Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZaCOp6ABSGH_G5uQ-VVHVDPLIhs.roa
File: ZaCOp6ABSGH_G5uQ-VVHVDPLIhs.roa (raw, json)
Hash identifier: eqt05IeTM80RKcD5PhGbaQeyI6M5dFxA329Awlx635Q=
Subject key identifier: 65:A0:8E:A7:A0:01:48:61:FF:1B:9B:90:F9:55:47:54:33:CB:22:1B
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: F9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZaCOp6ABSGH_G5uQ-VVHVDPLIhs.roa
Signing time: Tue 30 May 2023 16:12:29 +0000
ROA not before: Tue 30 May 2023 16:12:29 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:1d00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 16:12:29 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=65A08EA7A0014861FF1B9B90F955475433CB221B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:4b:cc:b9:3d:51:76:20:d6:fd:ca:a1:52:
0b:5a:0c:59:9b:5d:e5:fa:e0:c7:64:30:c5:4f:b0:
c4:ac:dd:a6:1b:45:89:14:8a:02:cf:83:31:a2:f0:
0d:2f:7c:c9:6a:85:4b:78:5d:9a:21:c9:15:1a:e0:
58:c0:6a:43:33:00:9d:97:02:35:90:0f:09:fd:5c:
1d:4c:e4:a6:5d:4b:49:9f:e4:24:05:d7:f2:0e:32:
4e:e8:74:0c:58:0e:cc:2f:54:96:5e:7b:ab:84:29:
e6:7b:c5:0c:45:3a:01:61:18:e1:92:fd:3c:d6:62:
d8:53:96:54:8c:46:6d:a0:4b:e7:d4:c4:33:71:1f:
d5:74:be:30:4b:0e:e1:2b:f1:0d:3a:6c:d4:9e:d4:
e1:cb:c2:7c:68:09:be:a0:81:43:09:84:37:b8:98:
00:83:f5:8e:52:13:4d:42:1b:db:53:01:94:c2:73:
7e:80:92:aa:2c:dc:ec:60:75:92:37:a1:d4:45:6b:
d8:f0:09:05:8b:be:4e:26:36:d7:0e:83:58:f1:db:
b1:d6:c7:58:10:cd:c5:94:e4:8f:0c:6d:ae:70:30:
d3:d0:1b:c7:71:2b:9c:4a:57:41:af:0e:9e:8f:78:
17:03:9c:35:9b:d6:13:f5:36:c8:da:30:bc:72:8d:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:8E:A7:A0:01:48:61:FF:1B:9B:90:F9:55:47:54:33:CB:22:1B
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZaCOp6ABSGH_G5uQ-VVHVDPLIhs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:1d00::/40
Signature Algorithm: sha256WithRSAEncryption
97:e1:92:69:2a:d3:50:20:64:43:a9:8a:d0:53:9c:02:17:a1:
ae:f0:af:7b:16:a4:5e:95:8c:9c:5c:cd:c7:ae:f7:eb:b7:c8:
b5:01:0f:bc:f9:30:95:fa:2c:62:83:1b:47:9b:8b:f7:0a:e1:
8e:4c:86:17:92:be:3e:5e:f2:9f:64:e3:98:6b:e2:08:40:5e:
d8:38:92:7d:af:f2:49:70:8a:c1:31:c4:78:ed:d7:c3:a6:24:
f1:ab:66:3b:94:5b:86:10:ba:b1:8d:ee:68:58:59:5d:10:93:
3c:4a:2f:d5:c1:08:61:6d:a0:19:48:3d:03:be:45:89:47:f5:
1c:e1:05:7e:a1:3e:21:be:b6:cb:bd:f0:1e:59:82:e1:53:c0:
fa:e3:74:40:d8:ec:18:9f:0b:82:5d:03:3e:00:c5:ee:00:e4:
d5:b0:f8:5b:6e:42:79:5e:6c:ad:72:4f:03:81:89:ad:81:92:
ec:a3:ca:5a:fe:20:db:0c:49:9c:bf:6e:6b:65:0f:44:ba:08:
4c:ab:c0:d6:83:33:ec:cb:5b:75:93:aa:97:0e:c6:be:79:66:
69:8f:65:6c:d6:60:15:c9:c8:13:ec:4a:3a:53:57:78:74:70:
7d:c2:3b:21:4e:53:e7:14:b9:62:b8:e3:d5:f1:a4:10:6b:99:
d5:a0:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org