Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qO4vc37IKid8_bcR4RkxAFodvRM.roa
File: qO4vc37IKid8_bcR4RkxAFodvRM.roa (raw, json)
Hash identifier: xlfdzQkDqWz1UnB+1PEvG2I+nOk3zEoZ3VJeqnYda6M=
Subject key identifier: A8:EE:2F:73:7E:C8:2A:27:7C:FD:B7:11:E1:19:31:00:5A:1D:BD:13
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 024E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qO4vc37IKid8_bcR4RkxAFodvRM.roa
Signing time: Tue 06 Jun 2023 17:01:20 +0000
ROA not before: Tue 06 Jun 2023 17:01:20 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:2:ccc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Jun 6 17:01:20 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=A8EE2F737EC82A277CFDB711E11931005A1DBD13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:48:d0:24:97:fc:cb:6e:2b:63:b3:7b:86:
66:7e:d9:70:0a:51:a1:2e:72:27:89:25:af:e3:00:
e4:a1:f3:53:05:36:05:84:34:0f:34:9a:e9:d7:3e:
74:73:ec:17:5e:ee:0f:29:0c:fb:26:27:49:f9:05:
18:d0:85:20:68:3d:f7:1c:fb:ad:62:4a:cf:0b:aa:
32:49:12:eb:ac:d8:62:a8:79:c5:5c:c1:65:ca:86:
36:67:90:b8:46:26:e9:49:e6:81:c5:57:cd:02:ab:
e4:c3:6a:e6:c1:81:81:7e:a8:c9:0d:c4:61:33:21:
74:2c:e3:63:2c:f9:f2:68:28:86:f8:0a:8c:a8:76:
ef:b7:8a:01:7a:7f:1e:2b:31:e7:fa:ae:9a:1e:7d:
0d:4c:88:fb:36:9e:3a:90:11:b6:b4:e1:b8:8b:cf:
7b:ce:eb:b2:03:ee:06:b0:7e:4f:54:6c:2f:56:dd:
42:3a:71:9c:8b:f8:e4:4a:31:d8:03:c7:15:9f:d6:
98:29:17:f2:89:80:60:ce:98:92:ce:65:d2:26:20:
d2:6f:be:23:20:37:78:ec:e9:b1:18:7c:f4:a7:03:
c4:ea:42:ef:ad:a7:e4:0e:7c:73:93:38:75:6f:1c:
95:6d:22:dd:eb:62:f9:3c:ac:d7:26:d0:5d:e4:84:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EE:2F:73:7E:C8:2A:27:7C:FD:B7:11:E1:19:31:00:5A:1D:BD:13
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qO4vc37IKid8_bcR4RkxAFodvRM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:2:ccc::/48
Signature Algorithm: sha256WithRSAEncryption
c2:70:a7:94:e9:00:a9:e3:c9:d3:87:6b:d2:59:8a:fe:3f:20:
f7:38:3d:4a:46:39:44:cc:c4:bb:25:ad:9f:06:ef:22:c5:75:
3b:83:3e:3c:80:11:df:e9:fd:36:7c:f0:1f:24:f7:d6:13:77:
f8:c0:25:c5:a4:df:94:b3:75:f6:a5:f1:50:f2:b4:88:90:6f:
a5:84:aa:e2:78:13:9a:47:80:b8:38:49:cd:a6:9b:ec:fd:0a:
25:0a:b2:bf:e4:2c:14:8b:a5:9f:41:49:41:71:8b:81:27:02:
eb:a4:53:83:9f:71:2a:0d:8f:6f:27:fd:58:d2:42:88:cc:76:
d7:0e:74:dc:a9:f9:18:c4:20:85:b3:3c:13:a4:0f:d3:3d:ec:
ec:d2:9c:81:36:9c:8e:7a:0f:df:3c:73:b5:dc:50:d4:9b:5a:
21:72:c0:c7:b6:92:ac:bb:18:a8:ef:5c:f6:d8:f0:82:8f:4d:
24:93:df:1c:7e:50:fd:ed:72:f1:03:f1:99:b9:a0:4d:df:e9:
02:54:b3:d0:65:85:19:a0:0f:f7:1c:b4:a2:77:53:1d:d9:f2:
57:34:af:d1:a0:85:a2:6f:6f:23:9d:5a:12:42:b2:ee:af:4b:
ea:2e:09:39:ad:97:05:40:4c:7c:a2:69:a1:aa:44:ac:f2:4c:
61:21:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org