Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/v0YBZcf5GDKh2FPKplcR5LoTACI.roa
File: v0YBZcf5GDKh2FPKplcR5LoTACI.roa (raw, json)
Hash identifier: qXcFF8B5Kxu8xHmz/bLQrm/Cdd6cdZncB+Y5pqbqVTg=
Subject key identifier: BF:46:01:65:C7:F9:18:32:A1:D8:53:CA:A6:57:11:E4:BA:13:00:22
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0377
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v0YBZcf5GDKh2FPKplcR5LoTACI.roa
Signing time: Thu 01 Jun 2023 17:57:32 +0000
ROA not before: Thu 01 Jun 2023 17:57:32 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887 (0x377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:57:32 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=BF460165C7F91832A1D853CAA65711E4BA130022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:7a:37:70:d9:66:62:05:88:d7:45:1f:b1:
25:51:85:eb:31:73:8a:07:6e:05:84:42:01:f2:83:
5e:36:98:86:ed:1a:f9:4b:86:90:06:ad:69:f0:c3:
bc:69:28:df:a4:58:67:32:82:d5:9f:4e:92:3c:4a:
c4:08:f9:c5:38:52:75:9d:bc:2e:78:0b:a2:89:61:
9a:ca:a3:a4:6c:39:41:af:9d:a1:d0:de:15:53:2c:
ce:2f:06:34:fb:a0:cc:d7:36:60:cc:68:fb:d3:44:
09:55:8b:55:c3:aa:5f:ef:af:db:cb:ae:39:c9:f8:
58:01:d4:3f:4f:32:e6:b4:81:e5:03:ec:16:a8:88:
80:bf:a6:6c:15:48:aa:45:c4:42:bc:05:79:74:e5:
7a:76:85:58:71:b4:67:4a:ed:42:e7:c4:e7:d9:3c:
95:de:60:b3:08:31:01:80:ba:0a:1c:25:dc:d7:92:
32:97:a9:51:7b:23:07:70:d5:b7:3a:b9:dd:57:fc:
34:45:9d:b0:76:43:03:a8:d6:47:44:29:94:74:43:
ca:b4:98:e6:2a:96:01:f1:58:17:9b:25:89:52:fc:
82:69:f6:09:e2:8d:c5:7f:6a:b2:f5:a9:bd:45:ad:
97:e4:88:1b:e2:e8:36:c3:02:21:e7:9e:70:85:f4:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:46:01:65:C7:F9:18:32:A1:D8:53:CA:A6:57:11:E4:BA:13:00:22
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v0YBZcf5GDKh2FPKplcR5LoTACI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.220.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:67:00:d6:fd:da:61:e6:8f:d0:45:74:d4:53:5e:5f:2d:eb:
e1:79:b3:cf:0f:9e:e3:4e:73:80:4f:4d:eb:2c:b5:3d:39:0d:
02:26:5b:5e:10:22:09:76:52:d4:b2:7a:67:04:31:e2:52:3d:
d9:cb:93:0b:2a:1b:24:db:ef:99:1e:82:8a:f5:39:57:0a:69:
c1:a4:2f:82:13:8f:6c:33:3f:81:1d:05:a9:0c:6e:60:54:8a:
9b:ef:8e:3b:d9:e8:d1:77:3d:05:c4:13:14:a2:e7:b9:10:02:
e8:95:54:39:b4:63:87:43:34:ff:3e:24:58:31:46:3e:5e:39:
1e:ac:aa:7a:fe:58:da:56:27:f6:f8:e5:db:4a:30:16:e1:84:
d5:49:2d:65:b8:17:49:12:c3:50:db:09:5f:18:0f:cf:21:6a:
2e:0a:e3:53:40:fa:57:93:9b:ce:a2:2c:a4:4b:0c:e3:81:61:
3c:f1:d1:fc:4c:b6:20:5f:cd:59:02:cf:82:3d:89:1e:e9:bf:
58:ae:ed:de:61:52:33:43:ba:2e:c8:1c:47:b3:80:73:23:6c:
f4:83:58:6f:6b:8a:7c:ff:f8:ee:2c:f2:9c:c7:9e:fb:b8:5b:
6c:ff:d0:da:6a:88:d9:bb:bb:45:d0:40:02:c9:00:90:72:da:
88:17:55:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org