Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fe9DHufvaf78LOsYjNC_qE8GMjk.roa
File: fe9DHufvaf78LOsYjNC_qE8GMjk.roa (raw, json)
Hash identifier: Fes6ALxbaDCVzEI3/3/37d6gtam8JZkCsqXczoWf0U0=
Subject key identifier: 7D:EF:43:1E:E7:EF:69:FE:FC:2C:EB:18:8C:D0:BF:A8:4F:06:32:39
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 028C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fe9DHufvaf78LOsYjNC_qE8GMjk.roa
Signing time: Tue 30 May 2023 16:36:26 +0000
ROA not before: Tue 30 May 2023 16:36:26 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 219.114.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:36:26 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=7DEF431EE7EF69FEFC2CEB188CD0BFA84F063239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:6d:9b:f9:67:17:0a:84:7f:98:40:68:61:
34:dd:92:56:90:99:74:9b:01:53:f5:8a:33:e0:2a:
45:91:ce:53:58:5e:66:26:e2:d9:c5:80:7d:fe:b6:
cc:17:bc:e7:eb:8b:f9:5b:d6:86:bc:eb:22:57:06:
38:6a:0f:de:17:a7:5a:33:4d:ee:ea:fc:68:a3:5c:
66:f0:e4:c2:90:43:d8:d5:b6:83:24:e9:18:1c:e4:
0d:62:f7:6c:f3:da:67:22:cf:58:22:c0:c8:a6:d1:
2f:b7:b3:ff:6d:5f:0c:bb:b4:59:95:1a:bf:4a:be:
d9:60:07:fd:ca:44:7c:7d:31:7e:37:1d:d0:4c:90:
0e:82:cd:9a:d0:6d:63:0a:ee:02:ca:17:64:5d:aa:
81:b2:6f:98:b4:f0:e6:5f:27:2f:4b:20:5a:5c:61:
4f:86:87:e6:03:7b:23:c6:61:b9:e1:8e:1d:19:96:
35:ab:09:bb:b9:85:92:7f:02:e0:de:4d:dd:95:72:
9d:12:c2:77:b5:23:b6:0e:74:a0:b5:1c:df:b2:04:
71:10:30:98:74:f1:0d:d2:e7:28:0c:7d:90:e3:f7:
85:cc:e7:15:c8:26:4f:03:3f:b2:f9:f8:a7:fe:be:
ec:33:1e:07:8c:b9:9b:19:65:37:d5:30:37:ef:a6:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EF:43:1E:E7:EF:69:FE:FC:2C:EB:18:8C:D0:BF:A8:4F:06:32:39
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fe9DHufvaf78LOsYjNC_qE8GMjk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.114.168.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:cc:99:1d:3a:57:59:2a:9e:04:f1:bd:f4:6d:a3:0f:fd:fb:
fb:5f:a4:ef:7b:c0:b5:fa:e2:63:c7:fb:c0:3d:f2:df:c1:9d:
fe:a4:71:73:8f:3b:59:0e:b8:5a:1b:33:cd:3b:53:ce:ca:89:
4c:6a:34:c0:c8:66:26:18:69:e1:48:20:d9:cf:fe:b3:f8:70:
b5:70:e2:6c:eb:4f:b5:4d:1f:34:c5:28:a0:bd:d3:b9:47:91:
38:35:2a:c6:05:dc:9d:12:26:d6:87:d4:17:97:b3:6b:01:cd:
a9:82:ef:53:c8:11:d3:1c:05:eb:28:b8:10:8a:0c:2f:8b:80:
ea:99:72:2e:cb:0c:fa:93:a2:c9:1d:a7:43:e4:29:19:47:aa:
d8:20:ff:36:10:3c:c1:63:bb:7a:d1:23:98:0d:a3:48:5c:cb:
ed:4c:00:cc:50:14:06:06:ea:d0:07:1f:f6:c5:d5:c8:44:2f:
40:04:d5:61:a7:83:14:11:fe:f9:f3:58:07:b2:c8:06:0f:9b:
a1:cc:30:78:6e:cc:7b:36:32:10:51:67:ae:ab:4d:ab:02:19:
80:f6:38:f6:89:1b:05:3d:8c:ed:2d:5d:2e:23:95:31:82:4e:
9b:e7:7f:5d:5b:d7:fe:27:5b:10:6d:10:e9:62:68:dd:4c:cf:
74:59:bd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org