Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PfAdHn3iTYqhavt5ofTlr-0iQiw.roa
File: PfAdHn3iTYqhavt5ofTlr-0iQiw.roa (raw, json)
Hash identifier: 6OZW1NlIDJa5uQ+Fcwse7Dh4d6Tyg5Kv/m9djkQ0NLo=
Subject key identifier: 3D:F0:1D:1E:7D:E2:4D:8A:A1:6A:FB:79:A1:F4:E5:AF:ED:22:42:2C
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0164
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PfAdHn3iTYqhavt5ofTlr-0iQiw.roa
Signing time: Tue 30 May 2023 17:32:33 +0000
ROA not before: Tue 30 May 2023 17:32:33 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:2200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:32:33 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=3DF01D1E7DE24D8AA16AFB79A1F4E5AFED22422C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:ea:d0:74:a6:33:a1:49:8d:4b:18:1d:d0:
d8:5d:40:ca:c5:bb:6d:e0:ee:64:6f:ca:59:3e:ee:
0f:c4:25:60:f1:89:8c:e8:04:20:42:8e:0d:68:9f:
07:89:d9:b5:dc:2d:39:65:8b:0e:8e:42:13:10:e9:
9c:2f:73:cf:cf:b1:f3:10:2e:fd:82:74:24:d6:1d:
62:ac:65:0a:18:30:72:ae:69:56:dc:85:3e:a1:58:
76:2e:fe:ba:6c:12:39:df:3c:08:53:5e:44:e3:6e:
5f:46:bd:b9:f8:57:65:36:21:56:b0:8f:8e:f0:64:
d9:2f:fc:82:45:ea:20:3f:cd:da:a2:f6:2d:7c:aa:
f4:54:d9:d7:25:63:ae:dd:97:9a:42:fa:16:24:24:
b5:35:cc:d1:3e:ca:6a:13:ca:77:02:7e:f7:eb:ea:
3e:60:d7:96:0f:28:e8:dc:7f:9b:2b:80:6a:02:64:
d4:8a:8c:a0:b6:cc:a5:66:66:0e:9a:50:9b:4e:79:
8a:04:ae:d1:18:cb:8e:6a:52:e3:e9:e0:44:9b:52:
1c:dd:9c:7c:01:22:c9:1d:42:d0:6e:27:8d:bf:8b:
5e:57:ea:b1:1b:dd:c2:33:9a:cb:89:a9:1f:54:73:
96:d2:8d:3a:3c:79:fb:9b:92:e9:dc:76:51:47:d9:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F0:1D:1E:7D:E2:4D:8A:A1:6A:FB:79:A1:F4:E5:AF:ED:22:42:2C
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PfAdHn3iTYqhavt5ofTlr-0iQiw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:2200::/40
Signature Algorithm: sha256WithRSAEncryption
ba:c4:a4:4e:a2:fa:b1:55:01:c3:0d:c1:2b:92:96:88:04:85:
f4:99:fc:06:4a:45:7a:30:8d:c4:99:34:4c:20:e3:e7:32:dc:
cb:2a:e9:16:67:c6:a9:6a:80:44:67:3c:75:3d:14:97:c4:78:
5f:5b:9d:45:7f:a9:ce:90:a0:ba:1d:f5:a7:97:ca:2e:2e:a1:
56:60:88:dd:e5:e3:67:54:5f:f0:fa:15:65:7a:b1:f3:7b:01:
18:2c:62:0f:1c:48:b0:a4:3c:da:8d:9e:d0:a0:75:5e:fd:77:
df:30:e5:f2:2e:f4:f2:71:25:dd:6e:52:d4:a5:6c:c8:d6:25:
c3:c2:4a:0a:27:bb:b9:e8:38:a1:d4:07:ae:9c:05:9e:21:e6:
47:3c:2c:3a:42:e1:cf:ea:5b:0b:67:06:9b:bd:42:8f:db:2b:
9e:b3:f4:18:5e:48:5d:c1:60:ba:b8:93:fe:7b:a5:26:3e:e0:
c2:64:7b:c0:78:fe:aa:53:ec:0c:a7:a7:b3:1f:5c:47:62:b3:
9d:1e:f5:06:f2:b2:a3:04:bd:fb:5e:8b:bf:ab:bf:93:a9:04:
d2:77:07:0d:13:c2:b9:15:2b:ef:fd:76:3b:bc:d2:44:af:ba:
f6:79:11:ca:3c:26:1d:f9:b7:62:2b:10:32:58:be:b0:1b:88:
f9:4e:b6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org