Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/x6fj5v-ivA2dQcpfIdpXJjMEYfY.roa
File: x6fj5v-ivA2dQcpfIdpXJjMEYfY.roa (raw, json)
Hash identifier: kjjfKuOje5/0jb+1dBuVJ03G53//aVFqOmevB5eBGAk=
Subject key identifier: C7:A7:E3:E6:FF:A2:BC:0D:9D:41:CA:5F:21:DA:57:26:33:04:61:F6
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0448
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/x6fj5v-ivA2dQcpfIdpXJjMEYfY.roa
Signing time: Thu 13 Apr 2023 09:57:43 +0000
ROA not before: Thu 13 Apr 2023 09:57:43 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 111.67.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:57:43 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=C7A7E3E6FFA2BC0D9D41CA5F21DA5726330461F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:59:b6:48:ac:28:e0:9e:49:15:bc:1a:46:0d:
74:88:9a:d0:39:c2:e1:7b:12:36:02:b7:05:59:ee:
4f:b8:2b:7d:5b:94:7c:06:bd:64:ed:6b:0f:b9:0e:
50:55:2c:bb:04:c4:cc:e1:75:a9:1f:a2:ac:e5:6f:
62:74:40:31:8d:dc:79:c5:fc:01:fd:51:8a:1e:00:
ed:43:d9:fd:c4:80:c0:5e:13:3f:81:8f:58:02:8a:
31:d7:53:cb:dd:e1:ae:53:74:7e:e4:6a:ea:bc:fd:
56:91:60:0b:8b:c3:01:a0:68:d1:87:27:d8:bf:69:
c4:f0:6a:8b:47:4d:bf:39:d6:2c:c3:84:8e:15:30:
e9:97:e4:54:6c:83:78:c9:28:19:7b:0a:78:38:43:
31:b0:3a:63:76:9e:3c:54:2c:24:5d:ae:91:4c:4e:
e1:bf:22:e1:32:4f:7d:c0:f8:e2:b3:af:49:12:c4:
ad:d8:49:e2:5d:71:19:98:bf:31:ff:b7:a1:e7:86:
b0:5a:79:55:6f:2b:8a:f2:f0:b9:fc:61:e3:1f:f1:
76:33:79:43:4b:14:da:76:55:e0:f0:6f:8c:1a:aa:
7b:7d:af:b0:0b:1a:d0:cb:45:02:70:b7:51:95:46:
87:16:e2:fb:af:0d:57:26:07:92:bc:06:3a:ae:74:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A7:E3:E6:FF:A2:BC:0D:9D:41:CA:5F:21:DA:57:26:33:04:61:F6
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/x6fj5v-ivA2dQcpfIdpXJjMEYfY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.67.120.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:bc:65:07:93:68:e1:aa:9a:c6:f1:3e:05:b9:52:82:69:cc:
70:89:e4:30:51:37:22:cd:84:38:26:f6:0d:a2:83:ca:17:41:
a2:30:d0:56:66:e7:df:65:fe:01:5c:80:eb:0c:9f:2f:be:37:
44:c0:76:3d:32:30:43:5d:76:6d:08:ef:ab:5c:c0:6c:a4:88:
80:b4:e8:3c:54:fc:ae:58:b4:8b:d6:f0:fa:7f:20:98:2e:59:
4b:34:75:99:f8:99:6e:07:1d:2f:e6:44:b0:80:ed:7e:00:28:
89:e0:42:43:06:43:14:0c:ce:af:ad:61:21:b5:f9:3d:a0:39:
de:c1:22:8b:e2:4f:97:29:70:78:db:c9:d4:8f:b3:80:c6:67:
e5:d9:c9:e4:8e:68:6e:7a:02:8b:88:28:8c:b2:64:3a:bb:be:
3d:89:c2:79:e4:88:05:ec:c9:24:28:69:90:7c:9d:e3:2c:0d:
3e:b5:c7:bb:72:7f:bd:92:94:03:69:9b:1c:9d:13:66:88:7b:
2b:f9:76:1c:70:38:35:51:d4:dc:22:28:a5:7d:54:92:9b:60:
23:83:54:6b:66:b7:e1:72:ff:96:ac:a2:4d:f3:a0:6e:e4:e9:
85:64:c8:f4:f1:5c:fc:55:63:53:5d:15:91:a3:c5:8d:a5:0c:
21:40:2a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org