Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Z5z4BvAZv1pbj8UeLZtMCi2k76c.roa
File: Z5z4BvAZv1pbj8UeLZtMCi2k76c.roa (raw, json)
Hash identifier: stMX1LVndaM3EDtg+zPdFrqhiNL0CsAycU9e8jnTeDk=
Subject key identifier: 67:9C:F8:06:F0:19:BF:5A:5B:8F:C5:1E:2D:9B:4C:0A:2D:A4:EF:A7
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0185
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Z5z4BvAZv1pbj8UeLZtMCi2k76c.roa
Signing time: Tue 30 May 2023 17:34:25 +0000
ROA not before: Tue 30 May 2023 17:34:25 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:4600::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:34:25 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=679CF806F019BF5A5B8FC51E2D9B4C0A2DA4EFA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:cf:37:a8:f2:3b:5a:7a:2a:32:12:78:bf:
c1:51:c4:b6:2f:05:ae:93:15:ff:88:36:4d:bc:fe:
0c:e3:c4:d2:4a:5f:1f:f3:18:91:da:33:cf:8f:8b:
d3:fa:ba:34:20:a6:07:a7:c6:55:7d:ea:2b:53:48:
64:31:c4:49:37:f8:73:fa:c5:45:72:e0:2d:a5:3f:
f5:9a:31:67:22:16:64:fb:32:ed:df:cf:52:3e:8c:
f6:2f:f4:37:c5:77:92:7d:45:e3:fb:bd:fc:26:3d:
bb:9c:5e:55:66:7e:20:54:b5:02:43:69:05:e9:8a:
05:ae:5b:95:74:5d:fd:ac:33:8d:fa:f8:ba:67:f3:
a8:45:46:f3:8e:5c:6f:19:de:22:0d:e0:e1:d6:b3:
c8:c4:02:eb:79:3a:a8:11:96:ec:e8:9b:2b:a6:98:
c2:fe:46:ef:91:b0:eb:71:fe:20:c4:62:10:66:58:
84:92:75:d6:ef:c7:ac:53:5d:54:0e:15:c2:67:78:
87:d3:b5:52:87:b2:9d:91:88:b8:d3:ed:29:21:40:
5e:d5:a0:fa:24:da:32:ca:3d:89:dd:15:ed:3e:0e:
63:63:6e:ff:80:c5:6e:0c:29:ec:dd:41:1f:d0:a5:
4b:b9:b2:7a:e6:6a:c5:cd:4a:dd:06:5e:2a:02:e0:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9C:F8:06:F0:19:BF:5A:5B:8F:C5:1E:2D:9B:4C:0A:2D:A4:EF:A7
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Z5z4BvAZv1pbj8UeLZtMCi2k76c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:4600::/40
Signature Algorithm: sha256WithRSAEncryption
c1:c3:38:30:4a:34:92:7f:e7:fc:4f:1e:74:af:74:aa:14:dc:
f6:21:43:9c:87:f5:6e:8f:72:c9:8b:3f:82:33:86:2e:86:c7:
73:bb:7f:c0:3f:46:50:42:1d:6d:f1:83:9d:18:f9:cc:59:ce:
cd:20:64:8f:4a:71:b7:d1:25:8e:31:f9:2a:c4:07:da:e5:30:
02:02:29:7b:b8:ae:9e:b1:18:0f:3e:99:ae:58:9b:b0:f8:20:
04:49:cb:96:b1:6e:54:c9:84:bd:e1:c3:3a:ef:b6:1e:77:dd:
3d:cb:37:cd:2c:9c:22:ee:db:e7:18:28:d5:bc:9f:60:1f:b9:
90:3c:09:45:79:3a:a7:40:d1:ce:62:5c:69:e0:18:9a:27:93:
6c:6c:e3:4f:96:0b:fe:37:97:66:0f:25:e7:19:2b:f4:fa:36:
77:2d:34:93:7d:6a:a9:00:43:0a:10:2f:45:a5:b6:c0:66:ae:
50:fd:3d:e4:40:a3:ef:02:a5:e7:d7:4c:ee:ca:ff:e2:60:48:
3c:19:21:27:9f:b4:a8:60:a1:11:60:ed:ad:1a:fe:09:d1:fa:
09:9d:80:ff:d6:25:bb:39:7e:84:4e:49:85:f2:6a:01:90:4b:
6d:69:63:ef:16:ac:6f:5a:74:cd:8a:7b:df:52:6d:d6:01:a8:
b1:bc:3f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org