Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zkrUhpYzbJB5Y9xd4b9qomGwdd0.roa
File: zkrUhpYzbJB5Y9xd4b9qomGwdd0.roa (raw, json)
Hash identifier: QLkFT6f3R9kv0qiAz+GE8lLtsq4HrPRGoMkiEPB/EA4=
Subject key identifier: CE:4A:D4:86:96:33:6C:90:79:63:DC:5D:E1:BF:6A:A2:61:B0:75:DD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 02C4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zkrUhpYzbJB5Y9xd4b9qomGwdd0.roa
Signing time: Tue 30 May 2023 17:17:37 +0000
ROA not before: Tue 30 May 2023 17:17:37 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 219.122.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 17:17:37 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=CE4AD48696336C907963DC5DE1BF6AA261B075DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:81:0c:c4:21:e7:1f:43:16:c0:9a:f5:10:76:
7c:3c:5b:0f:d3:e1:ee:44:ba:ea:db:21:34:a2:6d:
cc:3f:e9:15:47:95:0e:2a:47:c3:ef:5f:0e:ea:ab:
6f:b2:80:f5:40:1b:40:2e:9b:9f:bb:b6:e9:04:81:
27:59:6d:33:71:09:8c:1a:79:b1:41:75:cd:fb:22:
5f:a6:72:85:b4:4e:fd:2a:08:f7:0d:c3:7c:f2:16:
32:64:bb:13:d8:99:f0:ae:aa:2e:a6:5f:de:fe:e4:
b5:23:1e:43:b0:49:01:67:13:b8:b3:e2:dd:c1:a6:
45:68:bc:2b:9e:bb:7e:41:4f:d8:2a:67:0b:28:80:
c6:a9:e1:55:30:98:e8:4b:0c:63:1b:1f:81:98:bd:
de:9b:d9:20:e5:0d:cd:43:e1:61:0b:74:39:30:37:
75:fe:05:08:45:17:bf:8a:6e:ea:81:16:4b:be:98:
7d:58:bf:e6:28:ad:f4:2a:8e:d3:c6:ca:b3:af:81:
2b:eb:c1:b8:43:8d:fc:92:49:2b:30:6c:fc:32:2f:
ea:9f:c3:67:29:45:25:80:53:f3:0b:cb:31:58:61:
dd:a6:0f:c6:79:c7:fa:d2:73:6f:81:ad:16:81:02:
84:69:47:07:ee:e9:31:7d:b4:7c:c0:f2:c6:32:ff:
2a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4A:D4:86:96:33:6C:90:79:63:DC:5D:E1:BF:6A:A2:61:B0:75:DD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zkrUhpYzbJB5Y9xd4b9qomGwdd0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.122.64.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:f4:6e:d9:a6:ab:1d:5c:2e:66:b6:e4:77:f4:8a:31:32:af:
da:9b:ee:c7:c3:0b:55:10:28:8b:89:44:62:a9:e9:db:11:c9:
cf:93:d6:42:a1:7e:30:54:fb:ff:b0:df:70:7c:d9:0f:6a:ed:
ac:42:64:c3:e6:75:20:ef:d8:7f:55:b9:58:fb:02:9e:b6:74:
13:72:1f:aa:55:33:2c:00:88:9a:7a:43:f3:99:d4:71:1b:5e:
28:49:37:22:05:03:16:eb:1c:a5:4e:c9:8a:fb:a0:42:52:bf:
8a:22:78:b2:96:71:06:b5:b5:fe:b6:19:96:2c:93:99:ac:42:
f4:76:f0:29:86:7e:53:13:bc:72:9a:cf:d8:4c:05:e0:bf:a5:
35:00:1f:69:6d:d6:68:ae:9b:64:94:48:01:d6:75:42:77:e8:
89:f3:0c:80:85:f3:5d:67:f0:e4:8f:2e:62:8e:27:d6:06:5b:
e9:e6:cb:4f:6b:8e:f1:e6:a9:26:e0:fd:82:4e:4c:72:01:e6:
48:14:ce:a5:95:68:23:d0:32:fd:ba:c6:37:11:fe:44:c4:c2:
9e:bd:c0:74:27:f6:2a:fa:0b:07:09:18:98:54:d1:1b:9c:ef:
44:1b:1b:ee:94:53:dc:d6:1f:f8:89:81:dd:eb:45:53:f4:ce:
79:16:bd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org