Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NcOXe1G15-j3cDnfoRIRwJHRTLg.roa
File: NcOXe1G15-j3cDnfoRIRwJHRTLg.roa (raw, json)
Hash identifier: HWwUMXfcGCRUkIksEfH7iLISpRmMdcdoIik+Qlg5RNY=
Subject key identifier: 35:C3:97:7B:51:B5:E7:E8:F7:70:39:DF:A1:12:11:C0:91:D1:4C:B8
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 01FA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NcOXe1G15-j3cDnfoRIRwJHRTLg.roa
Signing time: Tue 30 May 2023 17:40:20 +0000
ROA not before: Tue 30 May 2023 17:40:20 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:e900::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:40:20 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=35C3977B51B5E7E8F77039DFA11211C091D14CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4d:11:d8:76:c6:1a:b4:39:e3:a3:e4:b7:ee:
9c:82:3a:9d:2c:78:ff:db:cc:ce:6a:bd:10:da:0a:
15:5f:e5:16:af:55:59:c2:ea:0a:2a:ea:02:cd:ee:
e7:90:55:d2:f7:38:43:e4:89:be:cf:c1:a9:fb:87:
3e:d1:b6:d0:fa:e5:3b:e9:4b:cf:48:ca:66:7d:35:
61:3a:24:40:7f:66:bc:75:24:b2:db:ad:2e:d9:95:
89:cb:b6:c6:b3:0e:bb:a7:0b:bf:fe:be:0c:b6:76:
3f:ad:55:f2:dc:3e:10:0b:74:2e:f2:85:8a:18:78:
89:e8:af:ac:15:de:f6:47:cb:68:7e:e2:94:b7:69:
5c:01:54:7d:7b:f6:b5:89:e5:85:26:af:27:ae:34:
73:92:41:1e:91:5e:79:7b:7d:7d:f5:e1:ab:98:2d:
08:07:d5:ff:22:25:f1:8e:6b:0e:1e:b6:c8:f0:18:
82:6a:26:91:b0:85:fc:ab:45:ee:a6:6d:d0:16:d5:
99:e1:c7:0a:ed:c4:0a:10:78:3a:24:18:2b:9d:ff:
a7:38:3e:aa:56:80:d7:90:cc:d3:bc:af:51:60:4e:
d3:09:29:97:cf:c1:6b:c6:25:d9:2b:77:97:df:5e:
56:2e:65:cd:6e:4c:fa:ff:20:ff:c9:89:bc:cd:63:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:97:7B:51:B5:E7:E8:F7:70:39:DF:A1:12:11:C0:91:D1:4C:B8
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NcOXe1G15-j3cDnfoRIRwJHRTLg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:e900::/40
Signature Algorithm: sha256WithRSAEncryption
3e:48:8f:76:a9:18:1f:29:9c:3b:fb:19:03:95:de:50:cb:66:
90:bd:fc:a4:c9:a9:1b:b4:f1:27:01:6d:cb:af:d5:31:b6:fb:
70:33:ee:9d:99:25:59:e9:42:a4:28:44:e6:9c:d5:9d:67:54:
86:2e:d8:a4:d3:ec:ba:3d:ee:97:e6:de:2b:f4:4d:e2:d3:e1:
92:0b:91:fd:25:79:9c:5e:36:86:05:88:b3:46:21:74:05:67:
62:40:dd:ac:13:c9:e4:39:67:8e:b9:9d:de:bd:a1:56:2b:d2:
d3:06:54:a9:c6:70:a8:04:83:e7:0f:d7:00:79:cc:c4:73:02:
48:06:a3:d9:28:b2:58:44:df:05:15:8e:8b:57:ca:2a:24:5c:
af:e1:f5:f6:e7:4d:58:23:37:99:c7:bc:3c:b0:7a:a2:49:02:
35:a3:c4:c3:7d:bd:57:f5:9d:06:95:4d:8c:d5:07:aa:df:77:
42:d6:8e:fb:31:f7:4e:da:9f:a8:c9:6a:8a:0c:3b:34:ba:b5:
60:a6:59:6e:b4:2c:7d:e0:b6:de:1a:86:9e:09:83:91:59:94:
ca:bc:5d:41:0a:b0:12:3c:d1:54:5b:84:02:c6:3c:01:fa:16:
18:a1:8d:a4:b3:9c:65:c6:55:43:6f:f7:43:bf:74:ed:4e:5c:
e3:7d:2f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:12 2025 by rpki-client