Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ximd-snNcz4EgKBejPIZwId6-P4.roa
File: ximd-snNcz4EgKBejPIZwId6-P4.roa (raw, json)
Hash identifier: DSsMHnXGSU1mGg7d9hwbKSNfxLkKWQFR+j4h+BCh4t8=
Subject key identifier: C6:29:9D:FA:C9:CD:73:3E:04:80:A0:5E:8C:F2:19:C0:87:7A:F8:FE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 80
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ximd-snNcz4EgKBejPIZwId6-P4.roa
Signing time: Mon 27 Mar 2023 16:12:03 +0000
ROA not before: Mon 27 Mar 2023 16:12:03 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.98.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:12:03 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=C6299DFAC9CD733E0480A05E8CF219C0877AF8FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5a:13:ae:4f:46:a7:d3:e0:89:15:8b:fa:e7:
e3:5b:46:d6:08:ae:0c:ce:cc:a6:d1:97:a8:fc:86:
4a:ae:66:8a:a3:7f:7b:10:ac:6d:10:97:02:63:51:
61:82:00:3e:f2:85:99:d7:6a:b2:3f:73:26:76:4d:
07:27:00:7a:61:bc:92:1e:e5:ee:c1:80:c8:fa:49:
2d:61:60:07:0a:6a:cb:f0:7a:5c:8e:7d:6e:3f:5d:
ea:ae:ac:4d:2a:79:eb:ed:9e:96:70:09:2c:1f:5f:
94:33:00:60:67:10:28:26:0e:f4:53:d9:60:6a:93:
f3:2d:d3:40:4c:0a:34:16:bf:ac:05:9f:56:a7:84:
16:85:d2:89:36:ce:93:e6:35:7c:df:da:07:02:d5:
0c:75:5b:d4:cd:8e:61:94:a3:73:d4:c9:29:f0:35:
46:30:07:c2:08:44:4c:48:ad:6b:af:93:18:86:f2:
4c:b1:80:6a:75:d6:87:98:59:8e:31:a5:d5:9e:d1:
2d:70:c6:02:c1:55:60:f2:f9:6d:de:8d:7e:0d:da:
05:c6:ea:3f:3f:ae:c9:59:9a:38:db:b5:66:3c:d5:
85:49:f2:af:6d:26:19:a9:3c:5b:54:d1:47:f7:c6:
29:7f:b1:3c:d6:c3:99:9f:4c:08:dd:c5:ae:c7:4e:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:29:9D:FA:C9:CD:73:3E:04:80:A0:5E:8C:F2:19:C0:87:7A:F8:FE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ximd-snNcz4EgKBejPIZwId6-P4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.98.0/23
Signature Algorithm: sha256WithRSAEncryption
35:ec:ea:8f:97:ca:02:ed:1a:4a:01:2e:26:69:62:d2:2f:a9:
81:4d:2d:64:69:2c:2f:7a:e8:3a:ac:06:ac:b0:32:a4:bd:a4:
ff:95:a3:2d:80:e1:14:05:d5:5f:f4:42:8e:26:6d:a6:e3:f3:
3a:75:26:16:4f:84:a9:25:31:19:80:4f:ff:6e:ad:db:95:f2:
2b:81:7b:5f:56:c6:fa:06:14:02:de:12:4b:c0:42:1d:63:a4:
31:52:a6:aa:19:f4:1f:54:c7:03:48:53:06:4d:f1:e5:12:3c:
44:20:c8:ec:78:3e:62:b1:75:e7:ba:94:60:87:88:fb:46:8e:
e2:b0:9a:1c:d5:9d:ee:81:83:9e:7d:f7:93:55:72:83:69:32:
1b:35:81:ba:ee:44:9a:1c:eb:98:6d:96:fe:56:6d:33:01:76:
ed:65:c2:0c:57:8e:b0:1b:03:b7:95:75:d8:12:76:89:c7:62:
f6:1f:3a:2f:d3:f8:aa:47:79:bb:9d:79:98:17:5e:06:ea:7b:
0d:3b:06:de:88:dc:a9:44:b9:90:5d:7c:82:37:21:6f:fe:fa:
c4:4c:70:4c:a5:ef:f7:5e:14:e0:ff:be:58:d6:fb:4e:64:23:
28:a2:eb:e1:de:66:9f:27:5e:b0:25:78:9b:68:00:5f:c4:a5:
49:31:73:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org