Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1-L3Xl56Sd8VoZwoafg24PIJ8Lk.roa
File: 1-L3Xl56Sd8VoZwoafg24PIJ8Lk.roa (raw, json)
Hash identifier: GT0ha3WHxO1u1uJAoC9Rs1t6nEdCtDHE/FiF0y+lWnk=
Subject key identifier: D7:E2:F7:5E:5E:7A:49:DF:15:A1:9C:28:69:F8:36:E0:F2:09:F0:B9
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 017A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1-L3Xl56Sd8VoZwoafg24PIJ8Lk.roa
Signing time: Tue 30 May 2023 17:34:22 +0000
ROA not before: Tue 30 May 2023 17:34:22 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:f800::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:34:22 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=D7E2F75E5E7A49DF15A19C2869F836E0F209F0B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ec:73:bc:b2:1d:7c:dc:00:69:cc:52:96:c1:
e9:e7:90:3d:f0:c7:b1:57:4f:80:f0:18:34:96:22:
13:59:d4:08:70:2e:f5:22:c2:f2:4f:07:5d:49:59:
c0:53:d8:ac:06:e5:07:bf:b0:1d:e8:11:ea:b3:44:
ca:4e:5e:ca:ab:e1:0c:b7:8b:11:0b:af:34:21:7f:
c0:c8:81:fc:23:11:f0:06:03:a5:2b:58:26:e0:9d:
87:ff:54:b5:06:47:a9:b3:92:ab:d0:3e:e2:85:d2:
f5:c4:f8:ea:46:4e:0d:c3:a4:fe:5f:e6:08:d6:71:
08:b1:41:84:7e:8f:e0:ff:56:b9:fa:8b:4c:55:5a:
29:5b:6d:ef:26:de:eb:64:10:4c:b1:58:c2:d1:35:
15:c6:cd:f7:70:65:70:39:dd:34:1a:96:49:ff:79:
6a:7a:59:bb:f0:88:23:c1:1b:63:27:81:08:19:6f:
a1:8d:29:2b:e1:8b:14:4e:d9:14:7a:e2:fc:bc:b5:
6d:c0:18:76:f4:b8:30:e5:b8:8b:f4:75:57:82:15:
be:bc:c3:9b:de:d5:bd:8d:5a:0c:f5:92:db:a7:03:
dd:36:44:fc:b2:24:61:25:d1:b8:b6:46:5d:de:ef:
ff:85:40:92:f4:c6:bb:95:91:99:94:bc:2b:15:42:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E2:F7:5E:5E:7A:49:DF:15:A1:9C:28:69:F8:36:E0:F2:09:F0:B9
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1-L3Xl56Sd8VoZwoafg24PIJ8Lk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:f800::/40
Signature Algorithm: sha256WithRSAEncryption
14:56:77:8c:20:02:c4:3b:71:a2:20:47:8d:4a:35:cc:95:13:
bd:59:d5:7f:3a:d7:35:5d:6a:ce:c1:88:5d:0c:ae:bc:23:7b:
a7:14:84:5f:db:a1:34:76:e7:4a:67:1b:92:9f:db:83:5b:85:
bc:e3:39:43:bb:a0:46:53:9b:92:e2:3f:fe:29:7f:a7:97:05:
7f:02:58:e3:62:1c:86:43:59:a4:e6:7f:c1:7b:b2:d9:53:6c:
10:75:0e:df:df:61:10:89:60:47:2f:57:f6:13:01:09:85:67:
a2:e2:c9:29:71:bb:c9:9b:d4:6f:15:b2:1b:bd:4d:3f:4f:bd:
62:6e:dc:9c:80:9e:7a:af:56:5d:04:6c:6a:7a:54:14:65:59:
8c:b5:ad:f2:f3:f1:34:99:63:35:92:f7:f5:af:79:61:57:0e:
f5:35:70:28:55:16:57:98:e3:21:4a:cd:c5:cb:25:69:f6:56:
5e:0a:fb:88:e5:6f:6d:23:b1:a2:23:ac:e7:29:c6:55:19:2d:
b5:a9:d8:7c:b2:a7:5e:61:29:69:44:10:53:b9:4c:70:a2:e1:
11:6e:6f:34:90:af:d6:17:b2:53:6f:c7:62:2d:f2:4c:08:e7:
1b:ef:6a:99:5e:16:8a:22:f9:74:9a:30:76:03:bb:9d:9e:45:
da:18:a8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org