Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TnFjJmRlB7ZIkLml9Ml2k909byo.roa
File: TnFjJmRlB7ZIkLml9Ml2k909byo.roa (raw, json)
Hash identifier: uAzvx1ztX84qA1JoLrGiwC8aVpbTHYNd5glRJizcynA=
Subject key identifier: 4E:71:63:26:64:65:07:B6:48:90:B9:A5:F4:C9:76:93:DD:3D:6F:2A
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0243
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TnFjJmRlB7ZIkLml9Ml2k909byo.roa
Signing time: Tue 30 May 2023 17:44:16 +0000
ROA not before: Tue 30 May 2023 17:44:16 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:bd00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:44:16 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=4E716326646507B64890B9A5F4C97693DD3D6F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:66:a7:de:d0:17:93:f1:cd:3a:c7:20:b1:
49:8f:a8:c8:36:3d:62:70:f6:47:65:59:0c:6b:18:
57:e6:7e:3b:63:7e:2a:e7:6d:99:93:cb:1a:8f:d6:
df:b4:2f:fe:ad:4c:5e:57:30:bd:1f:88:34:cc:00:
ca:8a:a5:a7:1f:c4:65:95:f1:cf:3b:65:67:c4:fb:
32:f1:c0:06:9b:d5:8f:e1:52:18:a8:06:af:cc:72:
62:7a:7f:88:ec:32:fe:81:87:3d:90:24:37:19:ef:
3e:12:d3:a2:e0:c1:e4:34:fe:29:ec:58:f1:dc:0d:
bc:b3:95:da:71:3d:b8:72:5a:4e:f4:5c:4a:a4:ae:
f3:1e:85:83:3b:8c:f7:05:28:72:19:dc:74:14:47:
ff:85:cd:a0:ea:fd:48:9e:2f:ad:73:de:d4:59:9b:
a0:f1:42:5c:c0:94:98:08:f7:92:33:94:41:ba:f2:
01:6c:0a:8d:1b:09:69:5d:53:b1:df:1b:dd:21:43:
9b:4e:cb:ef:15:74:4e:a4:0b:b9:94:a2:5c:5d:58:
64:c7:58:3b:38:b6:30:99:f8:22:f3:fd:15:fd:49:
fa:a7:26:02:8a:f9:e1:0e:19:bf:82:68:9f:69:04:
c6:32:13:6c:c4:15:24:57:f3:cf:5f:d7:44:a5:d2:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:71:63:26:64:65:07:B6:48:90:B9:A5:F4:C9:76:93:DD:3D:6F:2A
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TnFjJmRlB7ZIkLml9Ml2k909byo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:bd00::/40
Signature Algorithm: sha256WithRSAEncryption
ab:c2:c1:30:42:ad:da:aa:5c:ba:5d:e9:bc:9d:1a:ec:33:c5:
92:bc:4b:86:1b:83:8c:bc:d1:1e:a6:51:7f:69:92:d2:14:7b:
12:d6:90:c1:df:61:40:9e:51:7c:6f:5d:17:4f:dd:87:58:38:
39:06:cb:df:0f:6d:ee:4a:24:12:c7:e5:86:15:e0:5f:e3:88:
63:05:bb:bc:be:10:7a:ee:b3:69:31:bd:c9:d6:a0:c5:69:b5:
1f:f4:b6:6e:50:b7:d0:4b:f1:ec:46:60:10:9d:a7:fc:8f:a6:
0c:9c:08:ee:ac:e4:f9:54:63:83:db:0f:b9:78:46:19:75:81:
cc:47:a7:6b:ac:20:b4:e9:41:a8:0d:77:27:ea:fa:c9:9b:c5:
b7:e9:35:71:86:b2:4d:a4:85:6e:a9:4a:c5:95:6a:d0:b9:20:
12:03:8a:76:02:01:92:14:38:5a:97:47:0b:78:29:1a:c3:df:
01:dd:36:33:7c:fd:9f:44:2a:1f:fb:9c:06:04:72:fd:40:42:
d0:f5:c1:2e:b7:59:80:50:7d:5d:d6:1c:72:79:27:54:7b:0e:
d9:be:6f:dd:f6:03:3a:b3:d0:ce:fd:9f:8a:9a:4d:c6:68:db:
a2:c9:3f:a2:9f:29:5d:5b:92:1f:99:b2:7c:51:7d:b1:37:bc:
f5:f5:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:04 2025 by rpki-client