Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/x1-7qq7rFggwA2LkB2CDFz_0OZA.roa
File: x1-7qq7rFggwA2LkB2CDFz_0OZA.roa (raw, json)
Hash identifier: O79BHhzMI07pflsZ0fviz0IHZ1R8ESIarxoPbgWM7hE=
Subject key identifier: C7:5F:BB:AA:AE:EB:16:08:30:03:62:E4:07:60:83:17:3F:F4:39:90
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0231
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/x1-7qq7rFggwA2LkB2CDFz_0OZA.roa
Signing time: Tue 30 May 2023 16:30:37 +0000
ROA not before: Tue 30 May 2023 16:30:37 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.67.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:30:37 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=C75FBBAAAEEB1608300362E4076083173FF43990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b4:f8:42:fd:e9:24:1a:49:31:80:ba:1f:14:
cf:03:61:0c:ac:e8:37:2e:45:c2:75:20:76:00:1b:
ca:ce:ed:06:5a:35:0a:49:22:8b:53:35:9f:0d:84:
11:d1:49:7f:6c:73:fd:dd:40:9b:bd:50:4d:79:10:
a2:cc:56:b5:d9:8c:3d:1d:05:94:a4:61:3f:2f:6e:
c2:6a:90:17:fb:84:c6:f6:87:d7:c0:03:4e:1a:f0:
2c:4b:d0:e6:3b:97:76:58:77:24:58:ba:e7:de:b2:
3c:74:32:61:9b:25:e9:d4:59:54:69:49:9d:11:14:
ad:a2:24:62:e6:64:2d:1d:22:46:2b:37:be:85:23:
6b:64:d7:e9:c6:a8:2a:d0:bf:28:f6:b8:c2:69:b7:
4d:7b:d0:eb:70:7c:00:b4:58:1e:a1:e8:3f:a4:61:
6d:55:d2:be:9d:89:24:20:f6:3e:32:9a:dd:8e:0b:
5d:90:43:11:37:02:ce:49:dc:ea:f1:5d:90:b0:99:
fb:98:b1:78:1b:66:a3:c5:ed:79:43:8a:e9:a3:2d:
87:99:4d:a2:09:12:90:14:b5:de:e1:eb:ff:be:9d:
57:d0:30:46:75:d0:40:c8:41:b4:41:40:b4:ad:e5:
b0:51:0d:46:0e:be:7c:7e:bf:49:c6:9e:20:f7:96:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5F:BB:AA:AE:EB:16:08:30:03:62:E4:07:60:83:17:3F:F4:39:90
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/x1-7qq7rFggwA2LkB2CDFz_0OZA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.232.0/22
Signature Algorithm: sha256WithRSAEncryption
30:9b:c2:d3:b4:3d:64:46:9f:6a:b2:8e:09:f2:49:ff:7d:17:
73:d5:d6:5f:fd:82:37:f2:96:f8:ab:58:99:27:a9:2e:3f:ef:
5b:14:ae:b5:aa:f2:2e:18:27:69:61:9c:46:83:f5:16:fd:15:
42:23:a0:5c:08:dc:35:08:a7:ca:f6:df:05:74:9e:bb:67:6b:
e2:1c:e3:69:64:ff:86:02:e7:f7:7d:ad:37:d8:bb:90:30:61:
22:50:f9:60:12:5e:57:89:20:34:4d:81:9e:a8:3d:df:50:41:
34:c4:b8:12:dd:80:c2:e0:6e:14:b0:c9:9c:17:0e:d2:e8:4b:
74:24:b2:78:4d:6a:50:45:48:ed:3e:02:b7:79:a2:60:cd:db:
55:be:3d:8d:2b:45:e5:bd:fa:b3:1e:7c:d3:27:a0:e0:48:a7:
fd:05:34:36:81:5d:c9:f7:6d:6b:05:68:d6:ec:cc:58:9f:d3:
ea:9b:73:25:3b:fd:42:66:f0:6f:2a:40:8a:bd:e7:dd:0a:0a:
2c:62:3b:76:c1:d4:08:70:da:d5:f4:a1:9c:1a:a0:ae:14:b2:
03:5d:c3:c8:44:a6:69:43:8d:00:f9:0d:af:f9:87:17:e3:8a:
8a:cd:a0:72:0d:af:d6:8e:11:27:06:ac:78:b6:18:21:32:8e:
68:44:e9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org