Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oZXolRuNbblZQUKl-f4zxIva1cY.roa
File: oZXolRuNbblZQUKl-f4zxIva1cY.roa (raw, json)
Hash identifier: ps/vB0m9J3FepdGQ3JkwRwel0UC6AK5ONIdcLCoW7Q4=
Subject key identifier: A1:95:E8:95:1B:8D:6D:B9:59:41:42:A5:F9:FE:33:C4:8B:DA:D5:C6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: A4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oZXolRuNbblZQUKl-f4zxIva1cY.roa
Signing time: Wed 29 Mar 2023 16:05:48 +0000
ROA not before: Wed 29 Mar 2023 16:05:48 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.130.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:05:48 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=A195E8951B8D6DB9594142A5F9FE33C48BDAD5C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:ec:68:84:e0:9e:b6:5b:f9:15:ca:47:6a:
ef:c8:e9:b9:f9:68:5e:9b:70:05:98:d6:32:a6:6e:
b9:a4:26:86:f8:0c:22:69:2e:47:75:00:09:b3:d7:
3a:29:c6:81:3f:f0:d6:ef:58:6b:e5:fb:02:7f:1c:
37:8c:f2:24:49:1e:53:72:7c:76:ba:47:b7:79:b0:
d8:cd:21:9f:d8:6e:16:5d:00:a1:37:70:15:e3:13:
55:d7:5a:58:ee:74:99:84:56:3e:1e:3f:83:2e:f2:
00:be:8f:7b:c5:fd:49:5a:9a:34:34:da:61:be:d0:
5a:63:bb:63:74:97:f6:7e:b3:a5:e5:66:3a:c8:e7:
29:75:60:63:38:86:30:a6:23:64:df:61:b8:81:62:
e9:c5:ef:15:d8:84:92:16:b8:fa:b2:57:ae:e1:92:
f8:cd:29:61:f6:6c:22:e2:ed:ba:77:e5:ce:10:5a:
89:81:3c:25:ec:3e:07:7e:78:03:85:c3:6d:73:36:
37:71:04:25:3e:0a:ba:be:58:41:2a:b2:6a:63:84:
b2:f1:2c:0a:aa:6f:3e:88:5e:9e:66:5a:a1:57:5f:
db:96:c1:ca:aa:da:33:61:d2:d0:46:0e:88:f8:77:
78:35:dc:ac:f4:f9:2a:32:97:22:50:62:a0:5e:27:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:95:E8:95:1B:8D:6D:B9:59:41:42:A5:F9:FE:33:C4:8B:DA:D5:C6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oZXolRuNbblZQUKl-f4zxIva1cY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.130.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:51:df:fb:15:ea:8c:2e:e3:1c:21:5a:66:7a:20:00:48:26:
0b:d5:62:5d:ae:0c:96:e4:ca:ff:ec:53:56:f8:74:a6:60:00:
fc:c1:5d:ef:7d:14:cc:d0:0f:a0:42:8e:93:1d:10:9c:5c:d4:
d9:7b:04:5d:c6:47:9f:3a:21:d8:5d:3f:e7:ee:6b:16:3d:fd:
28:7e:e6:2e:43:14:88:77:c1:b8:ff:a8:91:cf:df:03:7f:35:
d9:cf:c3:a7:55:ad:98:c9:cd:c7:93:ca:e3:9d:06:d3:7f:fa:
b1:7e:21:24:4d:e2:9d:be:ee:f8:07:50:dc:31:0d:c6:ab:54:
04:f0:64:e0:27:7c:1b:8a:06:9f:64:f1:73:12:3a:42:98:a7:
3d:8c:14:39:d2:83:8f:a7:39:f5:91:47:f8:92:e5:4c:4d:e2:
8a:e6:4a:5f:ef:74:a7:08:b6:72:5d:5c:f0:dc:85:38:38:d1:
dd:af:f8:23:de:2e:ef:93:a7:1f:cc:c8:a2:fa:c6:23:7b:73:
8a:88:d0:18:a1:54:8a:43:3e:c7:ff:ea:57:58:4e:9c:da:de:
fb:aa:28:e8:77:97:15:0a:9e:fb:b2:c8:cc:80:6e:19:51:3d:
da:d7:11:03:c7:44:17:4e:0a:58:b9:a5:24:e7:10:45:bc:a7:
47:79:41:e6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzAzMjkx
NjA1NDhaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEExOTVFODk1MUI4RDZE
Qjk1OTQxNDJBNUY5RkUzM0M0OEJEQUQ1QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcwexohOCetlv5FcpHau/I6bn5aF6bcAWY1jKmbrmkJob4DCJp
Lkd1AAmz1zopxoE/8NbvWGvl+wJ/HDeM8iRJHlNyfHa6R7d5sNjNIZ/YbhZdAKE3
cBXjE1XXWljudJmEVj4eP4Mu8gC+j3vF/UlamjQ02mG+0Fpju2N0l/Z+s6XlZjrI
5yl1YGM4hjCmI2TfYbiBYunF7xXYhJIWuPqyV67hkvjNKWH2bCLi7bp35c4QWomB
PCXsPgd+eAOFw21zNjdxBCU+Crq+WEEqsmpjhLLxLAqqbz6IXp5mWqFXX9uWwcqq
2jNh0tBGDoj4d3g13Kz0+SoylyJQYqBeJ6j1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUoZXolRuNbblZQUKl+f4zxIva1cYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L29aWG9sUnVOYmJsWlFVS2wtZjR6eEl2YTFjWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYoIwDQYJKoZIhvcNAQELBQADggEBAB1R3/sV6owu4xwhWmZ6IABIJgvV
Yl2uDJbkyv/sU1b4dKZgAPzBXe99FMzQD6BCjpMdEJxc1Nl7BF3GR586IdhdP+fu
axY9/Sh+5i5DFIh3wbj/qJHP3wN/NdnPw6dVrZjJzceTyuOdBtN/+rF+ISRN4p2+
7vgHUNwxDcarVATwZOAnfBuKBp9k8XMSOkKYpz2MFDnSg4+nOfWRR/iS5UxN4orm
Sl/vdKcItnJdXPDchTg40d2v+CPeLu+Tpx/MyKL6xiN7c4qI0BihVIpDPsf/6ldY
Tpza3vuqKOh3lxUKnvuyyMyAbhlRPdrXEQPHRBdOCli5pSTnEEW8p0d5QeY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org