Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qLRmDtoFSXDUTCSzwWdv5PHsdnQ.roa
File: qLRmDtoFSXDUTCSzwWdv5PHsdnQ.roa (raw, json)
Hash identifier: 81lmsm7IPWmHA7IH2WN4xCOxzeZWWUB77ORTF5e2CTs=
Subject key identifier: A8:B4:66:0E:DA:05:49:70:D4:4C:24:B3:C1:67:6F:E4:F1:EC:76:74
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 35
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qLRmDtoFSXDUTCSzwWdv5PHsdnQ.roa
Signing time: Tue 30 May 2023 16:02:10 +0000
ROA not before: Tue 30 May 2023 16:02:10 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 16:02:10 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=A8B4660EDA054970D44C24B3C1676FE4F1EC7674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:8b:0f:f4:dd:de:50:8e:ce:52:7a:73:c2:
33:30:0e:b6:e5:00:e3:72:e4:5f:97:f1:40:1b:c9:
0c:b0:03:ae:42:7c:15:47:9d:a5:a9:61:c8:26:8f:
16:be:c8:bb:83:84:93:55:34:23:ae:98:a7:18:f0:
09:9f:ae:9b:f4:57:56:0a:3f:7e:0c:3a:97:e1:ba:
e8:ff:a3:6e:d6:48:8b:2c:37:6a:29:18:72:bb:1f:
74:ee:9a:e9:bf:b0:fb:c7:c2:ad:29:84:08:bb:5a:
00:87:08:9c:78:34:4e:51:b5:f8:d4:ba:6e:89:39:
1e:ad:c9:d5:8d:77:7e:27:b2:ad:cf:0c:88:c1:2f:
0a:b5:36:36:1e:fe:87:8f:d2:f1:45:19:31:d1:f8:
85:df:22:1b:f7:11:65:1e:c4:15:21:03:7b:81:6b:
61:b8:b8:f7:4b:40:6e:51:a0:0f:59:67:dd:cc:0c:
e0:92:a4:8f:3c:e7:9f:15:f5:e2:6f:81:a6:da:64:
17:93:96:5d:d0:8a:0f:85:c8:3d:4d:29:80:41:a9:
0f:70:07:5d:bc:3a:3f:8d:98:37:f6:ca:b4:91:82:
27:9b:a7:d1:8e:ca:16:ae:71:38:e4:c0:29:00:f6:
a6:fc:23:83:53:ec:40:53:88:a4:c7:ac:37:e6:c6:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B4:66:0E:DA:05:49:70:D4:4C:24:B3:C1:67:6F:E4:F1:EC:76:74
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qLRmDtoFSXDUTCSzwWdv5PHsdnQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:100::/40
Signature Algorithm: sha256WithRSAEncryption
b2:80:d2:46:2f:33:1f:9c:9e:3a:14:48:dc:97:32:79:19:cb:
5e:a5:ae:bc:a8:31:e4:5b:1a:2b:f2:4c:9c:48:54:7d:66:5f:
ea:40:e1:d3:35:14:38:45:66:b2:cf:be:bc:5c:ac:84:6a:2f:
c8:49:22:d4:26:84:cb:82:41:b5:0e:fe:b7:21:7b:53:f9:dc:
75:4a:ec:08:cd:41:05:e5:3e:e3:48:0b:dc:ba:20:5a:12:9a:
16:2d:6f:c8:6b:b0:1e:d3:4e:73:0c:7c:b3:58:d3:d1:fa:bd:
ca:f8:73:c9:83:a8:db:73:01:c3:58:2e:7e:75:f6:86:f5:7a:
90:3a:53:c4:b3:4e:3f:2d:38:82:44:00:bc:0f:ef:27:e0:af:
59:4c:e7:19:61:4d:55:c4:70:c6:1c:b0:07:48:79:39:1f:95:
d1:11:85:60:91:64:62:f2:fb:7f:9a:a6:7d:b9:e7:94:1f:48:
7d:65:27:7b:ec:75:fc:ae:01:c7:5e:c5:76:78:24:ca:e4:21:
2d:72:ed:72:39:00:b6:79:49:72:bc:06:81:72:28:2b:f8:63:
a3:b9:cc:b4:13:f6:95:db:38:f7:94:87:ce:a2:7f:63:40:63:
5c:a8:1e:4c:91:ed:21:2d:cc:09:4e:5d:5d:59:46:f1:48:24:
00:f9:02:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org