Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DNkJprSjx2Q_spPak7kdJKWhApw.roa
File: DNkJprSjx2Q_spPak7kdJKWhApw.roa (raw, json)
Hash identifier: 2uzgC+IeA+sVQsS4/VLIrj0B1BnYRrH5hJJL1hydh6w=
Subject key identifier: 0C:D9:09:A6:B4:A3:C7:64:3F:B2:93:DA:93:B9:1D:24:A5:A1:02:9C
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 018D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DNkJprSjx2Q_spPak7kdJKWhApw.roa
Signing time: Tue 30 May 2023 17:34:28 +0000
ROA not before: Tue 30 May 2023 17:34:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:61:1e00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:34:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=0CD909A6B4A3C7643FB293DA93B91D24A5A1029C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:b2:bc:aa:e3:54:a0:99:a8:96:b4:74:83:
68:cf:07:1e:40:e2:3c:17:a8:73:e5:e1:f0:09:15:
e7:16:9f:51:f6:e4:0a:4c:73:8e:69:b8:93:e2:11:
9c:d8:c1:d6:69:c4:a5:e5:3b:7a:0c:7f:36:94:06:
a3:7f:af:a6:b1:8f:60:bd:ae:56:c6:d5:82:5b:f7:
1a:dc:e5:ff:14:d4:e9:d2:de:1a:ff:f8:8c:ee:df:
96:e4:f8:0c:5d:44:21:22:5a:62:1f:d0:21:84:c0:
d3:f9:ce:f4:35:13:ae:21:ae:90:89:c9:f8:bb:03:
29:8a:30:1c:82:40:5c:70:96:e0:b9:b5:c6:d6:e0:
3d:0f:c6:0f:1c:8f:4e:45:72:69:9f:76:e9:8d:51:
40:90:17:65:a9:16:d9:79:b6:2e:28:f7:39:8b:97:
ec:a2:a7:cf:66:5f:54:3b:0c:ca:9a:c8:20:fb:53:
7a:94:53:2c:4a:4f:fb:a9:48:b9:55:d6:bb:0c:31:
3b:db:33:22:1d:78:5b:7a:09:42:41:f5:00:56:fa:
6c:ff:1a:b9:4b:d0:7a:60:db:ce:25:83:4d:14:e5:
25:87:e9:a9:2c:f9:dd:f3:a2:6f:86:dc:76:f3:d0:
39:8d:cd:0b:0e:a6:2b:02:28:e2:19:e2:a8:3a:2e:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D9:09:A6:B4:A3:C7:64:3F:B2:93:DA:93:B9:1D:24:A5:A1:02:9C
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DNkJprSjx2Q_spPak7kdJKWhApw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:61:1e00::/48
Signature Algorithm: sha256WithRSAEncryption
81:ac:62:7a:ae:95:7a:4b:ba:90:3b:a8:28:d1:53:40:e3:c5:
c9:0c:bc:84:b7:d1:20:e2:0a:66:45:b4:c4:f8:57:58:87:9b:
c0:0b:73:68:78:ac:c1:89:ae:33:6e:a5:14:e0:90:74:b5:c0:
3a:14:cc:ec:89:4a:04:24:88:dc:72:88:0c:16:9f:f0:e3:f8:
5b:93:20:8d:50:28:5b:48:10:8e:ee:bb:cd:fb:77:c1:13:d9:
59:79:d2:e9:42:d5:99:2f:3c:c3:8c:90:02:86:28:27:33:c6:
ae:c3:b0:9f:1c:7f:d9:43:97:c4:55:96:06:aa:d3:6e:6c:ba:
5b:e6:a4:d3:83:be:59:25:64:8f:82:16:17:e6:76:0e:39:63:
b7:2f:5a:03:68:be:82:74:1a:e9:ed:08:14:29:28:79:42:c0:
86:27:72:5f:ef:2a:b4:aa:ca:c1:92:33:41:26:f8:cd:e4:20:
73:e6:5e:a9:d6:87:a4:5a:aa:44:a2:b6:e6:36:17:61:3a:b7:
8b:47:04:fd:fe:73:cf:29:3d:26:3a:09:a8:9c:d4:e5:7c:cb:
5f:b7:69:3e:1c:ae:30:71:e4:ee:43:4b:d7:68:31:62:5f:d6:
98:b5:21:04:4d:47:0a:e2:8f:7c:06:8b:45:43:59:e3:08:c2:
06:62:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org