Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wL5mfGpo1MaJHYWF7CRxQfvhDIY.roa
File: wL5mfGpo1MaJHYWF7CRxQfvhDIY.roa (raw, json)
Hash identifier: SnLZiitZGfZw/6aUGhRN6pgDO9/d9vmVxpYV41DMYVE=
Subject key identifier: C0:BE:66:7C:6A:68:D4:C6:89:1D:85:85:EC:24:71:41:FB:E1:0C:86
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0395
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wL5mfGpo1MaJHYWF7CRxQfvhDIY.roa
Signing time: Thu 01 Jun 2023 17:59:27 +0000
ROA not before: Thu 01 Jun 2023 17:59:27 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917 (0x395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:59:27 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=C0BE667C6A68D4C6891D8585EC247141FBE10C86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:d1:db:b9:21:22:63:1b:64:a8:47:7c:bb:
c9:2b:70:a9:31:d2:2f:c6:60:87:57:93:9e:29:86:
ff:6a:e1:fc:dd:8e:46:a1:c5:1c:8c:1c:12:3b:49:
91:71:be:de:25:d9:7a:97:bf:c5:63:c2:41:de:07:
5f:37:74:ae:08:28:6a:a5:fe:c0:cc:07:1a:0e:37:
5a:3e:2b:50:b9:18:88:73:6c:6c:bf:8a:c3:2c:4f:
29:5e:1b:87:bc:17:93:ec:41:20:c3:1f:ff:1f:9f:
28:0b:73:c1:76:01:56:41:08:7c:50:5b:14:f4:13:
1b:41:55:92:bc:f6:59:90:f0:ab:4d:e6:ce:ec:4b:
7a:f2:e4:5a:2e:97:01:41:41:69:c3:c8:c3:8c:5c:
c4:08:b9:a0:20:30:64:65:88:9c:dc:d0:72:09:0f:
30:b2:f3:a2:49:81:55:95:4b:96:48:c8:9c:35:41:
aa:ba:c5:6e:6a:85:ec:10:78:13:6e:fd:a9:24:f4:
09:aa:24:e7:bc:bb:dc:f7:59:c9:b1:d5:5e:b1:d9:
67:9e:71:41:51:8e:e6:77:7b:dd:25:08:70:c4:89:
38:57:49:13:67:fd:0e:8f:f3:fd:19:53:c7:25:0d:
59:80:41:d9:72:85:51:6c:de:fc:b6:ca:6b:a1:f9:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BE:66:7C:6A:68:D4:C6:89:1D:85:85:EC:24:71:41:FB:E1:0C:86
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wL5mfGpo1MaJHYWF7CRxQfvhDIY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.96.0/19
Signature Algorithm: sha256WithRSAEncryption
19:17:23:4f:17:95:cc:5c:cc:ab:01:b5:1b:b6:3d:0f:49:f9:
95:0c:4b:b4:06:32:e7:e1:ff:4a:ba:30:85:4a:52:18:f3:5b:
3a:9e:61:83:12:fd:ab:84:6b:af:d4:91:92:40:2a:64:67:ac:
fd:82:63:40:66:18:27:e3:4b:41:b1:f7:49:23:c2:e8:e2:24:
55:78:5d:8b:10:31:85:89:10:f1:95:f0:00:ba:87:cf:1f:e6:
97:7a:bb:42:f9:b0:ca:f0:c1:44:3a:cc:db:fc:7f:1c:a6:95:
d8:30:6f:f2:bb:aa:12:93:63:d5:15:f2:c4:55:cc:0d:69:df:
56:76:d4:ab:21:28:01:cf:38:c7:2a:9a:33:9e:95:99:fa:8a:
cd:c7:8d:7a:57:ce:53:89:36:5b:7a:09:3b:b7:8e:f6:8b:c3:
a3:2f:0b:d1:c3:fc:07:19:ee:f0:84:94:80:47:52:61:bb:b0:
1d:fd:7b:b6:41:1a:4a:e2:97:c8:65:f3:89:75:3c:4e:6d:d7:
3d:4c:cb:4d:d0:09:2c:70:ec:11:a3:49:89:a6:ab:50:45:29:
9a:1f:bc:a6:d8:b5:a7:f4:1f:46:3c:9e:be:3a:ec:14:9a:f2:
0b:c8:31:d2:57:85:11:1f:bc:e0:5b:70:d8:da:47:41:15:ae:
d4:87:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org