Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kEpJx7WIonc1FpjAgZ3Dr_ABpCs.roa
File: kEpJx7WIonc1FpjAgZ3Dr_ABpCs.roa (raw, json)
Hash identifier: dGgiwOdfcjb0oLtD2zFgr8fIewrVIWH+6HYJINFY3SA=
Subject key identifier: 90:4A:49:C7:B5:88:A2:77:35:16:98:C0:81:9D:C3:AF:F0:01:A4:2B
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 83
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kEpJx7WIonc1FpjAgZ3Dr_ABpCs.roa
Signing time: Tue 30 May 2023 16:06:26 +0000
ROA not before: Tue 30 May 2023 16:06:26 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:a900::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 16:06:26 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=904A49C7B588A277351698C0819DC3AFF001A42B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:87:45:04:6d:13:86:3f:16:61:fe:e0:18:
5d:41:6a:4f:82:74:32:cd:97:ae:5b:7d:69:e0:77:
11:77:9d:7e:6d:7f:59:af:f3:c9:14:bb:43:75:1f:
65:13:33:bc:65:b4:dd:aa:5a:e4:61:b5:a0:b9:81:
d5:a7:fd:33:de:30:5d:fd:2d:6a:74:42:f2:f5:2f:
72:39:66:c6:94:8c:3e:45:6f:3d:73:38:6b:f0:58:
53:b6:2b:a4:8e:5f:41:17:44:17:25:ea:64:73:33:
be:69:bd:22:79:49:13:de:25:ec:15:62:f3:b7:99:
a2:b2:fa:ae:2f:13:c4:dd:68:41:11:09:5b:1b:93:
29:0f:f8:6e:3f:b9:2d:e8:1d:c5:d1:62:29:a2:84:
48:6f:1a:0c:51:eb:4c:49:23:63:62:3a:c6:1c:c6:
f1:8b:ca:d2:a7:4b:7b:03:94:26:27:21:af:78:b2:
a8:32:e5:46:ae:78:68:76:d5:4f:b0:5d:8a:35:9d:
66:41:11:81:f5:97:7e:d5:b3:91:00:d1:e5:0f:a5:
20:fe:db:3a:bc:b2:42:d6:09:be:cd:dd:4a:73:30:
a5:cb:a2:6a:72:58:23:1b:5b:3e:d3:db:55:b6:65:
c3:ea:08:d7:85:07:89:40:07:7e:2e:ec:c4:f3:05:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4A:49:C7:B5:88:A2:77:35:16:98:C0:81:9D:C3:AF:F0:01:A4:2B
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kEpJx7WIonc1FpjAgZ3Dr_ABpCs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:a900::/40
Signature Algorithm: sha256WithRSAEncryption
3b:5f:f1:d1:ed:c1:5c:9f:b5:48:63:f5:69:e3:84:5e:5c:af:
8c:8d:79:af:6a:cf:2d:38:22:88:e0:9d:73:85:e0:ed:0b:66:
e5:cf:7b:8e:b3:c2:4a:a1:0c:d7:11:1c:ce:a6:35:51:82:36:
1e:0e:76:8f:6f:86:3a:29:a7:2e:5e:c0:f5:a0:a7:35:23:e8:
17:be:36:0e:51:d4:dd:7b:43:88:e9:d7:99:d1:52:5a:f1:f3:
80:10:0f:34:e1:6a:97:51:65:c9:c2:0e:02:ad:4f:e3:81:3b:
b9:62:de:f7:ee:fd:a2:87:15:a5:96:0b:f7:aa:b3:11:0e:dd:
4e:e6:a1:5d:f8:61:bb:fb:4c:55:37:f9:dc:69:5c:8e:23:b8:
ba:27:41:ac:dd:4b:22:4f:bc:c4:83:df:5e:0c:11:51:01:0c:
ee:91:a6:63:4b:62:10:13:20:e0:ad:5f:04:9c:a8:86:99:bd:
f6:f1:36:5f:32:cc:78:a6:88:1c:9f:61:f0:21:30:71:ef:2e:
d8:4f:8c:0f:29:12:db:73:67:02:12:ca:d4:31:5e:81:2c:a8:
82:4c:88:6c:6f:2a:16:73:d6:51:4a:bd:ec:27:f3:4c:7f:0d:
fa:94:49:f1:9c:c9:60:d1:62:19:5e:59:4a:a7:f2:1c:6b:a8:
48:d5:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org