Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rbTR7w5M9nnbR7ISHY50CM4N-as.roa
File: rbTR7w5M9nnbR7ISHY50CM4N-as.roa (raw, json)
Hash identifier: VYjxMMXOOlVK7FJVjgaDmMsovYvWKJZIwf1Rb70VhBg=
Subject key identifier: AD:B4:D1:EF:0E:4C:F6:79:DB:47:B2:12:1D:8E:74:08:CE:0D:F9:AB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0306
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rbTR7w5M9nnbR7ISHY50CM4N-as.roa
Signing time: Thu 01 Jun 2023 16:05:26 +0000
ROA not before: Thu 01 Jun 2023 16:05:26 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.73.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:05:26 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=ADB4D1EF0E4CF679DB47B2121D8E7408CE0DF9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:61:f6:fb:3b:c8:20:c1:ec:5f:f0:4b:92:
a1:5d:0d:da:9a:63:8b:7b:91:fa:e4:17:d0:4a:d7:
ce:aa:3b:ad:5c:f5:99:dd:8c:81:08:e8:ea:31:c8:
61:30:1b:bc:93:b5:ab:a1:5a:87:48:67:d5:08:49:
29:bc:0b:b1:a5:8c:c7:97:6c:9a:43:a6:53:94:09:
a2:8a:c5:c8:0b:cd:69:d4:4e:b9:e7:2b:f0:e0:90:
02:52:8c:2f:3f:92:8d:c9:cc:47:20:88:9e:98:e6:
76:f0:7f:cc:de:44:b3:27:6d:f6:09:70:48:b8:d8:
88:5b:9a:bd:7e:f1:1a:b5:35:f5:56:8a:df:9b:27:
39:d2:c6:8c:10:49:d4:55:93:4c:51:cc:77:8c:67:
9f:16:34:61:5f:f2:94:de:2e:f5:32:26:b1:c2:bb:
91:3b:48:40:d0:d1:f8:7f:28:76:2f:12:6e:68:e2:
d4:d1:e5:68:15:fe:93:13:e6:42:3e:ae:7b:66:76:
2f:6c:8f:96:0c:ca:47:b3:6f:40:05:b2:26:0a:34:
2a:83:87:a2:a0:c9:ec:63:74:0a:3d:4c:ad:de:9d:
f7:38:bb:ed:c6:8c:78:b9:bd:0f:53:9e:57:bd:cb:
3d:34:01:91:72:c1:1f:31:33:f8:58:29:a3:57:dd:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B4:D1:EF:0E:4C:F6:79:DB:47:B2:12:1D:8E:74:08:CE:0D:F9:AB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rbTR7w5M9nnbR7ISHY50CM4N-as.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.208.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:53:5c:1d:5b:b1:bf:3e:9f:64:6f:76:ec:d0:4b:f1:e1:b8:
7b:62:39:0c:7a:77:f7:37:47:9c:97:14:90:89:fe:43:d4:91:
5f:17:fd:72:9f:6b:f2:0d:31:fe:ae:d0:cb:1a:88:45:63:b1:
8c:4e:1a:e5:20:93:1d:fa:2e:c7:23:72:62:1c:57:88:a8:e0:
c0:05:93:b5:1c:ea:c9:61:fc:10:92:2b:c2:5a:2a:18:18:d5:
4c:26:5d:0f:11:a0:0e:02:98:ff:ed:c9:9e:3b:69:dd:75:b7:
3a:bf:c4:ac:10:9e:21:32:e3:45:b4:52:a7:a3:bf:95:3e:1b:
b0:26:7c:0c:a6:39:d7:01:58:0d:da:fe:ea:3d:75:c5:83:27:
e7:9b:ea:f7:07:1f:ee:6a:81:23:a7:1e:8e:7f:a0:8c:bc:99:
1e:be:3d:e1:c4:32:10:8c:d9:66:fa:de:88:4a:e4:04:6f:28:
04:21:f3:12:20:8e:39:88:fe:3a:c5:50:b1:be:d5:8c:30:db:
a5:7e:ff:e0:ef:48:e1:ef:f8:ba:41:f6:e8:f6:8b:a8:97:6f:
74:e6:fd:19:78:e4:c5:68:3e:96:77:00:5b:bf:c9:d0:c0:87:
2a:28:17:f2:02:69:92:86:10:26:34:38:d7:c3:6f:0f:f8:31:
b2:23:6e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org