Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kTn0O8p2kbpL5xj04PQKUWN8F1U.roa
File: kTn0O8p2kbpL5xj04PQKUWN8F1U.roa (raw, json)
Hash identifier: 5LZ9Xa42OKrm238VLkfqEV0VlsawMHG0RLLLI5G8SPM=
Subject key identifier: 91:39:F4:3B:CA:76:91:BA:4B:E7:18:F4:E0:F4:0A:51:63:7C:17:55
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 032B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kTn0O8p2kbpL5xj04PQKUWN8F1U.roa
Signing time: Thu 01 Jun 2023 16:07:28 +0000
ROA not before: Thu 01 Jun 2023 16:07:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:07:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=9139F43BCA7691BA4BE718F4E0F40A51637C1755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:2a:00:8d:05:7b:f1:ea:38:88:7d:c9:b8:
7a:3b:23:9e:c5:48:6c:94:2f:e6:93:b7:fb:2a:b9:
af:7c:15:3d:f2:85:0b:36:0c:4d:ed:8c:f6:2b:9b:
3c:8d:5a:b6:d0:b1:9a:da:47:df:8b:db:6f:2a:91:
f2:8f:5c:6f:2e:2a:3d:4a:1c:9e:4a:47:97:a9:ea:
ae:f3:e9:c7:84:bd:d8:3e:40:7c:12:1f:f7:31:4c:
a6:db:d2:05:96:d8:40:9d:87:18:a6:85:03:76:28:
e3:ff:f3:91:67:95:34:f0:6f:f2:03:65:69:b1:c3:
bf:72:e1:c7:5b:e7:57:99:54:03:7c:21:ff:18:84:
ed:ec:6f:a2:dc:93:72:dd:dc:ea:5c:8d:0f:77:90:
65:f3:79:e8:a1:44:15:f3:07:00:de:78:89:e9:12:
a9:37:2b:93:5a:6f:26:7b:08:80:cf:6b:d1:41:e5:
d0:96:5c:3a:c6:57:e4:b8:f1:8e:ac:50:d0:13:37:
31:d5:ef:78:7a:bf:f8:b6:3a:5d:0c:f3:4c:94:be:
c0:74:ee:da:7b:49:31:13:f0:37:39:37:98:9a:0e:
72:cc:c9:d4:05:f6:e1:3f:3a:03:28:08:e9:42:71:
cc:b3:77:b5:ec:06:49:13:77:42:7e:eb:b1:5c:31:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:39:F4:3B:CA:76:91:BA:4B:E7:18:F4:E0:F4:0A:51:63:7C:17:55
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kTn0O8p2kbpL5xj04PQKUWN8F1U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.6.0/23
Signature Algorithm: sha256WithRSAEncryption
25:62:02:74:73:ee:29:56:4d:7c:72:3a:3e:37:9f:cc:ce:35:
0c:1e:57:79:d0:58:96:b0:67:84:49:9d:b0:e6:0a:84:83:af:
27:13:10:72:cf:15:70:6c:20:89:9e:f3:4f:f2:a4:38:36:ea:
cd:6b:c5:3d:09:f4:91:8b:37:7e:93:4c:a4:6a:04:8b:a7:88:
34:c4:77:49:a7:f8:34:f3:19:56:cf:de:70:21:41:e9:fc:d2:
c4:30:50:ad:f4:c1:dc:d3:b2:27:e7:6e:01:0d:15:6c:5d:8d:
a7:fd:9b:37:77:89:d9:1d:88:42:29:a1:d5:22:37:61:7d:16:
92:42:15:85:d7:e2:73:f4:7a:c6:cf:13:d6:4b:09:3f:1e:11:
74:40:2b:33:61:37:28:78:07:74:5b:de:15:46:08:51:bc:49:
06:fe:5c:3c:ae:46:3a:90:9a:7e:64:d9:d6:a1:b7:74:b3:9d:
ca:c0:dd:37:e8:d1:15:2b:c5:9f:aa:66:78:fb:0b:a0:28:82:
b7:51:09:c2:4f:c7:c4:74:dc:1b:60:90:64:52:e8:af:35:5d:
17:fe:df:f8:a0:0b:d5:33:b3:9b:47:39:bc:af:91:1c:47:1d:
ed:bd:c2:2a:cd:5b:b4:f5:f7:36:f0:ed:05:60:03:d8:45:18:
3a:5f:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org