Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/peD8nDoPMySLYP7UED8a7XfZI6s.roa
File: peD8nDoPMySLYP7UED8a7XfZI6s.roa (raw, json)
Hash identifier: q1cGErWQcSY41AeODq7SqRJIjbYAYbvBrYM6sGD2hc0=
Subject key identifier: A5:E0:FC:9C:3A:0F:33:24:8B:60:FE:D4:10:3F:1A:ED:77:D9:23:AB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0280
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/peD8nDoPMySLYP7UED8a7XfZI6s.roa
Signing time: Tue 30 May 2023 16:34:25 +0000
ROA not before: Tue 30 May 2023 16:34:25 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:34:25 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=A5E0FC9C3A0F33248B60FED4103F1AED77D923AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2e:b0:36:51:ad:61:52:14:79:73:37:c6:e0:
52:d6:03:46:69:38:6a:19:0a:52:48:61:89:6a:ea:
e0:44:e2:10:38:fb:c3:0d:1f:12:a5:90:30:20:c6:
fa:bf:46:a5:c0:98:39:6c:be:3c:14:54:fc:47:cb:
25:69:ec:59:c2:59:b3:17:03:63:2a:70:20:ab:a6:
09:15:ed:9a:3a:55:04:ab:1e:84:00:aa:03:16:53:
0a:4f:8c:55:54:8f:27:ef:fa:e9:ae:b7:81:69:66:
40:3e:ea:a9:40:08:16:93:03:40:6c:c1:ee:69:a4:
6a:15:6e:ff:88:83:1b:95:fd:d1:cf:85:27:f6:ea:
19:82:3c:f3:87:4d:07:6d:e0:6a:fd:a2:ef:0b:c9:
41:8f:83:f9:e1:41:dc:31:ba:3c:53:a5:50:57:20:
26:70:c9:47:8d:12:94:78:d0:96:91:86:7c:9c:e1:
46:77:96:21:2a:1e:24:4e:d2:3d:10:03:a4:38:50:
81:b2:e1:f8:ea:fb:f5:de:63:65:1a:a7:86:87:46:
7b:26:bc:9d:15:03:fa:a9:30:ca:8b:fa:a9:f9:4b:
a4:e5:70:f0:3b:ba:95:63:f1:49:4f:29:18:c4:0f:
40:ae:0c:1e:29:5d:90:e1:04:1c:bd:6a:35:e6:84:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E0:FC:9C:3A:0F:33:24:8B:60:FE:D4:10:3F:1A:ED:77:D9:23:AB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/peD8nDoPMySLYP7UED8a7XfZI6s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.53.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ba:43:7a:a8:14:82:3b:14:8a:7c:3e:56:0d:0a:67:4f:30:
05:c0:36:d1:28:eb:19:29:65:89:7d:72:9b:ed:4c:af:79:6c:
42:6c:8c:15:21:5f:dd:24:5a:d5:fc:1b:80:9e:a5:59:a7:b8:
19:1b:ca:2a:fc:a5:cd:e2:41:a4:3f:55:78:c9:29:7c:2a:7b:
ee:61:3e:d4:c9:f8:e3:56:70:ea:74:46:9f:12:9a:01:00:1b:
a3:55:49:27:af:a6:09:c4:ff:71:a7:e6:93:ef:cc:43:88:44:
93:92:b7:87:35:b7:9f:cf:8c:11:1d:1f:64:9e:6d:b3:56:ad:
c1:b0:f0:50:f5:75:ec:d0:4e:6b:b8:24:dd:f4:98:2b:6a:99:
a7:0b:cd:63:3f:8e:44:ee:34:1b:99:15:f9:f7:36:7a:a1:88:
db:2e:4e:93:40:2b:68:7d:e5:bc:01:57:6b:90:02:1e:63:3a:
73:19:16:fc:2a:64:b3:c6:6a:89:0e:91:55:ba:04:14:41:b4:
e4:64:b6:bf:aa:78:ed:26:14:72:dc:a5:05:99:2d:bf:70:e1:
96:07:99:a7:03:4d:01:69:bc:98:e7:61:62:4f:05:15:c3:7e:
2e:88:3b:cf:e5:fc:1a:dc:93:85:d6:a1:da:11:aa:e2:e8:99:
b9:6d:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org