Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30099/bAj_4R-1M5S9aPtHDQwUZ_f9PnQ.roa
File: bAj_4R-1M5S9aPtHDQwUZ_f9PnQ.roa (raw, json)
Hash identifier: +/4vs8ufD1AhwCE+u1nXeRmQHqj7S4FuiyAL3AqkHuI=
Subject key identifier: 6C:08:FF:E1:1F:B5:33:94:BD:68:FB:47:0D:0C:14:67:F7:FD:3E:74
Certificate issuer: /CN=D6B98D9AE608D1E060709B960EEF133AF2B81351
Certificate serial: 2E
Authority key identifier: D6:B9:8D:9A:E6:08:D1:E0:60:70:9B:96:0E:EF:13:3A:F2:B8:13:51
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/bAj_4R-1M5S9aPtHDQwUZ_f9PnQ.roa
Signing time: Thu 13 Apr 2023 09:54:25 +0000
ROA not before: Thu 13 Apr 2023 09:54:25 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10021
IP address blocks: 2400:1000::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6B98D9AE608D1E060709B960EEF133AF2B81351
Validity
Not Before: Apr 13 09:54:25 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=6C08FFE11FB53394BD68FB470D0C1467F7FD3E74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:00:f4:2d:33:84:b8:dd:a6:61:72:01:3b:
b1:50:9c:f3:15:65:66:85:38:66:3f:33:db:61:b1:
65:08:f6:5b:f4:a5:4c:c0:17:45:79:b0:f6:ee:43:
ba:bb:49:47:9f:56:49:c8:ed:88:e9:2c:ed:d6:35:
ec:a9:e8:b6:26:47:f1:d3:72:8e:f5:b0:f2:1f:1f:
48:dc:c4:fe:70:c2:03:3a:f3:fe:a8:4d:ca:da:3a:
e9:ae:9c:29:07:62:81:36:3d:de:92:0a:35:97:11:
8a:fa:77:9d:08:4c:3e:90:55:94:79:70:70:f4:61:
09:12:81:cc:d9:44:bf:a0:72:a6:4d:11:a9:64:bd:
64:3d:f5:25:30:94:45:41:64:8d:d9:c5:3a:09:c5:
eb:51:3c:c7:64:bf:80:a5:00:9f:53:c9:9d:4a:b7:
72:d5:27:60:a2:08:33:34:51:e7:75:08:ec:69:aa:
ee:87:d2:67:86:9f:52:da:cb:46:de:e7:41:a3:79:
80:fa:a6:eb:d9:09:b6:52:82:dc:bc:a2:26:9d:27:
21:75:b6:8b:c4:26:7c:14:8d:da:ad:0c:8e:30:e7:
1f:ee:45:0f:40:f9:bb:e7:fe:ac:0e:95:a2:c8:7e:
27:f3:7d:b7:35:61:87:df:50:0f:10:d8:05:e3:39:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:08:FF:E1:1F:B5:33:94:BD:68:FB:47:0D:0C:14:67:F7:FD:3E:74
X509v3 Authority Key Identifier:
keyid:D6:B9:8D:9A:E6:08:D1:E0:60:70:9B:96:0E:EF:13:3A:F2:B8:13:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/bAj_4R-1M5S9aPtHDQwUZ_f9PnQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:1000::/32
Signature Algorithm: sha256WithRSAEncryption
95:d7:f0:58:1b:fc:91:c3:93:38:66:fe:31:9e:7d:32:c2:7c:
c3:e5:2d:56:09:5c:64:e9:1c:55:99:ba:62:4a:3e:6d:b3:43:
58:75:6e:b2:ca:de:c7:ae:7f:19:92:46:71:ac:93:12:9f:b2:
26:1c:59:72:fd:19:b9:b8:d5:bb:62:b2:4e:c3:13:00:01:43:
7c:d6:d6:25:a8:8b:4e:d1:b4:ef:61:16:50:eb:99:90:ec:81:
0a:97:db:7a:d1:1d:e0:97:e4:fe:4e:ca:82:a0:cb:f4:12:25:
61:c4:9e:9c:fb:44:29:c6:76:8b:ca:c7:48:ad:07:86:63:e5:
6b:67:c8:3b:24:a1:77:be:a9:44:37:15:2d:52:b9:cd:46:ad:
47:26:7d:f1:0a:88:3e:9b:b3:38:b9:85:bb:e1:82:79:fa:c7:
d5:b1:c0:2b:d8:0c:a8:31:c6:54:37:9f:ac:b2:31:60:83:5b:
4b:3d:9d:13:02:fe:45:99:7c:1f:85:30:99:05:b9:5b:92:2f:
26:80:6a:0d:70:28:86:a3:96:bd:92:84:ad:31:8d:ba:2f:d0:
cc:f5:5c:d2:39:c5:9b:20:31:ac:81:f7:be:7d:be:97:cd:80:
22:ca:dd:93:9d:e9:88:ce:e7:80:76:ff:aa:c9:bd:2c:ba:90:
41:f7:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org