Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Hc1M0PuTonjN8qtZ1yNRb98jW-Y.roa
File: Hc1M0PuTonjN8qtZ1yNRb98jW-Y.roa (raw, json)
Hash identifier: qOJfh10l7tuEIeR93ot+rAKEhDfiTtb06o+5TblOfd4=
Subject key identifier: 1D:CD:4C:D0:FB:93:A2:78:CD:F2:AB:59:D7:23:51:6F:DF:23:5B:E6
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0200
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Hc1M0PuTonjN8qtZ1yNRb98jW-Y.roa
Signing time: Tue 30 May 2023 17:40:22 +0000
ROA not before: Tue 30 May 2023 17:40:22 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:b300::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:40:22 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=1DCD4CD0FB93A278CDF2AB59D723516FDF235BE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:8e:c6:9d:3b:a6:4e:d4:fb:d8:ec:b5:0c:
69:63:15:3f:03:29:bd:da:57:03:65:d1:34:41:7c:
f1:ea:72:b5:98:f7:43:a8:b7:bf:5e:81:df:df:c6:
61:49:a5:46:7d:d5:e6:ca:bd:ff:cf:eb:8d:58:4f:
44:0d:56:43:5d:2c:b7:71:c7:1c:b3:cb:6d:b3:2c:
99:af:fd:d2:89:b7:f0:f3:da:af:01:89:53:3e:71:
8f:14:63:90:b1:d0:0b:80:cd:02:94:34:91:de:2d:
f7:3d:ff:79:d1:70:78:68:25:f1:68:ff:cb:aa:5b:
6e:b3:be:fc:81:a6:b8:9c:2f:c1:fb:f7:b7:89:68:
a1:51:fa:d8:31:a4:f3:5f:45:84:8f:38:06:fa:d6:
4e:75:db:7e:cd:98:44:a3:a5:db:82:68:ec:ae:cc:
78:9d:c4:24:c8:e2:47:18:b1:8e:bd:ac:02:71:b2:
da:f1:89:9a:24:9d:3c:95:6a:8a:e9:72:bb:91:cf:
fb:26:5d:1a:5a:34:07:1a:5f:2c:81:b2:ce:f3:33:
36:83:03:d5:47:ae:fe:f3:88:6a:80:e3:3f:e3:97:
d1:de:cf:56:cb:77:66:4c:69:01:1c:c7:a4:e2:4f:
c7:fc:e8:4b:81:cb:47:f7:2f:30:47:5f:a5:e2:e2:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CD:4C:D0:FB:93:A2:78:CD:F2:AB:59:D7:23:51:6F:DF:23:5B:E6
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Hc1M0PuTonjN8qtZ1yNRb98jW-Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:b300::/40
Signature Algorithm: sha256WithRSAEncryption
5a:3f:4c:96:e5:e7:60:be:ed:e9:e1:4d:e3:08:56:96:9e:3f:
a5:ce:76:80:51:21:f8:32:38:44:e4:d1:c4:77:2b:98:3f:33:
d7:93:73:6e:08:8a:05:91:c7:70:8a:16:8e:1b:dc:78:b0:e1:
18:e3:6b:b7:4b:05:45:8d:7c:a7:d3:ad:80:36:20:5f:8b:ee:
65:00:82:5e:cb:24:22:f7:81:66:3c:a5:43:de:a7:ee:e3:07:
0a:5a:ea:9f:88:c1:4c:78:e8:07:ca:31:fc:05:12:57:41:bd:
d4:57:33:14:4d:1f:c5:95:a1:07:9f:fe:ea:ea:7c:c7:5e:06:
bb:ce:9b:47:38:89:df:1e:a5:3c:c9:73:7b:1d:24:aa:91:45:
be:f2:97:bd:66:af:c0:1e:89:88:55:0d:11:d3:fb:49:0a:cc:
84:d3:a6:19:b9:86:ed:b5:db:87:9a:a2:d8:a7:96:5d:6c:5b:
a8:11:bf:83:a2:f8:f7:6d:e2:7c:3f:56:8a:66:ca:5e:e3:ea:
be:eb:a2:cd:a2:1b:e0:07:a0:3f:5b:f0:71:c7:df:63:0b:00:
09:96:85:9f:21:76:60:0a:25:3a:03:6c:17:c5:d0:04:bd:7b:
8a:dd:36:2a:12:30:69:48:d9:a6:67:d1:66:27:2a:22:59:dc:
ee:78:31:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:26 2025 by rpki-client