Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/layuWJrE2SYtSy4Xo2aBr5OK1oA.roa
File: layuWJrE2SYtSy4Xo2aBr5OK1oA.roa (raw, json)
Hash identifier: ONs8+ksmVdoATydqOuCSl7zs2ekk095VETcNMKqIFYY=
Subject key identifier: 95:AC:AE:58:9A:C4:D9:26:2D:4B:2E:17:A3:66:81:AF:93:8A:D6:80
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0365
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/layuWJrE2SYtSy4Xo2aBr5OK1oA.roa
Signing time: Thu 01 Jun 2023 17:56:39 +0000
ROA not before: Thu 01 Jun 2023 17:56:39 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869 (0x365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:56:39 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=95ACAE589AC4D9262D4B2E17A36681AF938AD680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:b7:71:dd:2a:43:8b:4f:19:88:f6:26:5d:
8b:f4:50:e4:8a:a5:85:f6:13:6a:b2:fa:fe:0a:6b:
e2:28:0f:4c:57:e3:9f:6b:67:68:8c:6b:36:bf:0e:
aa:49:bd:32:52:de:b6:60:7a:6b:d2:68:3c:19:1d:
ee:fc:85:3d:fc:fc:77:8b:90:9b:a2:94:79:2d:b2:
9e:37:12:be:74:e5:e1:59:52:c7:2b:bc:e2:b5:95:
ba:ab:5a:d0:6a:ec:0c:5e:84:f7:c6:14:a0:5d:8e:
5a:c2:5e:9b:bb:76:9b:5f:9e:d9:ee:d4:09:54:bf:
a3:5d:94:54:e3:10:84:68:31:0a:35:a3:1e:3e:28:
a4:74:e0:f9:85:21:f9:88:d5:09:6f:30:eb:b6:2b:
8a:45:74:e0:10:d0:dc:fe:35:a2:8d:e9:8c:fa:46:
7a:3d:73:48:3d:a7:a3:37:a6:11:7b:fa:53:72:f0:
67:fd:15:3e:fb:ee:f7:96:25:63:e6:d0:f0:c0:06:
38:00:05:7f:b9:02:a9:d1:90:f7:20:db:08:0d:d6:
a4:05:b7:e7:30:18:10:94:5c:67:99:75:47:59:b2:
c8:77:dd:9e:2a:db:2a:bf:0c:24:78:45:3a:60:7d:
59:17:2b:e5:4f:eb:b4:aa:77:11:c9:66:f0:5b:83:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:AE:58:9A:C4:D9:26:2D:4B:2E:17:A3:66:81:AF:93:8A:D6:80
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/layuWJrE2SYtSy4Xo2aBr5OK1oA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.212.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c4:31:32:b0:da:49:fb:af:7b:64:e8:a2:91:36:c2:e8:4b:
e6:dd:28:d2:7d:5f:4d:e0:f0:2a:0f:77:69:6c:ed:82:2f:30:
c7:a6:d5:d9:47:97:82:ed:5d:34:42:29:bc:f7:dc:76:cc:d3:
a7:f4:4f:a5:bc:71:fd:2a:06:0a:71:46:b3:0e:33:ea:1b:96:
d9:4d:b0:32:27:5b:cb:7c:2a:2b:6b:c5:e6:7a:b2:89:c1:76:
e1:d4:56:f9:81:94:12:9b:44:61:d9:93:c7:fc:8a:95:8c:6e:
44:e7:bb:07:98:34:37:ae:15:bd:b8:4b:d5:ac:a1:a3:d2:c8:
bf:ae:55:5d:34:04:ac:08:75:58:e6:03:15:3a:55:1d:0e:35:
a3:93:0e:0d:2e:d0:d3:ef:31:8a:b1:29:da:0f:a9:ba:7e:a1:
1d:44:6f:2f:47:de:84:04:b9:e5:4a:0a:f5:82:2b:7f:24:4a:
f5:56:b9:2d:17:f3:41:af:bb:bf:95:54:cc:70:5e:f9:86:03:
a7:05:42:b0:44:77:a3:13:74:0c:ff:5a:00:ea:f6:49:66:f2:
53:f7:01:e3:91:e0:24:ed:bf:8d:5f:c8:d8:60:b3:6d:1d:ea:
35:b2:f0:cf:3f:30:17:8b:40:79:02:73:f2:8d:2e:22:7e:04:
7c:96:1b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org