Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30030/ZZL_jEKOp-dn6eYqaiTTPp_RDiw.roa
File: ZZL_jEKOp-dn6eYqaiTTPp_RDiw.roa (raw, json)
Hash identifier: MwSh3dl3GYvhTwqfsnJO4fYd74tY38VxpYCcHd6Tmwo=
Subject key identifier: 65:92:FF:8C:42:8E:A7:E7:67:E9:E6:2A:6A:24:D3:3E:9F:D1:0E:2C
Certificate issuer: /CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Certificate serial: 2A
Authority key identifier: E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/ZZL_jEKOp-dn6eYqaiTTPp_RDiw.roa
Signing time: Sun 01 Jan 2023 01:29:25 +0000
ROA not before: Sun 01 Jan 2023 01:29:25 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 240d::/27 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Validity
Not Before: Jan 1 01:29:25 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=6592FF8C428EA7E767E9E62A6A24D33E9FD10E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:e4:30:0b:41:5b:7a:78:9c:fd:a5:dd:d0:
44:26:9a:fd:9c:57:92:3f:6d:ae:22:ed:31:e5:d8:
98:61:e7:9a:a5:4f:2e:84:d8:0c:32:2b:98:85:83:
9f:80:eb:9c:07:84:22:23:5d:62:65:8b:bc:b5:e9:
51:8a:9d:e9:23:be:3b:1f:b8:64:f5:0d:26:79:7a:
8f:df:66:4d:e0:18:01:98:0e:a7:0f:40:04:59:20:
94:cc:c0:9e:ed:aa:e4:33:1d:ae:56:3d:44:20:e4:
7b:c9:56:d1:9d:44:e7:43:a2:a0:b4:57:da:0f:e2:
8b:ff:a7:c5:1e:eb:77:31:e4:b6:4d:48:ca:37:cb:
b5:23:1d:17:bf:e8:e1:2e:1f:13:03:31:8f:e9:4d:
0e:b1:16:02:31:a7:04:3c:2b:cf:5c:88:ae:32:d6:
a8:f7:f6:e4:ab:a8:2f:0c:b0:8c:27:2d:6e:1d:94:
66:3e:13:d6:64:40:30:3a:8b:a8:94:8c:56:4b:49:
81:f4:49:d8:45:45:f8:2d:6e:ff:7c:69:49:51:b7:
fd:35:d4:a9:78:59:c6:c1:81:d3:0a:6f:49:ff:83:
32:63:8b:1a:92:76:09:d9:ea:e9:2b:f1:d8:d7:87:
26:45:01:b7:dd:13:0b:c8:9a:4c:cf:87:dd:28:9e:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:FF:8C:42:8E:A7:E7:67:E9:E6:2A:6A:24:D3:3E:9F:D1:0E:2C
X509v3 Authority Key Identifier:
keyid:E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/ZZL_jEKOp-dn6eYqaiTTPp_RDiw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240d::/27
Signature Algorithm: sha256WithRSAEncryption
0b:39:da:a6:f6:1e:b4:ec:00:7d:53:e6:7f:30:d3:1e:fe:b1:
54:3d:a5:3d:8e:ec:71:b9:da:8d:32:47:2f:97:f3:d8:5f:62:
91:08:b0:6c:c1:ca:66:cd:da:ce:02:48:e6:a1:dc:3e:9c:b3:
65:a5:82:cc:45:8f:74:a4:9c:81:d7:a5:ec:5b:7b:cc:22:8f:
c0:32:18:58:e8:22:b6:cd:5a:3a:7a:71:bf:36:70:e8:a7:f6:
6d:95:ff:e2:21:18:f3:a3:e1:24:e7:d5:df:f2:33:b5:19:4f:
82:0a:3f:6e:32:82:98:c6:b5:f5:f8:8b:14:9c:b5:bb:3b:26:
f8:a5:03:fe:a3:ba:a2:60:76:b1:f9:c6:33:b6:ae:c9:28:82:
74:e3:4d:2d:5a:dd:b9:cc:3e:68:af:6d:b9:7c:95:9a:72:05:
e2:b0:9b:6a:51:0a:98:66:b3:ec:ba:57:c1:6b:0a:b2:96:7a:
61:08:32:9e:46:6e:77:33:13:17:6d:08:ae:09:18:1b:6c:cc:
dd:0c:d7:1d:b7:ca:51:82:85:9e:59:15:53:90:53:46:e6:a6:
51:43:e2:a1:83:c2:ba:04:29:af:2f:dc:72:c5:2c:2e:c6:f2:
99:b4:d0:93:aa:c5:44:48:c1:92:4a:24:13:9a:ff:e0:78:9d:
06:ed:a0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org