Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kLjpxBuRTV1FpD4Mh6skL15cwTA.roa
File: kLjpxBuRTV1FpD4Mh6skL15cwTA.roa (raw, json)
Hash identifier: FwFBNUREgrUzQMANk8KuS9xmrwXgERE9rtVtU2cOEcg=
Subject key identifier: 90:B8:E9:C4:1B:91:4D:5D:45:A4:3E:0C:87:AB:24:2F:5E:5C:C1:30
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 034E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kLjpxBuRTV1FpD4Mh6skL15cwTA.roa
Signing time: Thu 01 Jun 2023 17:56:29 +0000
ROA not before: Thu 01 Jun 2023 17:56:29 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846 (0x34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:56:29 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=90B8E9C41B914D5D45A43E0C87AB242F5E5CC130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:28:2c:b4:f5:a5:06:87:1e:0e:17:02:17:
d7:b2:34:fb:43:8f:68:1d:f0:3e:85:98:f0:e4:b3:
dd:9d:a1:57:f7:de:a0:b8:b7:d2:ce:cd:5d:28:ed:
e5:2b:22:44:5a:cc:35:a2:aa:1e:ea:37:84:0e:78:
ba:2b:02:9c:b4:e5:16:2c:ae:1d:08:e8:da:16:b2:
eb:48:8d:e5:fe:52:75:74:52:02:0f:aa:0c:59:99:
c5:76:bf:3b:8d:f8:cc:fd:a6:a0:fb:72:bc:cf:aa:
16:92:91:99:e4:44:91:dd:52:41:b9:4a:a4:ec:eb:
94:4f:f5:a3:d1:c7:c6:3f:b8:a5:dd:46:44:68:3f:
9a:f1:4e:1a:65:2c:dd:16:60:02:f4:07:71:7d:b5:
cf:3b:c0:75:ad:6e:aa:d0:5f:8c:fa:06:1a:d1:01:
00:a9:ad:72:d1:4d:27:d6:4d:8b:14:fc:db:5b:fd:
31:99:69:be:33:90:42:13:c4:ea:e7:23:de:15:d7:
e7:fa:a1:0b:92:f3:a4:9b:9c:58:e3:09:89:53:b3:
34:e9:5a:79:93:30:c7:4d:c6:0c:79:e0:31:22:62:
61:ae:fa:4a:ba:99:86:50:84:4e:44:0b:90:d3:5c:
c9:22:b1:83:02:ad:24:b9:d3:fe:b6:f2:78:4c:86:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B8:E9:C4:1B:91:4D:5D:45:A4:3E:0C:87:AB:24:2F:5E:5C:C1:30
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kLjpxBuRTV1FpD4Mh6skL15cwTA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.213.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:d1:11:92:80:ed:e0:90:91:34:3b:d2:10:5b:82:68:f3:ed:
5a:73:50:e9:c2:a8:fc:64:b7:0d:81:56:89:da:7b:78:f1:16:
19:45:55:2c:f9:29:e0:46:22:41:bc:5e:d8:78:b4:9b:2d:32:
5a:fc:97:f4:ef:ff:5f:f0:85:7e:76:4c:52:9d:10:c9:b2:bf:
71:71:e0:23:1c:f0:75:a0:b0:87:4e:d8:2f:39:e6:ca:6c:e3:
e9:48:56:73:54:2e:f1:12:f1:80:d4:6a:9b:70:14:59:bd:d6:
a5:58:d3:ad:c8:51:16:8c:d0:89:e2:4b:eb:bb:a8:1c:cf:61:
e3:c4:30:a0:b2:2f:1e:2b:0d:b0:5f:12:f0:b6:ba:4e:4d:7a:
5a:1d:09:ef:be:03:d7:69:f7:58:16:38:87:69:fd:05:cc:86:
45:8a:66:5f:b9:7c:f2:b3:e6:ca:59:9e:90:cc:bb:1a:f7:3f:
e0:21:d2:af:50:82:0e:21:af:82:0e:42:9d:50:f2:71:04:c1:
64:81:ce:b2:48:73:3c:08:46:e2:42:6d:54:81:b3:53:6a:47:
b2:08:35:ec:bc:53:3e:35:0d:99:a6:d3:3b:e2:e1:2d:9c:4e:
7d:e0:f8:4f:37:8b:6b:05:31:d9:9d:b1:2e:27:e9:94:fe:07:
3e:07:9f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org