Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iVXGFZuWuFRr14f2hdZPRYUfzAQ.roa
File: iVXGFZuWuFRr14f2hdZPRYUfzAQ.roa (raw, json)
Hash identifier: x2DuhSDmyLSsBmg9FhFz/TolGOfWDoCJTyGCYQ0i6aA=
Subject key identifier: 89:55:C6:15:9B:96:B8:54:6B:D7:87:F6:85:D6:4F:45:85:1F:CC:04
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 02E1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iVXGFZuWuFRr14f2hdZPRYUfzAQ.roa
Signing time: Thu 01 Jun 2023 16:04:32 +0000
ROA not before: Thu 01 Jun 2023 16:04:32 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737 (0x2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:04:32 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=8955C6159B96B8546BD787F685D64F45851FCC04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:7a:03:02:6b:9b:86:a3:68:cd:93:15:c0:
23:c2:18:5e:21:58:b2:04:b5:6f:42:b2:f9:09:9d:
12:53:b7:9e:ae:52:5a:c2:36:40:93:ed:3a:85:f0:
45:09:e2:2e:16:62:25:21:52:1b:ce:2b:b5:ef:1f:
25:06:9a:b8:c0:89:96:e1:43:b7:4f:26:b3:0c:d0:
81:be:51:5b:89:15:e4:8c:c5:bc:fd:45:03:4e:75:
61:42:86:cb:e9:bb:46:01:b7:7e:6f:f4:f2:3b:b9:
49:7a:01:1b:ff:6f:1c:30:55:c9:94:81:ad:16:9f:
94:02:9c:cc:c1:05:fa:85:93:4b:cc:99:be:cb:a5:
92:76:c1:c7:82:09:01:bc:f6:e1:82:3e:93:be:a9:
f6:eb:f3:92:bf:17:ea:90:13:ee:fb:65:27:8d:dc:
32:2e:54:56:74:a4:db:4c:70:4a:55:24:c9:1e:e1:
a7:88:89:f0:f6:d7:98:84:06:a0:9b:d9:80:4f:b0:
35:64:6b:d9:c9:30:65:37:70:bf:cd:89:4b:4a:c4:
55:6f:b5:7c:d2:30:fc:2e:10:7a:6e:63:e1:65:7a:
75:b0:44:b5:1c:ed:b0:e2:b6:76:7f:04:8b:2f:2d:
74:8b:89:ac:7b:b5:ef:55:81:da:fd:40:01:fa:82:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:55:C6:15:9B:96:B8:54:6B:D7:87:F6:85:D6:4F:45:85:1F:CC:04
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iVXGFZuWuFRr14f2hdZPRYUfzAQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.56.0/22
Signature Algorithm: sha256WithRSAEncryption
62:76:b1:04:f4:65:76:ba:ba:90:fa:ba:87:c6:03:dd:07:31:
95:dd:1b:05:f0:e7:7a:ad:26:8d:14:0e:90:02:98:e5:0e:e6:
41:79:32:0f:6c:9a:5a:95:7d:ef:48:aa:05:bc:ff:46:9a:c0:
a2:a4:92:73:42:09:ea:e9:51:04:f0:9a:69:94:33:df:8c:92:
ec:cc:b3:67:87:cc:16:a6:5e:4e:d7:5f:9d:9a:9d:df:44:2b:
42:17:55:47:1e:6c:2a:c4:ec:4b:ea:1e:d8:65:a0:6e:8e:8c:
46:4f:f2:9c:78:58:18:9c:a9:a8:31:ac:7d:16:7c:3e:13:53:
8e:73:60:97:9f:4d:1f:83:ec:9c:80:7b:50:2e:45:09:9b:f4:
ec:18:5e:a5:d5:a1:5f:bf:96:59:ea:04:36:ea:c4:4f:2b:cd:
eb:9e:24:46:8e:88:66:b8:57:b9:f6:3c:7b:89:c1:93:82:4a:
d5:23:9e:58:8e:8b:39:f0:77:66:54:a9:2e:a2:5b:a7:38:00:
70:1f:28:1e:1a:81:3a:99:2c:df:1a:a3:59:92:ef:fc:34:27:
62:e6:7e:9d:83:44:78:23:f1:45:ef:98:74:62:15:63:fc:ec:
eb:8e:ad:0e:30:81:1a:2b:72:66:98:bc:68:e2:83:e0:11:8b:
5b:c1:44:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:51 2025 by rpki-client