Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HrdYBHdGmWuYXc52l0HacskqbEk.roa
File: HrdYBHdGmWuYXc52l0HacskqbEk.roa (raw, json)
Hash identifier: odMTDuHhCysT25KroW/nBr5V3qxWKgcy6MHi4LYZ9mE=
Subject key identifier: 1E:B7:58:04:77:46:99:6B:98:5D:CE:76:97:41:DA:72:C9:2A:6C:49
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 017C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HrdYBHdGmWuYXc52l0HacskqbEk.roa
Signing time: Tue 30 May 2023 17:34:22 +0000
ROA not before: Tue 30 May 2023 17:34:22 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:3200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:34:22 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=1EB758047746996B985DCE769741DA72C92A6C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:ea:d1:87:a4:c8:4f:f1:5c:d8:28:2c:76:
8a:f9:a9:b8:7e:c7:17:fb:cf:8c:3e:a2:24:01:b5:
11:dd:f8:5e:28:9e:a0:91:82:45:26:bd:bf:8f:57:
9c:b2:f0:d4:68:48:ae:f4:f6:e2:63:c3:8e:cc:86:
54:d4:86:87:da:fb:a2:ac:e9:de:bf:15:28:af:b3:
34:84:a6:c6:de:4f:53:8a:2b:8a:6c:7a:28:38:f9:
ba:8f:24:a5:86:d8:31:37:36:7e:11:21:ea:f2:1b:
b2:6c:72:dd:3e:ef:63:39:e6:83:87:f6:b6:a2:92:
44:f2:b1:f1:27:c6:f5:a2:ef:ee:e5:8b:68:29:c6:
10:32:03:d7:68:25:23:8e:31:58:20:0c:e2:ae:62:
90:bd:ae:55:6b:fa:71:a2:8a:bc:73:56:21:47:a2:
4e:80:08:98:27:11:fb:37:75:fa:1d:f7:cc:d0:1a:
76:a8:0f:11:f1:66:69:64:c3:d9:97:2b:58:62:98:
65:03:e2:bd:08:ba:e7:cf:27:9a:51:0e:48:95:b1:
ef:62:c9:12:95:74:e4:99:2c:5d:8a:3f:85:bf:a4:
99:a7:a3:5a:23:3a:0e:bf:6c:1a:c4:43:d5:83:fb:
10:4a:a1:b9:c7:78:27:d0:a7:66:7c:1f:db:76:45:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B7:58:04:77:46:99:6B:98:5D:CE:76:97:41:DA:72:C9:2A:6C:49
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HrdYBHdGmWuYXc52l0HacskqbEk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:3200::/40
Signature Algorithm: sha256WithRSAEncryption
65:cf:28:db:8d:34:b4:ec:fd:7a:83:90:9f:73:23:92:2f:f7:
a0:4c:88:8c:52:fc:a5:7b:56:d0:c1:17:bf:dd:44:1d:0f:70:
80:1a:7e:1b:d9:89:b3:7a:2b:0f:ae:86:67:ae:a3:7b:22:af:
cc:3b:fa:6c:dc:f7:ff:be:ff:46:76:4c:fd:e2:75:3a:31:01:
7b:49:cb:99:01:96:69:2b:54:e9:a0:9f:44:83:7c:25:b1:8c:
f5:ad:32:4e:28:26:35:da:7d:40:a8:64:8c:80:0b:5b:0a:28:
92:cc:c9:17:6b:c2:7a:78:81:aa:23:7a:44:7b:9f:5d:aa:4b:
2a:54:bf:6f:fd:78:75:a3:a8:3b:96:ac:58:e4:7a:3d:15:5e:
bb:c3:75:3e:9b:48:3f:10:40:22:7f:5e:c3:1e:c2:7a:9a:b1:
18:62:00:c0:0c:61:3c:17:67:1c:c2:c6:34:b1:bf:f6:79:34:
1a:05:d9:9e:d2:94:4a:62:de:68:26:af:d5:c2:13:65:36:d8:
d2:79:a3:fe:51:6b:b9:c2:29:ba:ec:29:b8:21:63:5c:ce:74:
3a:11:4b:d6:63:78:33:b0:e4:bc:d4:03:97:7a:bb:65:2a:fd:
ab:e9:8b:52:53:4b:fa:75:69:47:55:61:1a:cb:ca:02:59:82:
ed:b7:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org