Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j-lO_EAnPdcoqUmkKQZm-LFCX1k.roa
File: j-lO_EAnPdcoqUmkKQZm-LFCX1k.roa (raw, json)
Hash identifier: jFYKNiu8LkTrLmHN9HxFNVlcvxNc/fk79DSakR4mAH0=
Subject key identifier: 8F:E9:4E:FC:40:27:3D:D7:28:A9:49:A4:29:06:66:F8:B1:42:5F:59
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0406
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j-lO_EAnPdcoqUmkKQZm-LFCX1k.roa
Signing time: Tue 06 Jun 2023 16:05:50 +0000
ROA not before: Tue 06 Jun 2023 16:05:50 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1030 (0x406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:05:50 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=8FE94EFC40273DD728A949A4290666F8B1425F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:6c:25:16:ba:3a:e2:75:c0:22:b9:7a:f7:
b0:53:3c:07:d2:2c:75:37:28:b7:f9:8f:6d:df:7d:
6d:4b:79:1c:b3:5b:1c:25:32:ec:19:8f:48:23:90:
dc:b4:df:5f:eb:7c:c8:b4:4e:ec:5a:d4:e4:43:c6:
2b:6b:24:37:e7:5e:51:1e:15:a5:d8:97:d4:3d:c6:
db:4e:6a:37:01:2f:f1:36:b3:bc:77:77:a9:dc:56:
38:35:63:37:62:83:1c:a9:1b:50:f0:a0:80:64:57:
d9:9e:61:08:29:af:47:0b:9e:11:cc:b7:da:c8:04:
af:22:15:3a:5b:c3:f4:43:ec:43:31:3f:4d:b0:0a:
ae:51:78:fe:9c:58:df:02:be:ad:ce:e9:16:49:f8:
a3:5b:28:b4:ff:80:99:58:eb:92:59:55:c4:6d:11:
e5:8e:10:e8:4f:e4:c0:97:63:1a:33:80:b5:6d:7b:
5a:cb:0b:f1:ea:27:2a:cc:e6:76:44:99:3b:d6:13:
b2:aa:1e:08:58:ff:0b:62:1b:39:54:34:90:e2:e1:
99:d2:ea:f1:73:ef:48:26:79:65:5d:67:f4:85:7c:
e0:41:cf:e2:31:84:d5:3d:76:99:ac:27:cf:11:6b:
0d:d5:07:22:36:74:8f:1b:92:82:c2:f8:19:c6:2e:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:4E:FC:40:27:3D:D7:28:A9:49:A4:29:06:66:F8:B1:42:5F:59
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j-lO_EAnPdcoqUmkKQZm-LFCX1k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.228.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:3e:a7:b0:d4:86:a7:d0:0d:6b:9d:6c:27:6a:1e:30:ab:ef:
3a:97:1e:8a:b6:43:4e:8c:4b:79:3c:35:cf:e3:9e:fe:45:4d:
ca:24:99:fc:46:86:3f:77:31:46:04:3c:b2:60:ac:7e:5f:a2:
42:47:87:e2:98:81:98:61:34:0a:6d:bc:98:49:30:0c:b5:2c:
5a:14:c2:46:8c:86:37:ea:85:d9:3b:6c:ff:58:f1:eb:47:8d:
07:e3:c8:e5:d1:44:32:dd:2c:a1:a4:b7:45:17:69:7b:d8:d1:
81:07:d6:30:94:19:5e:f6:9c:2a:ff:50:6e:28:bb:f7:10:1f:
06:28:d2:33:9b:e6:54:38:2a:a4:a9:a9:22:60:8a:90:92:ef:
d8:b6:bc:e7:44:5c:92:dc:89:52:6f:11:71:57:45:87:22:d2:
d7:8c:3f:36:9e:c6:eb:ea:90:a0:dc:2b:8b:9b:36:51:75:32:
14:af:45:fe:6f:43:cf:d0:5b:79:ea:06:90:c3:f8:2c:95:2c:
0f:47:8f:9d:c8:37:50:2a:13:c3:65:71:ee:7f:c6:d6:03:3b:
d3:1f:ae:44:23:a3:15:66:e8:ff:af:9b:78:70:24:01:2b:b1:
c7:15:d7:53:9d:f7:1f:71:90:01:17:32:4c:39:eb:27:b2:ab:
6d:aa:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org