1e:36:79:ba:10:54:b2:ff:b4:81:70:
be:35:ab:bb:d3:19:8d:46:b0:c5:0e:31:7c:9e:a8:
9e:ec:84:4f:e3:06:20:6b:6f:60:20:44:ad:44:ae:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A1:18:AB:2F:C3:1C:6F:BB:EC:F2:5F:1A:A2:E6:8E:4F:CD:52:CC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dqEYqy_DHG-77PJfGqLmjk_NUsw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.8.0/21
Signature Algorithm: sha256WithRSAEncryption
c2:58:1c:e3:aa:e9:4f:29:ce:eb:45:ac:fd:e1:a8:d7:f6:6c:
6b:33:3a:d6:5f:61:4a:af:8f:f5:12:65:13:88:ea:a1:6a:dc:
7f:23:f2:32:cc:aa:de:a0:f8:1c:37:68:57:47:80:c7:02:4c:
8a:55:cc:90:70:d3:43:85:f4:fa:1d:a1:1a:17:9d:98:44:41:
88:d0:f5:62:23:86:13:d5:08:ac:96:50:94:b1:0e:17:d0:0a:
1a:0d:02:f0:25:87:fe:67:6f:f4:74:4e:c4:8c:04:00:82:9d:
15:2a:a6:98:fc:b1:a1:76:72:5f:fc:1e:be:5d:ba:99:4c:e4:
23:46:63:ad:da:39:fc:2c:ec:7e:62:b5:10:e2:a5:ed:7e:cd:
2d:74:72:75:ea:ef:95:ed:25:c0:bf:b8:ef:80:39:e0:62:31:
3a:07:73:af:28:04:22:86:c8:fd:78:c6:ed:d1:8d:30:de:0b:
f6:6b:4d:0c:01:44:d4:e0:af:5a:68:e3:d9:94:3b:87:87:b5:
57:27:8c:9f:fd:05:80:27:a6:07:6a:05:db:5d:9e:12:03:8d:
7a:7f:07:be:e2:65:51:17:c1:c4:3b:ef:05:2c:1a:73:71:5c:
36:54:ce:44:d8:5b:3f:e9:98:ec:97:14:ee:fc:c7:cd:b8:a3:
77:f2:09:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org