Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/l7lhLY13iZuDce3CMkUMkZttoVw.roa
File: l7lhLY13iZuDce3CMkUMkZttoVw.roa (raw, json)
Hash identifier: DkT4/+G0t9hce0S4yedcAKszRQkpDV7BzADtTDEqUIc=
Subject key identifier: 97:B9:61:2D:8D:77:89:9B:83:71:ED:C2:32:45:0C:91:9B:6D:A1:5C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 032D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l7lhLY13iZuDce3CMkUMkZttoVw.roa
Signing time: Thu 01 Jun 2023 16:07:29 +0000
ROA not before: Thu 01 Jun 2023 16:07:29 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:07:29 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=97B9612D8D77899B8371EDC232450C919B6DA15C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ab:c7:4c:89:89:91:2a:48:be:f3:6a:60:da:
06:69:14:41:b6:6f:94:fe:30:08:fb:52:ea:9b:56:
65:c3:27:90:37:81:23:b7:32:55:e3:98:ef:20:94:
35:e6:4b:dc:01:40:fa:1c:b3:df:29:3f:c2:7f:3e:
d7:d6:5e:b7:93:9c:de:c7:7a:1d:b7:67:00:66:5c:
e0:27:58:40:75:bf:ab:ec:d1:49:bb:08:a6:04:7d:
3f:2a:bc:27:b8:64:59:29:51:fc:ec:a3:f8:54:1a:
b1:b0:da:12:77:5f:3d:23:d1:11:25:5f:0d:a7:11:
ec:a7:fb:2e:ef:03:b3:fd:b0:59:e6:37:35:60:5e:
e2:75:c9:f2:2e:fe:da:9f:f7:8b:67:ec:b1:6d:fb:
a9:4b:74:da:6f:22:5f:80:8a:c8:7a:66:fe:5f:1d:
8b:d2:93:b9:62:ff:c2:84:0c:68:4d:f9:f2:87:a0:
d7:ed:d6:3b:54:95:36:0a:2d:7e:18:b9:4d:f0:69:
cd:11:9d:8f:9b:47:40:3b:08:fc:8b:8b:3a:8b:54:
35:4b:7a:d1:d2:80:ad:9e:11:11:eb:47:48:e8:ca:
80:a5:e7:77:30:9e:97:80:51:21:11:2c:6a:84:cd:
f5:0c:c0:82:4e:e1:c8:a5:80:34:90:13:d4:38:53:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B9:61:2D:8D:77:89:9B:83:71:ED:C2:32:45:0C:91:9B:6D:A1:5C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l7lhLY13iZuDce3CMkUMkZttoVw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:bc:a2:58:e8:e9:f8:6b:57:90:1e:f4:8f:2b:bd:9d:83:c6:
61:a8:73:be:3c:fd:c5:86:44:f3:45:1e:9b:c5:45:99:95:cb:
0d:2b:23:21:9d:c9:70:43:64:13:57:a2:44:5d:1a:0c:ac:37:
e3:23:45:de:a9:45:2c:c2:1c:5e:ab:a3:a1:31:a3:37:b8:d8:
0e:ea:e6:f2:1f:98:a0:14:fa:1e:0c:bf:33:f4:cb:64:34:d9:
e6:84:fb:5e:8c:8b:90:a6:bf:84:f8:c7:63:5f:e4:f3:af:ce:
f3:b0:82:c8:6c:d9:97:3c:18:4f:b9:d2:5a:eb:d3:74:c6:6b:
95:06:31:4c:df:7e:c3:ad:f2:99:a4:f7:0d:c5:42:8b:ab:52:
87:22:84:56:64:ea:55:a8:c7:3f:94:7c:52:84:22:19:70:b5:
4b:e4:20:10:5c:df:da:72:ab:52:27:4a:c2:da:f4:97:51:87:
23:5d:47:67:70:35:69:8e:9e:b4:6f:4f:6c:90:7e:da:c7:30:
56:1d:f9:21:63:5f:a2:61:f8:65:f6:2f:cf:3f:48:62:63:43:
8a:87:9a:0d:dd:02:b9:1e:42:73:79:1c:42:43:be:b8:65:f5:
70:6b:a7:3f:57:59:82:15:3c:2a:94:34:fe:c2:d5:c2:21:11:
a8:37:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org