Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OKfE2FYC55AtnYGrkJ9lKdydoMQ.roa
File: OKfE2FYC55AtnYGrkJ9lKdydoMQ.roa (raw, json)
Hash identifier: LaLZkySlUZ7aj1e6qWBWHcM62bGl8hyXPaID4T58zCk=
Subject key identifier: 38:A7:C4:D8:56:02:E7:90:2D:9D:81:AB:90:9F:65:29:DC:9D:A0:C4
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0239
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OKfE2FYC55AtnYGrkJ9lKdydoMQ.roa
Signing time: Tue 30 May 2023 17:42:28 +0000
ROA not before: Tue 30 May 2023 17:42:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:4d00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:42:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=38A7C4D85602E7902D9D81AB909F6529DC9DA0C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:7a:3b:38:bd:5f:2c:ab:42:d1:73:97:75:
4e:53:99:44:c1:4e:01:1e:03:31:1a:80:b8:74:46:
af:b0:c8:0e:41:6c:6a:c5:81:be:8e:69:aa:2d:fe:
a6:fb:ac:0b:98:fa:b5:c5:cb:fd:5f:c8:0d:ea:70:
04:a6:55:82:1a:06:12:ca:8f:d3:cb:4e:d5:fa:b3:
a7:a6:f2:02:73:1a:ac:4b:87:15:38:1e:19:f3:66:
5b:bf:90:3e:e0:4b:3e:f7:40:56:44:57:0c:40:c7:
09:f6:6a:e3:6b:c1:7d:9d:bb:80:4a:85:5f:4c:06:
47:64:2d:32:30:b0:b5:f7:91:d8:f6:c3:59:1d:7c:
9f:23:a0:73:dc:1d:19:cb:62:08:fb:cc:fb:ce:b8:
fa:90:0f:db:77:7e:e6:62:8f:a1:29:bf:5f:46:ba:
fa:b0:02:47:e4:c7:a0:f2:3f:3a:67:f5:86:54:cb:
7d:da:42:63:76:d0:13:88:77:90:a7:05:34:a1:b6:
8e:d4:35:02:b9:36:16:73:1c:83:56:0a:c5:55:61:
21:dc:5b:0a:83:6e:e8:f0:30:9b:e7:20:21:05:ac:
49:91:54:d3:74:89:77:f9:24:f3:55:1f:b1:5d:f8:
2a:e8:81:d4:8c:76:35:cc:f8:e0:33:b4:c2:d1:8b:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A7:C4:D8:56:02:E7:90:2D:9D:81:AB:90:9F:65:29:DC:9D:A0:C4
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OKfE2FYC55AtnYGrkJ9lKdydoMQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:4d00::/40
Signature Algorithm: sha256WithRSAEncryption
5a:cf:b2:3d:98:90:76:eb:ae:0b:a7:03:76:9b:e9:40:27:3a:
b2:b7:b8:94:fe:d7:08:60:b4:55:48:6e:91:6d:03:66:8e:d4:
15:78:f0:2d:14:33:41:72:13:e1:f1:9b:17:c7:5f:74:56:36:
54:40:63:42:0a:ec:07:2f:21:ce:c4:21:64:32:51:5a:c0:2d:
45:c9:73:85:03:cb:54:4a:bc:e7:ce:12:ab:ce:af:2c:75:1d:
b6:1a:03:f3:04:c9:d1:e6:24:62:0b:48:f1:0e:2b:f5:ee:2c:
c7:ee:d1:98:4e:dc:fe:5d:37:f3:f2:4b:73:35:f3:7d:dd:09:
3a:47:1a:47:22:72:ea:af:56:c9:14:2f:5a:b8:49:f3:c1:13:
4d:2e:5a:c4:5f:cc:a9:77:4d:a2:f7:02:a7:7a:8c:43:1f:8d:
80:f3:db:bb:e1:a7:ae:96:c3:77:76:68:dc:03:18:16:68:5c:
28:27:ab:4b:5e:4d:da:cb:7d:b4:98:da:9a:08:f9:e5:14:99:
1c:63:b5:d1:b6:7c:5b:03:4f:98:e4:60:9f:f7:78:be:d6:2e:
85:ff:fd:a6:b3:3f:87:32:9b:a6:0e:fc:db:be:e8:40:f8:f6:
7d:2b:7c:43:a5:a4:5a:32:9f:fa:62:0b:13:71:1f:96:35:75:
ca:39:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org