Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k2IGVUY4yrxtIEEd3gMRS_4FWjc.roa
File: k2IGVUY4yrxtIEEd3gMRS_4FWjc.roa (raw, json)
Hash identifier: JkEqXTuJOCGFDgzraZM7IF6a/SFqARW4/F7nZnUYU+k=
Subject key identifier: 93:62:06:55:46:38:CA:BC:6D:20:41:1D:DE:03:11:4B:FE:05:5A:37
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0520
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k2IGVUY4yrxtIEEd3gMRS_4FWjc.roa
Signing time: Thu 27 Jul 2023 16:54:08 +0000
ROA not before: Thu 27 Jul 2023 16:54:08 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 49.105.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1312 (0x520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:54:08 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=936206554638CABC6D20411DDE03114BFE055A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:0b:a9:fe:8e:f3:8d:76:4e:ab:83:65:07:
99:32:7d:3c:d0:0b:2f:55:07:6e:f6:31:e6:07:9c:
9c:b8:ee:91:b1:cf:90:74:15:c6:46:3e:19:08:21:
a3:98:de:2a:8b:4a:d3:05:2c:c6:b8:f6:02:b3:2e:
8e:0e:3e:88:b8:a4:b8:1f:ec:e9:99:d9:33:79:9f:
83:62:94:cc:41:4c:62:89:a7:a2:47:97:6f:46:d8:
eb:a3:9e:27:e6:24:f5:a0:f7:af:61:be:c3:71:ea:
80:17:e0:66:77:31:f1:15:84:ad:19:b3:cf:88:ee:
59:9e:67:78:fd:d2:80:72:3a:28:1e:84:43:fb:a4:
2b:6e:13:ec:9d:e2:30:5f:12:ad:25:21:cb:21:56:
fa:6b:62:5b:50:5c:4b:a4:15:62:98:e2:1a:c7:e2:
f4:25:2f:7c:ce:7a:1b:c6:ec:8c:98:6d:d3:c4:e3:
e7:bf:96:00:0a:bd:29:ab:5f:3f:92:8a:61:b9:9b:
66:31:a5:4a:9d:f9:90:e1:18:9d:c8:3c:7d:53:b8:
ec:e1:33:d4:d8:20:3a:1e:79:d6:f2:96:03:3c:80:
e1:47:4b:5f:58:06:1f:19:bf:3b:c3:44:3a:17:49:
68:c6:99:4b:74:dc:68:63:fc:71:34:c4:ab:06:04:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:06:55:46:38:CA:BC:6D:20:41:1D:DE:03:11:4B:FE:05:5A:37
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k2IGVUY4yrxtIEEd3gMRS_4FWjc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.14.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b7:38:09:fd:82:cf:63:ef:2a:34:bf:c8:93:9e:16:a0:98:
0c:0d:b4:53:26:a8:e9:f2:05:92:74:75:19:1f:95:5d:15:17:
04:02:cd:e3:bf:9f:2f:6a:c4:f5:af:ab:a8:de:d1:21:be:e3:
22:2a:af:55:b7:15:38:04:01:00:82:a6:0f:b1:62:64:48:39:
37:5f:5b:81:2e:0a:40:bd:87:c0:d1:55:53:c3:73:6f:6c:ac:
4e:4d:e5:21:ec:67:a6:ed:9c:1f:c4:49:fb:67:5f:d0:d1:d2:
69:7f:77:e7:57:ba:82:74:4d:4e:69:37:d4:6f:ad:a2:a3:77:
c1:0b:f8:c4:48:7d:72:9e:18:b4:d5:e9:8d:15:5a:e2:ea:86:
77:87:b8:f4:47:0a:f9:61:cb:56:33:de:6e:b0:25:5a:6a:02:
50:e9:7e:cc:f1:b6:75:59:3a:4a:71:1c:63:1b:33:8d:ab:2c:
a0:64:81:e9:95:70:6f:18:de:5e:6f:4b:67:da:a1:81:c2:b8:
74:28:ad:b1:2d:14:9a:93:5b:34:99:24:06:b1:41:27:56:e0:
49:fd:64:67:09:80:18:02:74:1f:95:ad:a7:03:30:f0:ad:9c:
a2:b1:d7:a0:fa:4c:d9:7c:f1:fb:97:bb:a2:0e:7e:fd:11:40:
4d:0d:92:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:09 2025 by rpki-client