Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5QNgkp8eKQ21uEnwCzlV9KBfw4Y.roa
File: 5QNgkp8eKQ21uEnwCzlV9KBfw4Y.roa (raw, json)
Hash identifier: HKE7Nlrny1KUYHYCxG+JBkIsa1Mxv05y838eAo13YNA=
Subject key identifier: E5:03:60:92:9F:1E:29:0D:B5:B8:49:F0:0B:39:55:F4:A0:5F:C3:86
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 19
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5QNgkp8eKQ21uEnwCzlV9KBfw4Y.roa
Signing time: Mon 27 Mar 2023 16:42:20 +0000
ROA not before: Mon 27 Mar 2023 16:42:20 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:61:3800::/38 maxlen: 38
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 27 16:42:20 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=E50360929F1E290DB5B849F00B3955F4A05FC386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:be:8c:05:6a:ed:8a:75:45:cf:b9:b8:11:
0d:38:16:29:3f:09:3f:20:70:d3:f5:9a:dd:83:5f:
80:3c:d9:a6:5f:41:04:7d:44:9f:b3:64:d6:57:88:
d6:dc:7b:4b:e0:88:ff:fa:b8:1c:af:a0:d0:26:47:
40:2a:01:55:02:ae:77:8d:0b:b8:11:24:5e:74:7f:
b2:45:67:45:5c:a7:77:98:25:ad:83:fe:f8:39:e9:
6a:a2:9e:25:5c:35:f2:1d:11:93:b7:18:52:06:1f:
e6:03:f6:8d:7a:3b:98:7e:58:14:37:38:89:ae:d5:
a9:8e:88:49:e4:88:3f:f6:e2:14:1f:df:b4:ce:3c:
a3:f2:66:3b:bf:5b:7b:93:c7:37:fe:32:6b:09:ec:
ac:5e:8f:d1:ea:3f:7c:c8:2d:64:76:99:48:d7:5c:
53:d8:e2:85:87:fe:4c:ee:fa:a7:ca:b0:a9:a6:44:
8c:73:50:af:cd:8e:77:a2:ee:9a:30:d9:f0:da:f4:
b4:70:92:71:28:7c:bb:19:9c:3d:38:87:37:9f:39:
e7:ab:26:b1:1f:0f:68:05:ad:24:b3:60:99:9e:04:
28:94:a6:15:b1:33:a7:5f:05:51:ec:e3:93:41:42:
2a:0b:67:e5:e4:0b:2a:f0:9f:5b:01:8b:f5:fa:09:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:03:60:92:9F:1E:29:0D:B5:B8:49:F0:0B:39:55:F4:A0:5F:C3:86
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5QNgkp8eKQ21uEnwCzlV9KBfw4Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:61:3800::/38
Signature Algorithm: sha256WithRSAEncryption
63:7b:8b:70:d7:c2:b8:0b:a4:d6:fa:64:91:3e:57:c6:bb:c0:
84:b7:e1:c4:a9:70:44:2e:d8:df:3e:28:2c:ee:1c:cd:5d:72:
74:47:47:15:17:68:08:9e:97:b2:d6:d6:e0:a3:75:cd:8a:a1:
2a:0f:e6:40:32:5c:8d:6f:81:08:df:74:54:f5:ff:6f:73:59:
07:fe:1f:f1:4c:1d:08:9d:6d:99:8c:b3:65:c5:83:71:38:e0:
ab:eb:a5:ca:c9:de:29:f8:9b:58:d8:8a:94:74:4a:96:fc:85:
63:96:3c:82:c1:4c:69:a6:69:46:eb:5c:43:b7:8d:7c:54:49:
df:9a:56:2f:bd:9e:c0:5c:1f:15:27:9f:78:da:d5:b6:f6:b6:
a8:14:f3:f9:6a:4d:53:b5:e6:c0:93:a0:49:a9:28:f9:cf:d8:
d0:99:fe:d1:e2:9d:17:d1:3c:0d:77:14:48:93:af:01:2f:bf:
d2:16:6e:c1:4c:cc:73:d4:58:41:98:75:59:a3:f0:6e:25:df:
bd:d7:a1:bd:c5:38:d7:9f:a5:a9:0a:56:e3:27:6d:1f:a8:dd:
d8:4a:ac:cd:7a:4d:a4:ae:3a:9f:d4:a4:c6:81:0c:1a:9f:36:
3f:0b:4c:64:34:25:51:81:3e:2c:c7:9c:d0:8a:95:a5:26:98:
06:78:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org