Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vZNEWG8wapxvidblZQqv88vJGTM.roa
File: vZNEWG8wapxvidblZQqv88vJGTM.roa (raw, json)
Hash identifier: kmT17PJBUHA7TyJIkBVRfA8MogzN8hoKF/B8rU5KS2I=
Subject key identifier: BD:93:44:58:6F:30:6A:9C:6F:89:D6:E5:65:0A:AF:F3:CB:C9:19:33
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0171
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vZNEWG8wapxvidblZQqv88vJGTM.roa
Signing time: Wed 24 May 2023 16:33:19 +0000
ROA not before: Wed 24 May 2023 16:33:19 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:33:19 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=BD9344586F306A9C6F89D6E5650AAFF3CBC91933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ad:a4:f0:a1:eb:cc:83:b5:71:74:97:8a:87:
2a:6f:90:50:9e:30:cc:aa:df:29:58:fb:22:43:4a:
cf:38:a7:9f:5a:dc:52:31:7d:e6:0f:f1:f1:63:2e:
e5:49:ce:fe:bc:31:b1:66:5b:7b:c6:97:ed:96:97:
72:cc:4e:a6:c9:aa:4f:75:a4:31:b3:7c:09:8e:50:
74:c5:0f:ff:53:a4:6c:83:d4:e2:c8:6b:cc:32:9e:
6a:89:7f:83:71:c5:28:e1:2f:75:0a:ff:79:7c:05:
98:a5:7b:8f:a1:0b:67:5f:c4:f3:10:b8:f0:ab:76:
40:56:d4:4e:24:8c:e1:b7:cb:a2:58:98:81:3e:8e:
60:fc:96:d3:91:3d:54:05:85:de:6f:6c:db:66:da:
62:7e:91:79:cf:b7:8f:22:16:3d:6e:01:7c:ae:96:
3d:81:7b:ac:12:ae:32:88:a8:40:70:c2:28:0b:cb:
22:10:c5:8c:32:d8:94:6a:42:17:7f:12:01:f1:f1:
f8:2f:49:8c:04:09:b8:b9:1d:8e:f2:76:3d:35:19:
f8:b8:b5:36:8f:5b:7e:5b:86:c9:bb:60:03:cb:89:
9a:5b:47:d6:1d:2b:33:0a:f0:48:e7:43:3f:a2:21:
1c:f1:d9:6e:bd:1b:01:9a:ed:f9:2c:4f:cb:f8:2a:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:93:44:58:6F:30:6A:9C:6F:89:D6:E5:65:0A:AF:F3:CB:C9:19:33
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vZNEWG8wapxvidblZQqv88vJGTM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:23:58:ac:0e:46:f9:43:96:94:fc:60:32:a2:53:fd:31:c7:
0c:07:90:3f:45:15:7f:f5:86:6a:55:d1:9a:d4:56:ef:89:ef:
a0:43:17:5e:f9:4b:aa:b1:44:f1:f9:42:4d:6e:87:f2:68:36:
09:2a:8d:2c:8e:87:07:76:8e:69:7b:b2:96:96:17:0e:be:89:
09:79:30:7c:17:b0:59:dd:62:c5:8b:a2:f4:cb:5d:f1:bb:7f:
ba:80:41:d3:30:94:10:15:87:ab:42:2a:65:19:79:52:d3:aa:
91:ea:37:5d:a6:cf:35:12:d7:41:e1:0d:7b:fe:9b:de:01:80:
84:f0:fa:a2:35:1d:ba:36:87:1e:2d:68:cd:9f:4a:4e:34:98:
2c:95:92:df:ed:44:c0:74:0b:30:cf:e6:15:16:04:84:f5:27:
83:9d:73:50:76:7b:d3:67:7c:29:e6:57:4a:e9:82:e6:af:3f:
a3:27:25:f2:f8:1b:d9:f4:b8:db:bf:3d:71:c7:72:29:fd:c8:
ce:c0:fe:ab:70:cd:c8:ac:61:62:74:4f:a2:0b:13:63:56:ca:
6e:33:9c:4d:ab:8f:74:cf:4c:c6:86:a6:b9:69:36:17:ab:d7:
cc:02:35:bb:53:ec:93:d0:f9:2c:1c:94:0d:1e:e2:2a:37:ff:
b3:11:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org