Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xfmsaBCDkjLuwqDMziaskYCFK1k.roa
File: xfmsaBCDkjLuwqDMziaskYCFK1k.roa (raw, json)
Hash identifier: 7yZ5Q8KGe2heQMBlUBYt7gf3pA8nnMpx8H9aWHqPs24=
Subject key identifier: C5:F9:AC:68:10:83:92:32:EE:C2:A0:CC:CE:26:AC:91:80:85:2B:59
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0187
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xfmsaBCDkjLuwqDMziaskYCFK1k.roa
Signing time: Wed 24 May 2023 16:33:26 +0000
ROA not before: Wed 24 May 2023 16:33:26 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:33:26 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=C5F9AC6810839232EEC2A0CCCE26AC9180852B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:ed:be:66:b2:f7:1a:6f:c6:2c:aa:ce:24:
df:36:01:83:44:6b:46:80:cc:93:68:a6:25:ea:bb:
bd:cb:99:df:db:d1:af:65:e0:91:a1:35:8b:a0:b5:
09:e1:df:19:9b:33:4b:81:a2:20:64:93:17:e0:05:
bb:2c:61:74:b7:bc:51:34:46:eb:89:75:1a:19:21:
ed:81:5b:7d:76:d2:21:a9:30:b0:13:41:9a:42:6f:
ab:d1:0e:81:f8:60:05:af:c0:3a:9b:ac:54:ba:c5:
ef:af:a9:34:b7:0c:1f:7f:17:46:11:5e:f0:67:f9:
63:12:69:5a:6f:c8:98:42:3b:60:1e:48:fa:b8:dd:
94:8d:4d:61:af:5e:f5:ea:d9:b0:3d:f6:3c:cd:e1:
39:dc:c4:07:44:5e:ca:80:47:7b:8a:71:d4:00:c4:
a9:bc:34:7c:4a:0f:65:d7:43:78:6b:18:b4:98:85:
29:a5:e5:ac:3f:7a:d6:fa:57:42:e8:01:c7:4a:a2:
22:57:08:80:c5:e8:39:20:4d:36:90:72:77:b7:8a:
05:80:60:69:b6:28:a9:cb:81:8c:a9:7f:a4:17:6d:
6d:ae:51:8e:f2:38:22:87:38:88:46:fa:27:4a:83:
44:22:61:d8:f1:66:d1:59:46:a0:eb:08:0e:15:80:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F9:AC:68:10:83:92:32:EE:C2:A0:CC:CE:26:AC:91:80:85:2B:59
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xfmsaBCDkjLuwqDMziaskYCFK1k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.8.0/23
Signature Algorithm: sha256WithRSAEncryption
57:4f:a3:4f:e7:26:1b:d2:7a:1d:6f:29:26:b7:84:7f:e4:f7:
ac:df:08:ec:4b:37:50:f7:52:23:34:e8:b1:c5:98:b1:af:93:
ef:5e:51:57:ca:55:0d:29:dd:72:46:86:d3:4f:c3:ce:9f:8d:
eb:27:be:b0:38:4d:c4:2f:cf:8e:00:fb:22:1d:cb:fa:0d:ab:
27:c4:10:0e:1d:87:a1:db:ae:63:35:ad:38:dc:41:22:87:e0:
f5:ba:30:52:ab:cf:72:c1:63:f2:c6:69:56:51:a6:f5:ce:6c:
a8:ae:fb:b0:9f:45:67:aa:bf:7e:b0:1e:40:ff:b5:15:d0:09:
92:36:94:6b:ca:92:1d:c0:fd:b1:96:db:cc:21:0c:04:fa:71:
84:9e:ce:20:7e:af:a9:c1:32:e3:69:0c:e9:72:6a:6f:5e:0d:
a8:95:dc:d3:55:07:48:3f:94:3d:3d:52:0b:0b:93:69:34:00:
a0:d7:e7:f1:ee:43:9e:05:dd:8d:6c:65:21:5d:dd:f6:3e:00:
1b:17:f6:24:fc:14:5c:a0:ce:b4:00:20:6e:85:c4:bf:05:c6:
09:bc:ca:db:6c:69:2c:fb:34:d8:26:24:93:9c:ee:ea:ab:c4:
79:98:b9:11:9b:5b:b0:e4:b3:24:44:e0:72:70:03:ea:9b:2d:
fd:20:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org