Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Uiw0ojnc_1k_5eYTTpIm9LrAYtE.roa
File: Uiw0ojnc_1k_5eYTTpIm9LrAYtE.roa (raw, json)
Hash identifier: DVJHgAYxSnMe8jZ/DGZ0g6MAJKR5wRfvgXPxoOPdmxg=
Subject key identifier: 52:2C:34:A2:39:DC:FF:59:3F:E5:E6:13:4E:92:26:F4:BA:C0:62:D1
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: E0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Uiw0ojnc_1k_5eYTTpIm9LrAYtE.roa
Signing time: Tue 30 May 2023 16:10:26 +0000
ROA not before: Tue 30 May 2023 16:10:26 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:e900::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 16:10:26 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=522C34A239DCFF593FE5E6134E9226F4BAC062D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:cd:0d:3b:31:52:b0:d2:9c:03:91:8d:1a:
ae:cf:6f:4b:a2:b0:7b:a5:58:c5:66:bf:b3:44:b6:
00:e4:67:29:9a:37:76:ab:67:7a:42:a3:b7:ea:5e:
40:05:28:c3:fe:1c:e4:2c:78:18:bf:47:76:eb:cd:
c5:72:36:6e:3e:af:de:f1:b8:64:dd:20:49:f3:70:
02:6e:93:af:9a:7e:bb:d9:16:b3:cf:7a:a8:b8:4d:
21:fb:27:9c:26:c4:ae:84:45:6c:f6:8a:2b:5e:bc:
d4:7a:2f:94:49:2a:c5:c1:e4:75:4e:ed:51:74:32:
af:d8:45:d7:89:b6:46:fd:af:f4:b4:2b:c5:78:09:
43:2f:75:7d:40:8d:22:9e:38:fb:b5:0a:00:47:32:
12:c6:88:d2:e6:75:cd:a0:a8:de:db:2e:f9:42:5f:
d8:10:97:69:ce:d0:70:4b:b3:f2:87:50:ab:ba:b9:
87:0d:1c:42:14:e1:b6:d1:31:24:22:8f:c4:a4:45:
57:d5:4d:79:1e:66:65:52:c7:89:32:28:69:dc:70:
76:d8:86:65:76:42:15:f4:37:f4:f4:90:b0:b7:c9:
a6:cc:4c:76:47:fa:16:ca:01:7e:20:5f:26:71:e7:
50:4b:3f:db:2b:a8:e0:70:f4:b8:03:01:2b:47:de:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2C:34:A2:39:DC:FF:59:3F:E5:E6:13:4E:92:26:F4:BA:C0:62:D1
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Uiw0ojnc_1k_5eYTTpIm9LrAYtE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:e900::/40
Signature Algorithm: sha256WithRSAEncryption
6b:4c:fc:32:d6:dc:53:21:b3:79:ed:27:00:52:92:80:9a:b8:
dc:c7:d2:f2:9a:e6:4c:72:5c:1c:a6:c0:81:5e:b1:0c:27:30:
5d:e9:aa:cc:49:df:d6:2f:75:7e:27:13:84:2c:7a:66:d8:4a:
f1:c9:e2:ca:8c:f8:a0:91:49:62:e0:ad:be:f0:7b:17:e8:b1:
71:ff:44:e1:27:5d:c1:86:94:2b:40:41:ae:8d:1e:af:a8:60:
ea:84:cb:16:03:8a:9b:72:0f:f3:6a:fc:ac:c5:31:97:72:36:
95:77:83:a2:d3:f6:21:71:2c:5f:40:3f:00:32:f8:d3:6d:51:
dc:03:50:65:00:e1:44:fe:93:9a:70:8e:df:1f:e4:20:5f:aa:
40:d7:bb:74:72:f9:b5:8e:54:6d:85:76:3b:ff:28:90:2b:60:
aa:c2:44:a9:b5:87:72:e4:39:14:87:3f:8e:03:77:6d:12:2e:
33:2e:48:48:e5:53:8c:22:77:94:61:ea:16:75:d7:89:bd:78:
1e:85:a9:c4:a7:27:1c:51:43:b7:af:fc:98:ac:84:d9:c7:d8:
fe:21:37:08:c2:04:76:d1:d9:3a:9d:13:a1:52:8f:17:d0:04:
54:ba:44:6f:0f:85:08:0f:55:20:92:68:d3:a3:22:76:1e:40:
98:61:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org