Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KrbwQ4GiLaivaXYH-1hA9uaQcko.roa
File: KrbwQ4GiLaivaXYH-1hA9uaQcko.roa (raw, json)
Hash identifier: h4PYc0BVG/XDMA8w8ykcLJu47x7UjL+uwcIHxgGNOF0=
Subject key identifier: 2A:B6:F0:43:81:A2:2D:A8:AF:69:76:07:FB:58:40:F6:E6:90:72:4A
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 01BC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KrbwQ4GiLaivaXYH-1hA9uaQcko.roa
Signing time: Tue 30 May 2023 17:36:32 +0000
ROA not before: Tue 30 May 2023 17:36:32 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:1e00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:36:32 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=2AB6F04381A22DA8AF697607FB5840F6E690724A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:19:5d:2e:62:34:f5:22:ff:dc:93:05:6d:
ea:47:c5:28:4b:0d:53:90:61:35:9b:1b:92:01:42:
5b:56:12:c6:c6:72:46:0c:df:75:85:ad:7c:eb:6c:
ba:01:88:14:7d:4d:02:ce:77:a6:65:bb:49:aa:95:
36:fe:b9:26:15:a9:75:f5:e6:e2:ba:01:dc:49:ce:
2b:4c:52:64:53:76:ab:d8:70:b8:74:41:93:11:5e:
54:f1:6b:2b:62:f6:fa:ed:e0:77:48:e4:f4:61:92:
89:f8:a6:37:8c:8e:22:96:d6:c7:cf:4c:30:0d:98:
03:74:23:c6:bc:0f:2b:fa:cd:91:5c:b2:f0:8f:0c:
e5:0f:2e:e3:2e:6a:50:82:80:f6:74:11:83:81:eb:
72:fc:f9:62:8a:7f:3a:e6:e8:69:23:82:61:08:9c:
50:ac:8c:b5:02:aa:4c:cd:7a:10:ce:36:23:69:84:
6d:a3:3b:1c:5a:f8:d0:3b:2b:f9:ff:1d:ac:7d:47:
40:5f:cd:8d:89:62:6c:8b:bd:42:5c:1a:99:73:4c:
4e:98:37:cf:71:dd:7d:0f:35:e2:50:b3:5d:7a:3a:
5d:f5:2f:51:33:c5:53:de:99:9d:fa:53:89:86:73:
f4:57:8c:e1:26:84:d5:7b:ad:d8:0e:e1:61:c2:1b:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B6:F0:43:81:A2:2D:A8:AF:69:76:07:FB:58:40:F6:E6:90:72:4A
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KrbwQ4GiLaivaXYH-1hA9uaQcko.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:1e00::/40
Signature Algorithm: sha256WithRSAEncryption
90:b5:8f:ac:d2:e1:34:5f:c8:48:7c:c8:b7:fb:88:6b:a5:db:
61:a2:83:bb:fb:a3:ca:45:6f:87:74:6c:62:fa:6b:85:0e:58:
4c:c3:f4:a7:ad:8b:45:46:a1:c7:b6:33:6d:f1:39:8a:bc:67:
b1:56:fa:3b:2f:eb:e2:2e:89:30:46:16:39:7a:dc:9f:b7:c1:
1d:de:e5:75:37:aa:42:ce:84:81:b6:db:c8:f2:82:61:f8:58:
2a:b6:5d:28:99:1f:fd:b3:c5:2d:a2:29:ac:5b:d8:c3:be:39:
90:72:59:0b:be:79:0e:0e:83:48:99:1a:9b:8a:c2:77:ab:01:
af:db:36:2b:0f:3a:79:0a:78:76:a4:ae:24:0d:ad:ed:09:72:
d4:8d:a1:1e:09:11:50:ab:a6:62:4d:df:a8:da:da:e6:b0:4a:
c4:2f:ac:f8:39:02:7c:35:4a:e7:84:8d:ab:d3:95:63:b0:40:
a5:1f:2e:6c:8e:5c:44:61:a6:4d:64:ea:a2:ff:73:76:2f:9c:
b5:24:0f:27:97:9e:09:c9:25:6d:0a:24:ae:47:d3:a3:85:7f:
a8:07:4f:00:cb:a7:fd:92:84:a4:e6:c9:dc:29:6b:78:5b:32:
26:e7:23:9d:56:d4:93:80:58:14:f1:fd:54:79:79:c6:9b:1a:
1f:89:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org