Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/K2aMDRMt7yAJY0cfH-2qsJQWHsE.roa
File: K2aMDRMt7yAJY0cfH-2qsJQWHsE.roa (raw, json)
Hash identifier: OB7pz/aqW6PE+WF7RDC+dM8bFflZGgVGQ0t0xF+Xx5M=
Subject key identifier: 2B:66:8C:0D:13:2D:EF:20:09:63:47:1F:1F:ED:AA:B0:94:16:1E:C1
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0241
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/K2aMDRMt7yAJY0cfH-2qsJQWHsE.roa
Signing time: Tue 30 May 2023 17:42:31 +0000
ROA not before: Tue 30 May 2023 17:42:31 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:1500::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:42:31 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=2B668C0D132DEF200963471F1FEDAAB094161EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:91:8b:69:b2:36:3f:bb:53:73:68:11:f0:
ae:ed:a5:c7:09:8e:b5:ba:e5:c9:a5:aa:09:e4:ef:
09:e7:1a:63:b1:a2:6c:50:44:3f:98:c4:4c:f8:ff:
5a:cf:7a:77:cd:21:5d:18:37:62:6c:a5:da:54:43:
d4:b4:68:a5:eb:c0:54:4d:87:b6:49:16:ea:65:25:
fc:7c:c8:06:9f:16:f0:17:6d:dc:13:21:ad:b6:78:
22:0a:06:1c:ea:ce:7d:ef:53:e2:7b:47:d5:87:6b:
2b:c5:a3:57:17:dc:d2:6d:fd:f1:3c:18:41:60:ab:
7d:6f:c8:a7:48:d7:91:b9:fa:16:85:8c:23:b0:7b:
05:ec:74:4d:80:53:a1:90:74:40:00:56:01:22:4d:
d7:36:f7:81:b3:6d:c5:03:8a:c0:6a:c9:c6:ce:0a:
a4:ff:6b:75:29:b5:8a:f0:aa:e8:bd:99:c9:a7:ef:
11:bc:b4:46:37:ef:5f:4a:bb:1b:34:77:0f:4d:c0:
52:87:94:86:8a:2b:b0:81:cf:77:9c:9b:d9:57:b6:
97:a0:7c:2b:a1:6e:40:7d:43:70:26:dc:ae:29:64:
2f:04:72:88:65:b9:c1:3f:14:f4:87:04:ca:1e:48:
42:8d:a2:dd:cb:36:3d:ec:cc:48:6c:f7:9e:a8:45:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:66:8C:0D:13:2D:EF:20:09:63:47:1F:1F:ED:AA:B0:94:16:1E:C1
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/K2aMDRMt7yAJY0cfH-2qsJQWHsE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:1500::/40
Signature Algorithm: sha256WithRSAEncryption
4e:aa:68:02:f5:22:f9:41:03:5b:db:79:6a:04:fd:39:f2:5a:
4f:38:9f:74:19:93:b9:c7:88:7b:2a:26:ef:c3:fb:da:f4:45:
43:83:9a:54:94:17:ce:d7:45:d5:66:6e:30:17:e5:a9:fc:9e:
fc:da:dc:ee:7c:bd:2b:f6:51:1f:64:33:9a:48:aa:ab:0a:62:
91:59:5d:00:5d:e2:3c:ce:db:f8:61:cd:7b:48:ea:0b:4e:90:
83:07:0b:b4:bb:83:1e:a4:d9:01:e1:d6:b3:18:75:d6:35:d0:
82:ca:ad:aa:a4:da:bd:a9:5f:3c:d8:7d:2c:cb:9c:10:9e:46:
74:0f:46:be:74:88:ab:80:65:6f:19:1b:41:e5:14:d1:f3:09:
8f:dc:44:1b:9c:ea:34:f4:a9:6b:72:f9:ee:86:58:c4:5e:a4:
e4:83:ff:8a:31:13:09:d4:6b:b0:9d:a0:b5:06:23:07:5e:4f:
9e:82:1a:33:c2:74:f0:17:86:f4:82:47:81:9f:1e:43:43:96:
af:a4:b0:ba:09:f5:c5:3b:00:9b:cd:d0:82:b7:99:70:41:25:
36:54:d8:4f:83:90:97:4c:f2:eb:25:c0:16:bc:1b:cb:1a:60:
97:25:e4:19:65:36:07:d1:07:ce:70:9b:f0:7c:2e:11:c7:08:
b2:d9:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org