Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mkdXFqmWtw1-EPxo4u6Jy4BcL7w.roa
File: mkdXFqmWtw1-EPxo4u6Jy4BcL7w.roa (raw, json)
Hash identifier: 1yg1Thm4Rx4DbteAt/5E4kWUqbmOAS6Vsfko6JpBT/c=
Subject key identifier: 9A:47:57:16:A9:96:B7:0D:7E:10:FC:68:E2:EE:89:CB:80:5C:2F:BC
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0140
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mkdXFqmWtw1-EPxo4u6Jy4BcL7w.roa
Signing time: Tue 30 May 2023 17:30:07 +0000
ROA not before: Tue 30 May 2023 17:30:07 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:61:3c00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:30:07 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=9A475716A996B70D7E10FC68E2EE89CB805C2FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:9d:88:e7:6f:d9:13:2f:79:c4:17:d9:92:
ad:2d:10:42:41:3f:50:8e:80:b9:20:7f:94:3f:e0:
66:c9:1c:7c:31:16:ae:ef:51:1f:4e:25:23:22:25:
49:8c:80:60:3f:1f:7b:47:89:a8:25:37:b1:19:7f:
ef:92:e1:7d:3c:18:fe:d0:15:52:3b:fb:34:53:4d:
3e:1e:2c:8e:f2:f2:60:52:73:1a:b5:88:c4:4c:ab:
16:5c:ba:4b:05:6f:b4:46:60:9e:38:65:bc:92:6c:
90:f6:20:de:45:ce:34:c5:c8:a3:29:88:fe:3c:93:
4a:33:62:cd:9d:c1:5c:74:29:5e:bc:41:e3:fc:84:
be:54:de:b1:81:0b:dd:e1:da:cf:4f:04:ad:fa:67:
5b:da:2c:82:8b:86:46:f5:f3:d0:08:95:e5:9e:8f:
d7:b3:ce:b8:98:1b:ff:1f:b3:ee:ec:15:ae:27:8f:
5f:8b:34:df:31:5a:33:95:e2:3e:da:c1:b8:3d:63:
c3:c7:6c:a0:6b:e3:10:cc:b5:1f:35:f4:56:0d:62:
9a:87:5a:b0:47:58:7f:db:46:b1:31:d9:80:ca:f6:
2b:74:a9:c7:5a:52:e9:2a:12:16:12:ae:9f:45:be:
7e:bf:b7:01:ca:39:55:7e:f4:09:bd:77:60:53:ec:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:47:57:16:A9:96:B7:0D:7E:10:FC:68:E2:EE:89:CB:80:5C:2F:BC
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mkdXFqmWtw1-EPxo4u6Jy4BcL7w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:61:3c00::/40
Signature Algorithm: sha256WithRSAEncryption
3f:ce:20:cc:97:62:64:4b:94:18:e8:46:82:67:c9:69:c0:a2:
f2:40:eb:3c:94:ef:83:b6:2b:dc:7b:04:85:5b:70:c1:54:fb:
5b:5d:06:ed:9f:f3:f7:a2:2b:09:f6:cc:bd:3d:10:7d:3f:2d:
86:90:18:ea:f8:43:de:db:2c:98:35:7c:b2:3a:c4:5a:81:db:
ca:7f:09:91:aa:aa:de:3c:19:62:b8:a5:e4:e9:0d:b2:2e:64:
ad:22:9a:c1:58:ee:a2:67:d2:df:95:52:14:94:4c:4f:16:26:
0c:2e:9f:ed:ce:82:ac:df:bc:14:a9:65:a8:6a:8c:bf:bf:91:
62:f9:48:50:56:26:ec:a0:24:4d:27:65:27:79:8c:db:3a:e3:
f4:de:b9:fa:3f:8c:7c:7e:3f:7e:b9:c4:d2:9c:b1:b3:dc:db:
73:25:4a:b3:af:97:8b:1c:1f:c0:6e:b6:c4:03:51:9c:a0:e3:
18:8e:0a:e1:0b:46:0f:89:44:de:6d:6a:1f:e8:55:e4:b6:38:
75:0f:0f:7d:88:10:89:57:50:8a:a9:88:ce:f3:8b:8d:29:6e:
75:e1:ea:d0:c9:c5:01:80:42:89:90:95:20:24:33:97:c7:86:
fd:d6:af:ce:19:63:19:ae:ce:fd:01:f4:7c:8b:e6:3b:ac:9e:
39:75:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org