Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/H66hXqA8IWKG3iUyXfz-3xQiZdc.roa
File: H66hXqA8IWKG3iUyXfz-3xQiZdc.roa (raw, json)
Hash identifier: 1xXNLIFa0SRxJA03mfhLNg3yEJ5Uixv9JbQ4lq5iI0E=
Subject key identifier: 1F:AE:A1:5E:A0:3C:21:62:86:DE:25:32:5D:FC:FE:DF:14:22:65:D7
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: 41
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/H66hXqA8IWKG3iUyXfz-3xQiZdc.roa
Signing time: Sat 01 Apr 2023 01:29:49 +0000
ROA not before: Sat 01 Apr 2023 01:29:49 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9622
IP address blocks: 124.47.64.0/18 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Apr 1 01:29:49 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=1FAEA15EA03C216286DE25325DFCFEDF142265D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:36:2a:70:e8:5f:d5:20:78:f7:ef:26:5c:
c8:c3:da:dd:a8:aa:31:3b:21:71:04:a6:ad:ab:c3:
a7:3b:96:c8:36:7c:c8:d6:ca:45:e5:e5:66:02:cb:
da:3b:ae:0c:56:52:49:be:a5:7d:2c:5f:b7:70:16:
f3:c3:9d:fa:3b:b4:53:ee:b3:e8:fe:90:81:ee:b3:
41:16:71:01:be:a8:89:72:9d:62:59:d3:34:9b:3d:
c7:60:f6:d0:01:b7:35:36:f4:28:87:83:fe:bd:d5:
49:18:b4:b2:e6:e5:fe:f6:76:bf:c9:8f:9b:9e:49:
03:1d:14:b7:c7:a3:11:c6:1a:85:0c:91:b0:4c:ba:
73:f3:bb:0b:e9:15:14:6b:d4:bf:8c:9f:cc:fc:eb:
21:eb:ad:96:8f:7d:b7:01:84:cc:11:95:5a:a5:7e:
47:51:1a:69:b5:9f:91:22:bf:43:9d:d9:d8:ae:7c:
84:e1:1e:37:9f:31:41:c9:ef:a3:97:cc:5d:9f:b5:
df:dd:b5:94:a8:75:9f:1b:65:c2:5d:d4:f9:ac:0f:
f2:c1:ec:c4:16:c0:76:5a:23:8d:8b:a2:62:b9:79:
19:e4:2e:03:c3:11:5f:08:62:58:b6:08:29:30:b6:
7a:6f:d8:c3:91:7a:a3:01:e3:44:07:2e:f9:c5:b3:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AE:A1:5E:A0:3C:21:62:86:DE:25:32:5D:FC:FE:DF:14:22:65:D7
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/H66hXqA8IWKG3iUyXfz-3xQiZdc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.47.64.0/18
Signature Algorithm: sha256WithRSAEncryption
53:6c:de:fd:8a:ac:2c:28:76:c8:78:11:8c:57:68:14:44:d3:
ad:71:5e:8c:c0:25:e5:4a:fe:50:fd:17:9a:c7:e3:63:41:20:
f4:cf:ca:c9:f1:94:67:7a:92:ed:22:58:cd:c6:5c:cf:3e:d3:
c8:39:ce:ab:d3:9b:c0:03:6b:92:1b:67:e3:b1:ba:f0:13:0d:
1d:83:48:37:da:cd:d1:39:65:7a:64:01:c9:13:8f:90:b6:47:
8d:44:87:25:13:33:03:02:ba:ce:0e:e1:70:c3:20:64:00:65:
69:3b:9a:c7:3e:72:20:9c:15:ff:4c:7d:f4:b7:70:59:34:a9:
53:ac:53:55:71:57:5c:32:ac:58:4b:06:f2:0d:a7:a7:1c:47:
3b:95:79:bf:22:81:ad:7a:b6:36:9d:40:7d:da:24:fb:ff:78:
4c:ef:12:07:cd:21:88:9b:98:51:3c:09:5f:66:fb:ae:4e:33:
66:bd:96:37:d0:3d:95:c1:c9:c1:74:8a:a4:11:60:24:56:c7:
20:94:bd:b4:31:be:b8:f6:36:4e:59:f9:8d:f0:15:36:f3:ab:
1b:e1:68:cd:ac:05:96:a6:fa:ff:2d:f0:1f:38:40:9c:39:c2:
70:7b:17:57:11:4e:a5:93:30:48:c0:6e:72:1b:a1:93:bd:0f:
87:ac:a5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org