Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/spQsTgePYa1SrBEkhZcl2JqIHhY.roa
File: spQsTgePYa1SrBEkhZcl2JqIHhY.roa (raw, json)
Hash identifier: 41xufoN13OgrlIwqFp0+WehH/vpwBQxW0t607FU33AY=
Subject key identifier: B2:94:2C:4E:07:8F:61:AD:52:AC:11:24:85:97:25:D8:9A:88:1E:16
Certificate issuer: /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial: 25
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/spQsTgePYa1SrBEkhZcl2JqIHhY.roa
Signing time: Sat 01 Oct 2022 01:29:43 +0000
ROA not before: Sat 01 Oct 2022 01:29:43 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 2497
IP address blocks: 2001:240::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Validity
Not Before: Oct 1 01:29:43 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=B2942C4E078F61AD52AC1124859725D89A881E16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:9a:75:dc:10:dc:57:15:23:7e:93:ac:78:
d3:72:7b:b7:1d:b6:70:f7:92:b4:c8:81:2d:37:a9:
f1:b3:0e:40:b8:7b:7a:60:5a:50:90:6c:69:31:70:
e5:1a:c9:51:23:06:30:5e:88:9d:f4:37:29:bc:9d:
6e:00:e6:55:d4:c2:05:ef:82:7e:f0:5e:a6:c2:a0:
7b:b8:70:08:dc:a5:25:dc:68:ff:8d:ba:aa:95:7c:
45:7d:bc:d7:8e:55:cf:6a:89:7f:c1:cc:d4:91:a3:
0a:90:38:5c:7e:29:28:97:69:58:69:2c:ba:4b:3c:
e7:28:99:46:38:a9:40:df:3a:ff:f5:ae:da:7a:73:
12:c2:f1:66:6b:e4:0f:49:62:dd:24:8f:8b:ac:d7:
14:23:d7:82:f4:c4:41:02:85:1e:18:bd:bc:9c:11:
5a:f5:81:b7:7c:04:72:72:b2:7d:4c:77:b4:e0:d3:
a7:25:e1:ec:3f:35:26:59:f1:ca:86:0b:cc:2b:36:
83:ff:8c:b3:6b:45:4b:e6:d6:08:c8:ea:fe:43:b8:
96:7b:45:62:31:d3:10:38:5f:b4:a7:f0:7e:4a:fa:
2e:94:fd:f5:8f:62:fa:62:5c:3f:c4:5b:d6:b0:89:
6c:ef:a9:05:d0:8b:20:e3:b5:cd:79:ad:f2:41:4d:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:94:2C:4E:07:8F:61:AD:52:AC:11:24:85:97:25:D8:9A:88:1E:16
X509v3 Authority Key Identifier:
keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/spQsTgePYa1SrBEkhZcl2JqIHhY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:240::/32
Signature Algorithm: sha256WithRSAEncryption
2b:f4:5c:9b:8e:3e:93:92:aa:99:9b:a2:7c:b7:dd:82:8f:8b:
85:60:66:0d:5a:ed:f4:d4:cc:11:0f:63:c7:33:5d:11:8b:6d:
ca:20:d2:96:f5:d8:41:45:f1:5d:d0:ef:b1:1e:e5:0b:19:06:
7a:04:ed:b3:5c:da:a2:d8:44:a4:c9:c9:6f:9d:46:74:1c:41:
f9:77:e8:06:8e:d1:fc:9c:d0:d3:4c:ff:7c:2f:db:32:0f:cf:
ff:81:87:34:77:fe:4a:62:27:7b:38:ee:46:c4:43:da:9e:9c:
9b:28:e2:d3:5f:c7:d8:15:ac:a2:d4:03:4d:56:0f:25:d9:d1:
7c:bb:38:43:1f:8f:e7:4a:8a:eb:81:61:14:bb:05:6f:35:dd:
5e:eb:6c:2c:70:ad:3d:c8:ef:69:71:20:8d:4a:eb:3e:5f:cc:
db:17:52:3c:74:47:98:e2:25:c1:d2:f8:8c:f6:d7:71:4f:87:
39:4e:ef:3e:4c:f8:0e:e6:f2:9d:ca:05:a3:dc:46:e6:b8:c5:
27:30:07:a4:f7:7c:4f:e9:df:5a:bf:18:8d:fb:9d:dc:d0:ae:
f0:bb:54:8e:c9:05:ed:c0:2b:f0:bb:00:46:2e:dc:72:99:96:
79:3d:ae:2e:93:2c:75:4c:05:89:ac:bf:1c:9e:60:ac:7a:7f:
7e:b7:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org