Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QeZ5cKJDT-JfJeijkFWXL8hLX3Y.roa
File: QeZ5cKJDT-JfJeijkFWXL8hLX3Y.roa (raw, json)
Hash identifier: rdbhoY4ePxVm9JRhSwf/65YQsEnHwLlJn0zCcokI5Og=
Subject key identifier: 41:E6:79:70:A2:43:4F:E2:5F:25:E8:A3:90:55:97:2F:C8:4B:5F:76
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0120
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QeZ5cKJDT-JfJeijkFWXL8hLX3Y.roa
Signing time: Tue 30 May 2023 16:14:22 +0000
ROA not before: Tue 30 May 2023 16:14:22 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:1f00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 16:14:22 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=41E67970A2434FE25F25E8A39055972FC84B5F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:2d:7f:0c:39:b9:49:3f:73:a0:b9:02:f2:
7e:c5:e9:7d:4a:4d:39:f4:e8:f4:3c:89:f0:50:a4:
66:a7:ca:f7:6e:92:72:b0:83:ac:ca:5c:c3:b5:bc:
4c:08:ff:25:d6:9f:c5:b8:20:d7:90:db:cb:f6:11:
0b:bb:b0:f4:3b:1b:bc:c9:e4:74:3c:e6:71:58:e9:
e2:6d:2a:d4:a5:b8:8d:d6:96:c9:15:31:99:f2:4c:
8d:78:15:cd:e8:48:f9:d0:61:7a:c2:47:9b:f9:5b:
1a:14:88:d6:64:d0:2c:98:55:86:02:79:43:78:67:
71:d7:f4:62:10:96:d6:12:ca:5d:15:26:99:6f:bf:
9f:bf:a4:8b:cc:fc:e1:db:21:48:01:b9:d6:a4:7e:
82:60:a0:d3:42:0f:46:35:e1:fe:c8:84:d4:28:16:
af:6b:69:77:29:83:f5:b3:df:1e:15:16:ec:09:b6:
61:e3:8b:12:0f:10:7c:93:ea:0f:6b:8d:10:c1:96:
a3:52:1c:95:29:a6:ff:0a:41:70:19:09:49:cf:c8:
04:28:04:2b:6f:6e:d8:96:c3:86:0f:b3:aa:12:38:
97:67:00:e1:84:80:49:e3:ec:3b:5f:2a:8b:8c:b2:
5e:1e:87:34:42:e7:4d:d1:d2:fe:b2:c7:cb:7f:ea:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E6:79:70:A2:43:4F:E2:5F:25:E8:A3:90:55:97:2F:C8:4B:5F:76
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QeZ5cKJDT-JfJeijkFWXL8hLX3Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:1f00::/40
Signature Algorithm: sha256WithRSAEncryption
cc:9e:0a:cc:31:38:35:b3:45:b6:17:4b:39:f0:25:98:36:f8:
20:a3:e6:0f:3e:41:3d:f6:85:d8:9c:cf:1c:88:e0:b3:d4:02:
0f:cb:86:61:7d:dc:85:f4:cf:e6:41:4a:8f:a4:13:3c:63:a9:
3b:2d:4a:67:2d:95:45:43:39:b4:94:81:9c:de:15:2e:f6:45:
de:dc:5a:04:99:f0:65:a7:03:bc:57:0c:23:23:42:05:c3:75:
6e:11:05:15:6b:e4:df:4c:b9:7f:54:e1:9d:85:2e:74:30:a8:
2d:e2:01:ad:b3:a5:52:14:22:0f:a0:dd:40:b7:5a:7b:c9:f0:
2c:3c:18:c3:10:f5:84:aa:56:98:f5:6b:dc:fb:5d:65:68:69:
7e:3b:68:b7:09:b1:b3:18:f1:65:ef:58:db:24:d0:48:91:1b:
89:dd:07:41:8c:49:44:a5:12:57:18:e3:79:bd:c5:34:2e:4e:
65:08:02:04:5c:a2:18:14:f6:59:6a:94:5b:10:2e:f6:41:fd:
55:ca:4f:a6:96:58:72:11:d7:ec:a0:4c:a3:cf:b0:c7:92:1c:
4c:f9:23:b7:7d:51:64:03:78:eb:85:04:59:98:85:c3:12:f9:
ba:a1:2c:18:f9:46:85:a1:19:ec:0f:59:a6:32:65:83:8f:a7:
50:56:20:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org