Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UGcqLls1KiLML0_0n0kydpvqZTs.roa
File: UGcqLls1KiLML0_0n0kydpvqZTs.roa (raw, json)
Hash identifier: WZ2lziKAvjRMgUPQHXhal6DRcHaEnG3sijTIlIsT/k0=
Subject key identifier: 50:67:2A:2E:5B:35:2A:22:CC:2F:4F:F4:9F:49:32:76:9B:EA:65:3B
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 024A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UGcqLls1KiLML0_0n0kydpvqZTs.roa
Signing time: Tue 06 Jun 2023 16:29:16 +0000
ROA not before: Tue 06 Jun 2023 16:29:16 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:61:e00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Jun 6 16:29:16 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=50672A2E5B352A22CC2F4FF49F4932769BEA653B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:0a:3d:13:48:c8:5f:34:36:fa:0f:40:e1:
f4:1a:cd:39:2e:b8:6e:ae:ba:99:d3:e1:7e:68:d0:
cc:22:8b:5d:fd:6e:ab:8b:69:d2:b3:9c:16:3a:78:
8b:cf:b7:ae:d1:b5:b9:6f:91:a2:15:f9:ee:8f:a6:
3c:21:61:c5:a5:79:36:4e:62:8f:46:0c:23:cc:0a:
40:69:fd:7d:f4:d9:34:14:1a:24:19:38:61:5d:85:
3f:fb:23:85:f5:bb:16:0c:f3:98:61:c4:d9:d7:a7:
f9:a7:de:8b:67:73:f7:57:6e:7c:cc:31:f6:e7:cb:
fb:6c:c9:f7:cc:10:3c:bf:e3:fc:1a:75:2c:c6:71:
d3:4f:58:96:7b:7b:61:d5:64:09:fd:06:55:7f:5e:
38:68:80:28:0b:dd:f0:9b:cf:28:af:b0:f5:b7:43:
ab:60:2d:29:89:6c:56:81:5d:3f:9d:bb:49:8e:83:
c5:47:89:af:b2:2e:8c:8a:6b:3c:90:41:5c:d5:e3:
57:78:e7:8d:de:98:ae:f1:b9:40:d8:ac:c7:25:c3:
88:06:87:6b:c0:e2:5f:70:25:2d:e7:6b:6f:ef:96:
2a:28:40:98:85:06:cf:c9:4e:d3:8f:19:ce:ca:1b:
30:5b:5b:cd:0c:6b:4b:76:b0:e2:89:c3:93:23:be:
bc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:67:2A:2E:5B:35:2A:22:CC:2F:4F:F4:9F:49:32:76:9B:EA:65:3B
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UGcqLls1KiLML0_0n0kydpvqZTs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:61:e00::/48
Signature Algorithm: sha256WithRSAEncryption
14:2e:99:2a:07:e7:7c:be:ab:c8:ed:49:f8:f0:41:eb:94:89:
41:a7:72:a7:bc:4c:fd:de:2a:c6:3e:55:76:43:fd:e0:d4:e7:
50:df:de:96:0c:50:17:6e:70:09:e0:f9:5a:42:1f:39:c9:75:
b8:0b:ac:02:14:31:99:db:2b:03:3a:81:77:35:97:01:99:af:
e0:c4:b9:b9:35:79:25:e5:e6:72:b8:a1:71:96:46:cc:48:e8:
ab:74:84:5c:63:74:77:69:8f:ec:b8:69:64:40:6c:6c:0c:f8:
0e:85:41:77:dc:76:3c:88:3f:1c:b4:04:5f:9c:e7:b9:c3:a4:
fc:60:50:ad:b1:03:64:bd:0a:ee:97:47:0d:b3:1c:ba:83:8d:
6b:e3:57:35:b7:ec:44:fe:b3:86:c3:f7:03:6e:5b:a3:8c:d1:
1c:33:67:49:bf:cd:18:3d:8c:b4:d0:c6:e7:36:d1:ff:ad:a5:
bb:ef:66:cc:8d:3d:ba:d4:62:13:4f:fc:05:a9:37:d3:21:80:
f0:fa:bc:f8:cb:d5:b3:21:d2:e8:18:76:c9:72:2f:90:8f:5c:
d2:e8:c7:6d:41:48:1a:a8:74:58:76:23:55:0f:28:66:5d:db:
fa:44:ec:df:61:da:aa:73:e4:f6:da:b3:a7:83:79:20:fa:2d:
5a:3c:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org