Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tIzdR3TDMnfENy4EsOinjk8Actk.roa
File: tIzdR3TDMnfENy4EsOinjk8Actk.roa (raw, json)
Hash identifier: oYKuo3wOBitJZNchblSldF2aF/J2n+GJXlz/ozSbmOo=
Subject key identifier: B4:8C:DD:47:74:C3:32:77:C4:37:2E:04:B0:E8:A7:8E:4F:00:72:D9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 034A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tIzdR3TDMnfENy4EsOinjk8Actk.roa
Signing time: Thu 01 Jun 2023 16:10:48 +0000
ROA not before: Thu 01 Jun 2023 16:10:48 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:10:48 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=B48CDD4774C33277C4372E04B0E8A78E4F0072D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:7e:d1:2d:11:1d:e0:f4:42:14:e9:97:96:
29:c5:79:71:f7:79:a2:29:ce:d2:9e:89:db:8d:b4:
8b:93:bb:b1:5e:05:ac:73:45:26:29:c2:91:5b:5c:
4a:75:6c:d9:80:db:6d:ec:41:88:f3:37:c0:f6:e1:
93:22:dc:47:b9:e6:f6:64:e9:1b:ef:9e:ff:57:fe:
be:c3:97:f2:8f:c0:fa:1b:3f:d6:bd:2b:e6:ac:07:
58:4a:96:5a:47:ed:67:43:ff:e3:ef:c5:ce:8e:bb:
89:e5:b6:9d:c9:bc:f5:cd:c5:89:a0:f2:d0:f5:57:
ee:a5:e6:24:f4:e8:fa:bf:a0:78:05:85:9f:c0:26:
3b:25:59:6a:9d:21:05:6a:f0:bd:21:89:4c:68:40:
38:c6:83:9d:ae:9e:e2:ad:f7:88:e5:98:1b:46:33:
b8:3c:5a:c6:91:43:d5:f5:df:c8:a5:f8:76:82:a1:
9c:e7:23:ac:e3:97:48:0e:b9:dd:1c:51:c2:28:09:
5d:37:83:52:2c:1e:08:13:44:86:52:5c:02:8e:c3:
4c:87:7e:18:f3:26:61:b4:73:99:64:46:e3:97:b7:
f6:3e:38:19:91:90:5d:99:6c:76:e7:b7:8c:58:3e:
f5:50:f0:32:0e:59:9e:59:69:c1:31:25:ad:f3:cf:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8C:DD:47:74:C3:32:77:C4:37:2E:04:B0:E8:A7:8E:4F:00:72:D9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tIzdR3TDMnfENy4EsOinjk8Actk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.40.0/22
Signature Algorithm: sha256WithRSAEncryption
62:cb:82:1f:e2:b8:61:38:7b:c4:cb:34:e2:27:e6:65:5f:34:
ec:da:a2:cc:c4:c8:93:50:1d:fe:bf:0c:4e:94:30:a5:38:3b:
c3:66:ea:5e:59:21:10:3b:a9:54:83:d9:c2:65:10:c7:80:c5:
c9:44:24:bb:53:25:cd:f4:32:c8:82:dd:af:5b:af:40:51:f4:
f2:9f:df:68:d8:a5:48:94:63:4a:ab:00:23:08:88:8b:17:44:
9c:1f:d0:0c:1f:33:4d:4f:7b:0c:44:30:f5:3c:d1:d9:88:84:
eb:57:2e:48:29:02:45:cb:bb:2b:4d:0b:3c:be:80:8c:5c:46:
89:7e:b1:8d:e6:0c:df:ea:cc:70:f7:b2:d3:5e:93:fb:cc:32:
23:78:47:7c:6e:98:55:43:98:49:ff:28:dd:5d:24:f2:c1:b4:
e7:08:74:75:41:f6:8c:88:0b:ca:16:21:d0:61:28:c3:a1:f1:
22:96:f3:91:4a:1a:19:68:22:94:1d:5f:1e:90:60:e9:9c:ae:
67:ec:b6:a4:65:c8:3d:ab:fc:67:eb:e3:18:c5:d4:d9:45:e1:
69:52:a6:15:e5:15:2d:2d:44:50:2d:a2:15:0b:8d:19:df:ff:
7a:c2:15:8c:b1:4f:09:a6:e7:8a:bd:86:92:3b:6e:ce:35:96:
50:b2:f8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org