Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Cq0YjoFpqVm5Z4kFbVDrUJQxt7I.roa
File: Cq0YjoFpqVm5Z4kFbVDrUJQxt7I.roa (raw, json)
Hash identifier: UaJS4O7inhd8WwMcYmb/6Pl+afiNgrBVowta4sj0Wl0=
Subject key identifier: 0A:AD:18:8E:81:69:A9:59:B9:67:89:05:6D:50:EB:50:94:31:B7:B2
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 01EE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Cq0YjoFpqVm5Z4kFbVDrUJQxt7I.roa
Signing time: Tue 30 May 2023 17:38:32 +0000
ROA not before: Tue 30 May 2023 17:38:32 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:ac00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:38:32 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=0AAD188E8169A959B96789056D50EB509431B7B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:d1:56:40:0e:b8:1c:3f:73:9d:1d:47:3d:
5b:93:3f:57:ed:1c:80:c4:10:9b:cb:f9:83:e1:ff:
b5:3c:a3:43:d7:b4:8d:f2:63:91:eb:fb:2f:33:84:
fe:cb:f2:66:09:5c:7a:19:3f:9b:d6:a5:88:e6:80:
40:36:53:7f:7a:4d:ef:b8:c9:2e:b6:ba:17:91:2c:
0c:dd:91:2d:db:b1:8e:71:f2:a9:77:68:fb:ec:87:
cf:24:46:5f:fb:70:bd:b2:60:b5:01:cf:23:26:7c:
a4:82:3b:37:d4:a7:a0:da:71:97:ad:a1:2d:fa:8a:
2b:c1:da:d3:30:1a:9c:a0:98:c4:f3:fe:94:58:10:
a2:b8:95:b7:6f:dc:d3:d0:67:04:52:7a:a0:66:68:
66:d1:bd:77:05:25:a5:65:08:de:3c:87:6a:04:79:
4d:cf:ca:96:0a:71:8d:fc:81:68:3d:13:f3:37:90:
23:ec:7f:dc:e8:ed:aa:ef:7d:0e:75:af:30:af:e7:
6b:a1:5c:c2:8a:32:d7:c1:05:7c:5f:54:a7:d1:9c:
6b:5b:18:76:2c:f7:24:70:0a:e8:7d:15:d8:49:75:
44:a6:61:bc:fb:22:a1:c1:af:1a:c1:04:06:ce:ff:
f3:cd:d3:de:f0:11:e5:f9:88:18:0d:06:29:3d:4b:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AD:18:8E:81:69:A9:59:B9:67:89:05:6D:50:EB:50:94:31:B7:B2
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Cq0YjoFpqVm5Z4kFbVDrUJQxt7I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:ac00::/40
Signature Algorithm: sha256WithRSAEncryption
b0:5f:8c:03:69:b7:a0:91:81:1c:c0:b9:5c:48:28:b8:66:ed:
ce:b8:f3:ee:df:bf:98:35:d2:38:76:4e:21:de:9c:62:c3:13:
fa:d9:42:90:17:07:59:08:f4:c3:3a:a7:44:02:c7:f7:94:bc:
bd:ec:7d:22:e0:95:f9:80:29:eb:18:b0:35:4d:b1:ca:6d:ca:
84:e6:05:28:f8:35:11:43:70:06:97:86:8f:70:9b:43:95:f1:
c2:72:a9:28:12:bc:14:be:05:83:1d:08:32:a1:6f:51:ad:1b:
13:42:bb:c6:ba:e0:e9:2e:36:ce:28:34:21:cd:eb:59:96:76:
45:ef:fc:ef:fa:4e:48:4e:90:a9:28:19:65:06:ba:58:a9:24:
75:a0:00:a1:c5:e4:c7:7c:f2:72:1a:02:c6:40:2b:7e:32:71:
3f:72:3c:06:db:9a:32:9f:f4:18:47:c5:75:26:8d:60:34:db:
ae:3c:eb:ac:4e:13:8e:b5:79:ce:28:de:5d:79:e1:b8:1e:ae:
5e:67:ea:06:7a:34:4a:8d:4f:e0:72:10:82:11:33:db:5f:2d:
5a:b8:5a:3d:33:8d:cb:4c:92:bc:1e:d6:c3:28:1f:4e:d0:f3:
ec:dc:d5:e7:e2:83:a5:d0:a8:ce:9e:6e:19:41:d8:8a:fc:66:
64:f5:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org