Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/JOwH1_sz_iKNtoA2SvIeqqx4BZg.roa
File: JOwH1_sz_iKNtoA2SvIeqqx4BZg.roa (raw, json)
Hash identifier: oJMgI98KVJZs/dp487dSQ4j5KEdGtibyMu+dktFK4ZU=
Subject key identifier: 24:EC:07:D7:FB:33:FE:22:8D:B6:80:36:4A:F2:1E:AA:AC:78:05:98
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 040B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/JOwH1_sz_iKNtoA2SvIeqqx4BZg.roa
Signing time: Thu 13 Apr 2023 09:52:18 +0000
ROA not before: Thu 13 Apr 2023 09:52:18 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 220.216.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1035 (0x40b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:52:18 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=24EC07D7FB33FE228DB680364AF21EAAAC780598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:bf:35:3e:c9:f7:83:4a:32:2b:54:04:11:
47:3c:e0:ea:aa:25:54:25:8a:e9:61:76:da:e6:4f:
ef:c4:4d:55:1a:ba:6e:98:4c:54:15:c2:f7:ff:d4:
3a:75:58:5c:41:64:83:fc:1c:07:1f:e2:91:d6:3e:
1d:d9:f6:3b:38:c0:4b:99:a8:36:ee:51:5e:aa:53:
b5:ee:33:33:3a:9a:b0:de:2b:73:2f:11:99:0e:d4:
62:15:d5:24:ac:41:93:37:b6:0d:df:81:13:b7:5a:
ff:1f:b7:60:35:91:b0:d0:0b:53:fb:d8:48:f7:37:
bb:24:04:90:dc:b8:22:f2:e3:bc:c2:92:1d:3c:6b:
e1:21:ae:e4:71:38:f6:13:5b:d1:b9:f1:06:5d:24:
93:34:31:30:48:2b:89:d5:41:6c:a8:de:f5:0a:1b:
f8:65:40:63:1b:04:79:5d:7e:48:bb:31:57:28:ab:
4a:10:2c:eb:8b:a6:15:62:43:1b:6a:79:ec:c9:46:
b4:21:42:a7:5b:21:fe:43:e4:df:31:02:53:cd:c3:
59:c0:7d:0b:b4:10:fe:ef:3b:22:be:46:e3:53:8f:
cd:02:d8:6f:00:fe:13:91:54:13:44:b6:57:73:c7:
ef:31:4c:ec:fc:f1:8e:98:5d:84:b8:13:00:eb:da:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EC:07:D7:FB:33:FE:22:8D:B6:80:36:4A:F2:1E:AA:AC:78:05:98
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/JOwH1_sz_iKNtoA2SvIeqqx4BZg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.216.112.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:c2:e0:6f:ce:45:3e:c2:3d:60:6e:69:ab:c6:c7:f3:8d:f0:
86:7d:1e:c3:a1:71:1d:e9:43:6a:ab:50:a5:62:bf:5d:d9:8e:
29:94:cb:1d:fb:71:d2:22:fc:43:21:ea:6f:a8:0a:62:a8:43:
51:25:3c:8e:cc:76:aa:3d:79:c8:dd:7e:c6:e1:29:af:7e:7b:
8e:21:b9:ba:f6:20:5c:02:44:2a:a1:21:1b:cd:22:81:a0:2a:
3e:17:b7:73:18:3f:86:71:3f:3e:67:54:c3:e6:cf:16:d1:89:
aa:96:fe:13:e6:b4:0c:82:48:10:63:e9:f0:7e:6e:46:66:83:
03:d3:1e:4e:62:5f:86:9b:0a:10:1b:bb:fd:cd:85:d7:1f:d2:
84:c8:42:6f:92:3b:7f:25:a7:c6:fa:d3:7a:a6:40:ad:75:8b:
80:2e:f0:f8:ad:cb:61:3e:38:e5:68:84:95:e7:4a:14:9b:35:
9d:f0:fa:e8:3c:c7:73:85:d3:06:56:b6:7f:0d:34:18:8b:ea:
6e:3d:ef:21:5c:90:1f:29:74:09:6a:a8:f8:78:34:03:6f:5c:
0c:05:8b:fb:78:4d:7b:db:90:d8:64:cf:93:61:ca:15:17:e3:
53:b0:87:31:84:87:34:73:3c:0b:aa:9f:52:07:82:de:fa:ae:
fd:e3:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org