Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hUkFWqQOMmHvS43jvmxBnI84DMQ.roa
File: hUkFWqQOMmHvS43jvmxBnI84DMQ.roa (raw, json)
Hash identifier: D3VIavlPbtFfNbqDNOrYDePVcjfdj90AE7kE0MlvM1k=
Subject key identifier: 85:49:05:5A:A4:0E:32:61:EF:4B:8D:E3:BE:6C:41:9C:8F:38:0C:C4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0121
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hUkFWqQOMmHvS43jvmxBnI84DMQ.roa
Signing time: Wed 24 May 2023 16:30:17 +0000
ROA not before: Wed 24 May 2023 16:30:17 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:30:17 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=8549055AA40E3261EF4B8DE3BE6C419C8F380CC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:bd:f5:1e:12:91:91:e8:f8:a7:36:f5:26:
23:d2:90:cf:76:8d:64:96:f2:f7:e8:b2:9d:7f:77:
82:f5:a4:dd:ae:01:d0:ed:1e:8f:cb:e4:58:22:b9:
3f:73:57:75:ef:ba:d3:bf:a0:40:9a:c3:5d:b5:fa:
d0:02:05:29:1c:ee:a3:c9:a6:b7:40:e3:4d:8f:48:
71:da:e0:69:20:ab:df:54:c5:e5:02:f2:29:9d:47:
ec:c0:0a:65:c3:14:2a:a2:62:96:35:0b:60:81:89:
da:87:8c:e1:a2:22:cd:6d:40:dd:27:f3:05:0f:48:
2f:29:c7:a4:3c:0b:86:c9:1c:aa:88:de:f2:cf:d3:
a3:75:5e:c6:fc:1d:d3:ec:f1:4d:3b:5b:ad:ea:a2:
8f:27:d8:42:9c:45:1f:7e:50:56:e1:c6:69:4d:70:
a0:77:c1:c9:b7:e2:38:69:1e:c1:a8:9b:18:22:fd:
f5:68:bb:70:8f:7b:20:4b:86:26:24:81:18:be:3a:
f7:bb:a2:67:6f:a5:8f:ed:ae:d8:9f:2c:17:24:d3:
87:a0:00:98:8e:5f:52:e0:23:b6:b7:b9:d6:8a:93:
11:b1:d0:2e:7d:82:d9:fe:49:95:01:ea:a8:a6:69:
92:64:51:5a:33:47:84:d4:7c:87:6e:81:a1:91:be:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:49:05:5A:A4:0E:32:61:EF:4B:8D:E3:BE:6C:41:9C:8F:38:0C:C4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hUkFWqQOMmHvS43jvmxBnI84DMQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:6a:c5:84:85:3d:79:65:58:ee:24:ff:e2:8b:df:3b:92:99:
70:9f:b4:f2:35:44:68:b5:66:79:5d:2a:55:ae:c5:76:f2:30:
b7:16:e3:33:2e:10:c7:c2:ee:87:9b:6b:ab:c8:db:5c:1b:47:
a7:bb:11:16:56:a6:82:40:ad:3f:e3:2d:fa:09:95:76:b2:4a:
a5:73:1b:34:70:3f:c7:7d:16:a9:ef:75:9b:e6:0c:94:bc:2c:
eb:5e:32:a6:7c:78:51:48:7f:93:cd:5c:87:fd:ab:a1:67:f7:
d7:74:a3:36:ea:85:16:5e:b2:c5:c6:c3:b9:cc:a9:9f:bf:21:
fb:87:ca:8d:31:4c:7c:a0:ad:ac:a5:55:b5:56:6e:66:94:16:
0a:95:31:27:a6:df:c2:6d:a6:07:9b:80:5e:e9:46:10:00:f4:
66:0b:c7:0b:98:ff:a6:0a:29:89:45:e3:34:87:c7:41:19:2f:
9b:1c:89:9b:f7:aa:fc:6a:d6:20:04:db:48:8d:04:58:ab:5b:
4d:d2:e5:95:ae:4f:ca:02:50:12:eb:8e:9b:c8:40:6a:66:d9:
b3:ad:0e:63:ab:e1:be:ac:01:03:aa:d4:bd:ae:58:43:2e:99:
ea:fe:23:99:d5:59:37:aa:b4:1a:ac:08:a0:c9:ff:ac:e5:4f:
05:0c:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org