Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zthsZxS2WuwogR-mhuuZ23TdMTA.roa
File: zthsZxS2WuwogR-mhuuZ23TdMTA.roa (raw, json)
Hash identifier: rFE6+2hpGokPhzGv9gC7D6PNi6fVTE/czuau1M/bIJs=
Subject key identifier: CE:D8:6C:67:14:B6:5A:EC:28:81:1F:A6:86:EB:99:DB:74:DD:31:30
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 035B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zthsZxS2WuwogR-mhuuZ23TdMTA.roa
Signing time: Thu 01 Jun 2023 17:56:35 +0000
ROA not before: Thu 01 Jun 2023 17:56:35 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.224.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 859 (0x35b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:56:35 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=CED86C6714B65AEC28811FA686EB99DB74DD3130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:3e:ab:ea:50:f2:5d:38:4e:5e:c3:8f:01:
13:91:b9:f7:6b:52:04:c2:ab:11:e5:e9:69:6a:f5:
7f:f9:0f:1c:d3:80:7f:5f:fe:2e:52:99:41:1e:bb:
0c:4c:4e:7a:0f:9b:8b:af:a0:bc:ae:31:c6:28:9e:
6a:cb:06:60:e3:0c:dc:f7:a2:05:09:07:68:ec:97:
dc:1a:b8:c9:17:4c:54:d6:41:a7:b1:50:a4:63:c2:
f6:72:a8:a9:e5:8d:c8:25:1f:df:f0:b9:64:e0:62:
ff:e8:58:fa:14:16:2d:b0:da:47:e5:36:94:b3:35:
90:0d:dd:dc:84:f5:6c:08:88:50:c6:65:09:29:b4:
11:f4:5c:56:f3:f3:9a:e1:07:03:38:28:22:ac:a1:
c8:39:d4:ee:9a:6f:a2:49:e6:f6:88:65:73:a9:25:
cc:1c:26:d3:10:fd:10:d7:1b:dc:8a:82:a6:b9:78:
e9:0b:89:fc:ac:95:97:0b:a6:07:5b:04:66:bb:2a:
29:e3:e8:5d:02:b2:54:21:47:aa:db:ec:16:93:22:
da:9d:a3:c5:13:0a:8d:02:76:c4:7b:9a:1b:90:fa:
3e:6a:b3:92:df:b1:fc:4a:b5:82:c5:6e:11:a8:f6:
29:17:93:e0:a3:5c:7c:54:a9:81:4d:38:16:bb:0d:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:6C:67:14:B6:5A:EC:28:81:1F:A6:86:EB:99:DB:74:DD:31:30
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zthsZxS2WuwogR-mhuuZ23TdMTA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.224.0/23
Signature Algorithm: sha256WithRSAEncryption
62:e6:19:da:6b:41:90:d9:51:6d:f5:da:83:4d:2b:b8:de:39:
f4:53:38:56:4f:57:81:1c:3f:91:97:ba:78:77:ee:da:39:5b:
a4:59:7f:83:63:60:51:78:ce:50:9f:aa:b2:c4:6e:32:5a:71:
a4:b3:0f:b1:71:bd:a0:cf:dc:e0:2b:bc:db:d2:72:03:e6:1f:
47:05:3c:bc:6d:1a:18:f0:0b:b0:dc:d1:de:37:c7:ca:97:05:
46:c1:72:ae:43:de:11:b5:8a:0e:79:6c:fb:a6:4e:02:4a:b4:
4b:51:66:f9:b3:87:dc:fa:72:41:d9:05:ec:6a:cc:9f:d2:e3:
f9:73:5e:61:79:18:72:7c:23:f1:e2:7b:8a:e9:29:7e:a7:ad:
de:c7:89:13:d5:7b:c4:76:79:d5:bf:38:2b:e7:3b:ad:46:05:
23:f9:89:cb:e7:a8:ed:ee:5a:be:f8:a1:61:0a:2e:15:58:19:
11:1e:32:3a:cb:94:38:89:da:10:bd:c6:36:31:18:e8:f3:7d:
ba:da:8c:31:dc:0c:e1:4e:9d:94:d8:29:d6:c5:07:68:99:96:
6b:c1:df:4e:12:56:0c:18:97:ef:35:9d:53:16:80:7c:32:68:
66:86:20:63:b1:a7:40:3b:d1:51:91:45:b0:15:da:bc:55:6a:
38:64:af:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org