Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Ft3Iyv2Vn7yUu6Wd3tB5Au9BGsI.roa
File: Ft3Iyv2Vn7yUu6Wd3tB5Au9BGsI.roa (raw, json)
Hash identifier: 0EFVqyqYgZ16c1T1MUo7mPzM0oj7PJ3TPP0BA5KxXJQ=
Subject key identifier: 16:DD:C8:CA:FD:95:9F:BC:94:BB:A5:9D:DE:D0:79:02:EF:41:1A:C2
Certificate issuer: /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Certificate serial: 4E
Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Ft3Iyv2Vn7yUu6Wd3tB5Au9BGsI.roa
Signing time: Fri 17 Mar 2023 13:10:15 +0000
ROA not before: Fri 17 Mar 2023 13:10:15 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 7521
IP address blocks: 2001:3a0::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Validity
Not Before: Mar 17 13:10:15 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=16DDC8CAFD959FBC94BBA59DDED07902EF411AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4a:a4:72:9c:5e:29:6a:fc:8f:aa:33:a7:67:
a8:a8:d9:a3:58:7b:b3:96:bc:40:7a:20:68:1e:7c:
14:30:82:be:8e:62:ad:64:aa:b1:90:14:1f:58:a8:
15:2b:12:78:2a:19:26:fe:3e:6e:23:16:50:3f:61:
86:64:d6:a9:e7:02:8d:c7:89:58:fa:1c:8f:9f:14:
c2:f2:cb:71:f6:42:e6:18:47:b8:c9:ef:f8:77:60:
df:97:06:81:42:3d:c1:9e:8a:7d:09:7d:38:c5:68:
24:66:c9:43:b9:89:40:be:3b:c7:05:d9:f7:d3:f4:
9f:9e:3d:72:7a:cc:00:c2:96:1c:c9:a4:66:d9:3c:
67:8c:6f:b4:83:37:79:4d:67:b2:02:0f:b9:20:df:
8b:14:07:24:18:57:d4:e3:35:03:71:99:d0:0e:2f:
e5:1c:ff:c4:e1:09:0d:d1:ba:bd:8d:54:4e:b8:03:
e0:e0:b1:39:29:fd:70:10:63:ec:2d:32:1c:26:94:
0a:fb:ff:a5:fc:0c:30:ff:c6:ed:84:68:a7:69:00:
46:93:28:90:65:a0:c1:65:c6:9d:3a:b0:b9:a0:42:
45:34:c7:e3:b1:e6:13:d3:27:4b:54:b9:0e:4c:59:
41:d7:12:12:a8:7f:08:d0:a5:8a:5d:b9:b3:78:1e:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DD:C8:CA:FD:95:9F:BC:94:BB:A5:9D:DE:D0:79:02:EF:41:1A:C2
X509v3 Authority Key Identifier:
keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Ft3Iyv2Vn7yUu6Wd3tB5Au9BGsI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:3a0::/32
Signature Algorithm: sha256WithRSAEncryption
60:de:d3:b1:9b:37:88:3b:31:5a:b9:95:21:23:66:1d:e6:db:
c6:af:75:d1:7b:d8:98:7b:38:2e:f1:25:4d:53:8f:a3:b8:a0:
c9:44:ad:b9:f7:a2:93:05:b2:2d:90:2c:48:77:5f:0e:53:34:
a1:e5:c6:b0:05:f0:45:63:13:1e:fa:8c:30:3b:ec:a6:40:38:
00:3f:38:fe:53:cd:c9:93:27:75:00:44:99:c8:cd:7b:a7:a5:
29:2f:50:56:1c:40:e3:66:fe:2c:f0:95:d3:01:2a:05:14:35:
2d:87:e6:c8:58:a5:74:d0:05:52:ac:44:97:ec:b0:d7:c7:69:
58:11:d9:35:bf:9d:d3:f2:77:21:3d:ef:fa:ea:5e:ff:31:fd:
c1:41:97:ce:b5:94:41:2f:9c:98:f9:5d:63:15:76:3a:62:25:
26:d8:4b:2f:1d:02:85:ff:4f:7c:51:75:a9:03:34:21:05:d4:
9d:0d:c7:58:d1:06:1e:e7:c1:8c:76:02:4b:de:b4:11:91:57:
2e:6a:fa:e3:71:e3:c8:b9:1f:9b:55:e4:9b:50:b1:19:de:eb:
c8:c0:d9:62:de:0d:ae:a1:f3:f3:6e:36:21:be:84:39:f3:db:
aa:33:66:e9:4c:86:86:fe:b9:5b:73:48:a7:d1:d2:a1:6d:d7:
10:b4:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org