Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6ar6sZQ1LTUgBQNfDK9g7e77oQ0.roa
File: 6ar6sZQ1LTUgBQNfDK9g7e77oQ0.roa (raw, json)
Hash identifier: AUVy10aEYvcmphWK4yim+XyQJqe9H+KzpAGvdD+2iuQ=
Subject key identifier: E9:AA:FA:B1:94:35:2D:35:20:05:03:5F:0C:AF:60:ED:EE:FB:A1:0D
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 015D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6ar6sZQ1LTUgBQNfDK9g7e77oQ0.roa
Signing time: Tue 30 May 2023 17:32:30 +0000
ROA not before: Tue 30 May 2023 17:32:30 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:ff00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:32:30 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=E9AAFAB194352D352005035F0CAF60EDEEFBA10D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:8c:5e:85:31:e7:31:04:ad:fa:43:f1:73:
7b:90:ee:ae:9e:e8:b4:c5:ca:a3:73:43:af:b1:62:
4f:15:7c:8b:9d:2f:af:36:5e:9e:3f:92:7c:c9:b8:
53:af:aa:5a:cc:12:91:c2:2e:0d:7a:a7:ec:3e:d6:
f3:a9:8d:60:a2:54:1a:77:75:bf:30:63:bf:4f:bf:
06:80:a1:34:16:ba:df:23:d9:95:e0:7f:b2:1d:96:
6f:fa:4e:6a:fa:96:7a:22:53:ad:ae:c2:4e:d7:3d:
8e:c3:14:ec:9f:aa:c1:8b:29:64:e8:77:2d:a6:1e:
ad:1d:be:c5:b0:30:4b:bb:f0:5d:5e:8f:cc:38:40:
99:ab:e8:4e:ea:28:91:1c:ed:20:99:1f:04:12:cb:
f5:0e:b0:0f:d4:92:77:9d:22:5a:5f:13:fc:25:9e:
12:a2:55:55:bf:0e:6e:f6:e9:d1:36:e0:6b:95:4c:
c8:fb:13:0b:de:7d:22:fc:d4:de:d1:3f:f1:2e:f8:
31:8d:aa:de:33:be:ef:f3:30:91:55:99:2d:a4:6b:
7b:56:b4:7d:19:37:d5:57:62:b8:55:a7:bb:55:7d:
dc:13:e5:c0:97:5d:4d:45:c2:70:09:25:c0:94:4c:
bb:11:74:3b:68:50:5e:11:72:c5:f9:46:58:88:31:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AA:FA:B1:94:35:2D:35:20:05:03:5F:0C:AF:60:ED:EE:FB:A1:0D
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6ar6sZQ1LTUgBQNfDK9g7e77oQ0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
2b:9f:f0:b3:6f:2c:1e:50:9e:d8:4a:21:60:c5:33:d0:58:b5:
81:49:7a:9f:34:7d:8d:0d:8c:b3:83:bf:73:79:af:78:18:35:
9a:57:c9:d7:16:21:82:74:bc:93:cd:23:3d:4a:92:c0:7e:2d:
04:69:ea:5d:0e:d6:2b:d3:7c:91:b2:81:b5:f9:f1:3e:1e:be:
2e:f9:64:7e:cc:1f:ce:81:16:34:75:4d:ae:fe:55:05:9c:6c:
d3:09:c0:dc:10:6e:9b:32:d4:50:a1:20:0e:24:fa:a4:6e:32:
5c:b3:20:6b:fe:85:bd:d8:45:fa:46:55:a7:0e:bf:de:9b:9d:
9c:ce:c3:82:c5:36:6b:01:f0:2b:97:30:65:aa:dd:1a:e8:fa:
a8:4a:e0:92:cc:25:6d:9b:b8:69:2f:4a:3c:68:cb:d4:ff:ee:
30:a0:5a:14:f7:8a:57:6d:e8:c3:d2:83:c3:1f:23:b4:f2:8b:
3c:60:aa:ab:2d:67:87:66:14:8b:cb:f7:41:a1:06:3f:72:e1:
38:c6:50:34:f2:a0:27:0e:1f:83:0e:62:7c:79:c6:a5:ef:35:
39:5d:ff:49:34:eb:60:0a:08:77:2f:32:87:25:aa:06:cd:22:
a7:bc:04:fe:c4:84:c8:e0:ac:ec:60:4f:c2:71:58:cc:ea:60:
c6:25:70:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org