Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pSkz67cCpKyV50Ygmes2yGMq2S8.roa
File: pSkz67cCpKyV50Ygmes2yGMq2S8.roa (raw, json)
Hash identifier: tZq9M2miusWDOG64mVcdiPw/4nWeBceOiDvFVPPVD/A=
Subject key identifier: A5:29:33:EB:B7:02:A4:AC:95:E7:46:20:99:EB:36:C8:63:2A:D9:2F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0354
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pSkz67cCpKyV50Ygmes2yGMq2S8.roa
Signing time: Thu 01 Jun 2023 17:56:31 +0000
ROA not before: Thu 01 Jun 2023 17:56:31 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 852 (0x354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:56:31 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=A52933EBB702A4AC95E7462099EB36C8632AD92F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:83:82:3b:14:e1:39:61:09:6b:a0:8c:9f:
6d:cd:8b:fb:d2:41:1c:73:af:04:56:a9:fb:5a:87:
09:f4:1a:d5:dd:38:c3:c2:5e:1d:1d:0f:7f:54:eb:
e9:a1:88:c2:1c:c8:f0:27:3f:49:21:a8:ca:cf:65:
39:71:b7:4e:0c:ae:17:14:f9:73:6c:6e:78:81:09:
dc:49:9e:a2:90:57:ec:e2:b0:31:49:0a:93:9a:a6:
32:0a:7c:24:3e:2e:2d:cf:59:80:01:46:61:57:b4:
14:75:e2:7c:64:90:bd:4f:fb:76:c2:fb:d4:a6:52:
bb:b1:59:1a:b6:98:de:e1:3e:9a:bf:79:35:65:1d:
72:8e:6a:91:ba:44:38:d6:cd:b5:12:97:ff:75:7c:
81:75:76:84:f6:35:5b:c5:c3:b1:ac:15:66:bf:67:
f9:f4:f0:a7:f5:ad:0e:6f:a9:fb:93:e4:c3:19:6a:
1c:74:00:6d:20:39:78:02:63:d1:ce:38:2a:21:fc:
6d:f2:36:e4:02:65:5a:29:c4:1e:b6:0a:fb:ae:2f:
34:62:ee:de:a6:8d:14:3f:fb:33:4c:c8:e9:36:76:
b1:b2:8f:dd:49:9c:36:4a:7b:57:b7:16:c4:8f:d1:
2d:f5:94:be:ee:ce:36:82:c0:59:a8:a6:9d:0b:b4:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:29:33:EB:B7:02:A4:AC:95:E7:46:20:99:EB:36:C8:63:2A:D9:2F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pSkz67cCpKyV50Ygmes2yGMq2S8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.216.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:c9:bf:0e:1f:df:4a:42:95:03:bd:d9:93:4c:50:a9:09:c3:
89:7d:0f:4b:5c:c8:79:1b:f5:13:3b:6d:78:ef:87:79:24:1e:
84:16:a6:86:82:4f:3e:2e:d9:f0:5b:b8:87:46:9a:68:40:82:
91:83:2a:68:49:21:f2:e5:a9:a0:0b:86:3b:c3:50:3d:f4:eb:
df:bb:62:0f:3a:0c:0f:c6:08:60:72:6b:91:1e:ec:92:39:f0:
9e:59:8c:3d:ca:43:bf:0b:67:bc:4c:8e:e9:40:36:40:80:a8:
c7:c4:f0:a7:c0:cc:53:81:6a:a5:77:b7:a9:bc:0f:66:32:a1:
ff:55:4c:07:23:b9:9f:ef:ee:04:3b:77:01:be:11:7d:80:d5:
07:2c:ff:86:67:31:a9:05:be:95:3f:6a:cc:b4:0c:3c:70:9c:
d9:e7:b6:71:eb:30:e4:27:c6:4d:34:75:f0:7e:c6:e2:8f:46:
94:8c:5d:e5:89:4d:10:00:2a:4e:36:a4:c4:2f:8f:01:5b:c0:
89:b9:c3:83:81:02:cf:8e:cc:a2:59:01:88:21:3f:12:87:b5:
ba:a7:54:f0:f5:af:1f:6a:2a:e0:cf:2c:ae:1c:d8:19:51:a8:
c8:44:c8:a5:bf:93:ae:ce:74:5f:57:ae:24:ab:ef:14:47:fb:
c1:46:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:43 2025 by rpki-client