Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Z20Rsa2x0IyVlelM7fiGxx-EGrg.roa
File: Z20Rsa2x0IyVlelM7fiGxx-EGrg.roa (raw, json)
Hash identifier: a8yNx/vE1k54aGMofXZH6ElabgKivwWPwdW2BvflKec=
Subject key identifier: 67:6D:11:B1:AD:B1:D0:8C:95:95:E9:4C:ED:F8:86:C7:1F:84:1A:B8
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 7A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Z20Rsa2x0IyVlelM7fiGxx-EGrg.roa
Signing time: Tue 30 May 2023 16:06:23 +0000
ROA not before: Tue 30 May 2023 16:06:23 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:2900::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 16:06:23 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=676D11B1ADB1D08C9595E94CEDF886C71F841AB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:82:4f:70:5a:22:2d:e3:71:43:98:57:5f:
11:02:76:76:65:0a:13:b1:20:86:21:27:68:9a:ac:
51:49:47:af:83:25:43:52:9d:8c:76:02:0c:85:a2:
8e:72:29:f6:29:0c:95:77:9d:08:a0:27:26:d1:b5:
71:c9:9d:c7:b6:9b:01:e0:2f:61:f7:2d:e0:aa:e0:
17:07:69:e0:e1:ab:cc:e1:f1:7a:a6:f2:9b:bb:89:
a4:78:30:c3:82:35:4e:fa:47:ec:98:ff:58:7f:cd:
74:d6:b7:ba:95:5c:ca:03:0b:9b:e6:28:a5:14:51:
a9:a6:28:75:9b:75:a2:39:78:42:f8:e0:83:fd:3d:
c8:1f:29:3e:6c:9b:db:5e:af:e9:62:f3:9e:20:1d:
c6:61:5e:a4:0b:72:50:82:26:76:f4:89:c1:11:81:
7b:fc:ce:e5:d2:4c:8e:9a:7d:37:9f:a3:2b:6b:36:
e2:3e:5c:79:5d:d8:64:a3:22:fc:a5:3d:5b:06:92:
56:1c:0d:fb:b1:e0:1c:22:5a:1f:ed:16:76:f3:c8:
95:c2:8d:f8:4e:2d:f1:76:b5:ed:4d:cc:3e:99:db:
54:bc:26:a7:9e:93:3a:fe:44:b9:de:05:57:b3:a6:
78:ac:9e:77:c9:03:af:45:ac:87:f4:c6:5e:be:1e:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:11:B1:AD:B1:D0:8C:95:95:E9:4C:ED:F8:86:C7:1F:84:1A:B8
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Z20Rsa2x0IyVlelM7fiGxx-EGrg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:2900::/40
Signature Algorithm: sha256WithRSAEncryption
63:f3:c0:55:05:72:bd:e2:eb:5e:e1:e5:e0:c7:b0:fe:0b:4b:
b3:84:cf:11:33:25:73:4a:8f:e6:fc:fe:c2:b7:5e:4c:70:be:
4d:f0:b9:68:46:50:50:5e:93:ff:04:5c:0c:84:ec:ff:57:2c:
48:8f:81:44:97:75:a6:b9:61:04:88:eb:45:96:e7:9b:34:ea:
21:2f:47:08:c7:22:60:69:4b:0c:7c:f1:ac:4f:8c:0a:e5:62:
36:02:e3:6a:34:e8:61:0c:13:de:93:9b:09:1f:87:36:cd:2a:
43:36:35:8b:da:cd:3e:be:79:97:e2:5e:fa:d2:cb:ef:d7:2b:
93:cd:b9:e7:1e:47:72:1d:cf:97:57:1d:ad:59:91:c9:73:b8:
79:10:8d:63:ad:51:57:47:83:e1:72:d8:8d:8e:13:af:9d:59:
30:0e:30:2d:f9:26:cf:2f:6d:2e:1d:a5:21:a0:d2:57:95:0f:
f4:f5:8a:f2:6c:92:28:4b:28:b8:2e:a2:18:3e:0f:f2:ca:48:
44:bd:35:b3:db:71:34:e8:07:9a:18:5a:87:60:a6:e8:43:e1:
9e:8e:6c:6e:5c:c5:1e:17:26:1d:43:80:d4:c9:58:ec:ad:66:
47:85:89:0a:b7:11:14:75:a5:89:33:4a:93:59:bf:f1:ff:55:
7a:5d:88:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org