Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30040/AzgIct6YCKOiYSRYpULOELXRfuY.roa
File: AzgIct6YCKOiYSRYpULOELXRfuY.roa (raw, json)
Hash identifier: bjmlA1S15gb+4gIeccjoO/cbjCzJtQuwQjdsv8zbTMM=
Subject key identifier: 03:38:08:72:DE:98:08:A3:A2:61:24:58:A5:42:CE:10:B5:D1:7E:E6
Certificate issuer: /CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F
Certificate serial: 03
Authority key identifier: 5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/AzgIct6YCKOiYSRYpULOELXRfuY.roa
Signing time: Mon 20 Feb 2023 03:56:56 +0000
ROA not before: Mon 20 Feb 2023 03:56:56 +0000
ROA not after: Fri 16 Feb 2024 08:11:04 +0000
asID: 9619
IP address blocks: 2001:cf8:5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F
Validity
Not Before: Feb 20 03:56:56 2023 GMT
Not After : Feb 16 08:11:04 2024 GMT
Subject: CN=03380872DE9808A3A2612458A542CE10B5D17EE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:14:ce:84:6f:47:28:07:cb:ac:20:cb:2a:2c:
af:a3:42:19:a0:8d:a3:a2:8c:42:00:1a:4e:cf:90:
e6:cb:d7:ab:2b:86:78:be:33:26:44:06:d3:e8:97:
1b:25:88:85:46:60:bf:71:41:6b:71:f4:fa:de:ef:
ba:24:bd:e5:b7:72:db:1b:42:77:fb:6c:d7:bc:3c:
ae:77:30:f2:90:54:48:90:36:d1:0c:ac:67:bc:31:
78:ea:cf:c9:cf:12:c6:1c:88:76:e5:36:d1:04:e1:
af:08:b8:cc:86:a8:03:f2:27:14:be:4b:50:5d:7a:
3a:0a:4d:2d:eb:7a:ae:d6:ac:e0:14:2c:41:a1:45:
07:b0:d6:9d:77:a9:f5:08:71:c4:98:5f:ec:b8:87:
40:62:88:3c:6e:9f:e7:48:ef:d4:a2:f3:16:86:d1:
80:38:9b:e8:17:9a:65:16:9b:6e:75:ea:5c:00:b9:
40:28:04:09:a9:17:97:fb:55:7a:66:ce:35:10:08:
55:ae:e8:cd:84:fe:47:e9:23:b7:7f:74:d7:08:bf:
1d:1b:ff:a5:e6:5b:be:f2:08:c8:23:4d:40:d4:0d:
1a:d8:d2:99:30:6c:e5:be:9d:c3:20:fc:f5:67:6d:
17:e9:6f:a5:31:b7:44:cf:84:4d:6c:91:03:85:26:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:38:08:72:DE:98:08:A3:A2:61:24:58:A5:42:CE:10:B5:D1:7E:E6
X509v3 Authority Key Identifier:
keyid:5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/AzgIct6YCKOiYSRYpULOELXRfuY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:cf8:5::/48
Signature Algorithm: sha256WithRSAEncryption
27:00:20:09:e5:1c:5c:78:4c:bf:24:2c:db:72:80:34:c1:04:
a4:58:1f:00:13:66:99:cc:6f:8c:0b:53:0d:53:91:6f:65:1d:
db:8d:ea:bc:d9:2a:30:5a:ff:0f:66:9a:82:0d:78:50:f8:64:
05:a5:ac:32:ee:e9:d3:a0:ff:8c:09:3d:07:95:75:91:a6:b6:
6f:b0:6f:63:c8:79:1a:a0:50:3f:d0:95:1d:f1:af:48:f9:ae:
76:09:b7:2e:9a:94:e8:48:82:07:b3:5e:44:15:44:ca:fc:5f:
01:cb:83:71:65:47:43:a2:9b:57:0b:73:57:d0:4d:60:4c:d6:
53:c9:37:80:bc:18:53:6c:5f:6b:20:8f:88:e1:d3:ec:d4:c3:
59:e3:63:7e:00:b5:90:c2:b4:4b:ff:21:69:5f:68:3f:90:cd:
7a:d5:90:35:ac:f5:54:ea:7d:41:cd:9c:b3:77:95:55:52:aa:
0c:cc:15:a5:a1:98:b2:29:cd:eb:e2:4a:56:a6:9c:6f:14:d0:
03:95:a7:9b:6a:10:07:ad:7f:73:0d:04:29:c4:7a:40:16:23:
fe:29:41:5b:3d:d5:c6:8e:9c:ee:ad:51:0e:05:54:f0:7a:db:
0b:de:39:c3:54:a9:5d:fb:85:0a:c3:ad:36:d6:36:bc:17:31:
4f:b9:47:37
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1REVG
RjlFMUE5N0Q0NkNDREMxMkY2MDZFRUIzOEEzRTY0REJDODFGMB4XDTIzMDIyMDAz
NTY1NloXDTI0MDIxNjA4MTEwNFowMzExMC8GA1UEAxMoMDMzODA4NzJERTk4MDhB
M0EyNjEyNDU4QTU0MkNFMTBCNUQxN0VFNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPcUzoRvRygHy6wgyyosr6NCGaCNo6KMQgAaTs+Q5svXqyuGeL4z
JkQG0+iXGyWIhUZgv3FBa3H0+t7vuiS95bdy2xtCd/ts17w8rncw8pBUSJA20Qys
Z7wxeOrPyc8SxhyIduU20QThrwi4zIaoA/InFL5LUF16OgpNLet6rtas4BQsQaFF
B7DWnXep9QhxxJhf7LiHQGKIPG6f50jv1KLzFobRgDib6BeaZRabbnXqXAC5QCgE
CakXl/tVembONRAIVa7ozYT+R+kjt3901wi/HRv/peZbvvIIyCNNQNQNGtjSmTBs
5b6dwyD89WdtF+lvpTG3RM+ETWyRA4UmVVECAwEAAaOCAiswggInMB0GA1UdDgQW
BBQDOAhy3pgIo6JhJFilQs4QtdF+5jAfBgNVHSMEGDAWgBRd7/nhqX1GzNwS9gbu
s4o+ZNvIHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQbVRieUI4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQ
bVRieUI4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDQwL0F6Z0ljdDZZQ0tPaVlTUllwVUxPRUxYUmZ1WS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQz4AAUwDQYJKoZIhvcNAQELBQADggEBACcAIAnlHFx4TL8kLNty
gDTBBKRYHwATZpnMb4wLUw1TkW9lHduN6rzZKjBa/w9mmoINeFD4ZAWlrDLu6dOg
/4wJPQeVdZGmtm+wb2PIeRqgUD/QlR3xr0j5rnYJty6alOhIggezXkQVRMr8XwHL
g3FlR0Oim1cLc1fQTWBM1lPJN4C8GFNsX2sgj4jh0+zUw1njY34AtZDCtEv/IWlf
aD+QzXrVkDWs9VTqfUHNnLN3lVVSqgzMFaWhmLIpzeviSlamnG8U0AOVp5tqEAet
f3MNBCnEekAWI/4pQVs91caOnO6tUQ4FVPB62wveOcNUqV37hQrDrTbWNrwXMU+5
Rzc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org