Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pGE7sxDUEsEwR3DohaAbD0AIUOA.roa
File: pGE7sxDUEsEwR3DohaAbD0AIUOA.roa (raw, json)
Hash identifier: ZDYwkPcQe/KTzWS+FjBw3UOCfzpZia47z2aoKqIIGig=
Subject key identifier: A4:61:3B:B3:10:D4:12:C1:30:47:70:E8:85:A0:1B:0F:40:08:50:E0
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 024F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pGE7sxDUEsEwR3DohaAbD0AIUOA.roa
Signing time: Tue 06 Jun 2023 17:45:23 +0000
ROA not before: Tue 06 Jun 2023 17:45:23 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:17:fcc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Jun 6 17:45:23 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=A4613BB310D412C1304770E885A01B0F400850E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:df:34:a5:41:18:7c:ce:09:f5:dd:d1:a1:
f9:5d:e6:23:c1:0f:9a:41:f9:1f:f2:6d:48:12:3e:
4c:3b:35:b4:93:e6:91:42:12:cc:be:42:5a:04:e6:
cb:16:b5:11:9a:49:f6:64:ac:4d:71:07:16:a2:e1:
4a:ac:5b:4c:b8:54:cf:5a:84:a6:a2:2f:e0:3e:99:
6b:08:83:5a:ab:f5:44:da:74:a2:6b:9e:73:8d:a7:
15:44:91:c0:66:7b:67:86:9a:52:cb:71:18:ce:05:
af:5e:a9:90:da:fb:ff:fb:db:3a:e7:ab:55:9a:f0:
a9:f9:37:ab:61:8e:99:7b:cb:ca:82:f8:2a:80:08:
b5:90:0c:f5:5c:81:50:5e:09:4e:ce:49:d8:2d:56:
b9:c1:e4:61:71:26:3b:2c:43:0c:bf:1f:db:75:e7:
67:f0:a1:92:93:8d:4b:58:56:98:a8:ec:4d:63:d5:
7a:2d:00:76:de:dd:f7:de:d3:bd:a4:15:95:6b:59:
f9:29:7d:09:d9:c0:97:6b:55:03:af:e9:f3:2a:92:
81:bf:b8:e6:b2:52:66:3c:84:c7:5c:50:c0:77:a5:
00:22:8d:e6:99:0f:e6:ad:0c:68:1d:f3:8a:78:b2:
63:03:40:40:68:05:a7:b7:3e:3f:47:d2:3d:7d:5a:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:3B:B3:10:D4:12:C1:30:47:70:E8:85:A0:1B:0F:40:08:50:E0
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pGE7sxDUEsEwR3DohaAbD0AIUOA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:17:fcc::/48
Signature Algorithm: sha256WithRSAEncryption
24:1b:07:7a:49:e1:ee:13:75:56:17:93:b3:8c:ad:6c:c3:b9:
b1:5b:66:64:bb:90:b3:54:39:c8:d4:6c:a7:8c:24:74:53:e2:
94:6f:d5:27:e1:dd:68:97:19:cc:b6:f6:22:1f:1d:d5:27:0c:
6d:4c:90:22:83:74:52:27:20:67:70:b0:36:ce:09:b5:5b:c3:
c5:c7:da:b5:e2:33:ae:1f:b8:95:a8:7a:83:fe:0b:5f:50:53:
56:c3:26:8e:28:59:8b:9f:13:8c:57:b6:66:8a:78:f1:c4:4e:
47:66:4e:f7:58:ff:1f:50:de:17:02:59:eb:d3:12:ee:7c:1a:
3a:ad:96:1f:94:43:83:bf:1e:d8:cb:23:b7:62:29:8f:11:fd:
30:19:54:08:30:8f:47:f1:e3:c7:e4:9e:d5:39:fc:cd:07:ee:
d7:f0:ca:f2:4b:14:59:c1:cb:da:77:02:ba:2f:bc:88:36:29:
6e:0a:ee:e1:07:f3:b9:02:b4:97:92:4f:14:fb:72:9a:ff:de:
69:8d:fd:96:4f:f0:b6:34:5e:3d:e0:87:0a:3f:f8:38:21:06:
58:0e:82:4b:e5:dd:57:5b:f7:35:f1:e5:9c:32:2b:1b:6b:46:
0b:19:84:c1:52:0b:ca:45:a2:42:69:c4:3b:5d:d7:f1:a8:eb:
90:52:23:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org