Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qs1HdnbIvq8nXI5aBFA3YakVhbY.roa
File: qs1HdnbIvq8nXI5aBFA3YakVhbY.roa (raw, json)
Hash identifier: B3Qa5lTzFP9Lc2XWzSb7QI7PowaSWwAbMaK8fOSXVWY=
Subject key identifier: AA:CD:47:76:76:C8:BE:AF:27:5C:8E:5A:04:50:37:61:A9:15:85:B6
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: BB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qs1HdnbIvq8nXI5aBFA3YakVhbY.roa
Signing time: Tue 30 May 2023 16:08:28 +0000
ROA not before: Tue 30 May 2023 16:08:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:5900::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 16:08:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=AACD477676C8BEAF275C8E5A04503761A91585B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:45:a2:94:6a:d5:e2:55:7a:8f:8c:81:12:
ca:8a:dd:73:d6:f6:ca:06:16:36:76:8a:17:77:c4:
08:2c:08:78:c2:4f:7f:ff:8b:db:4e:a3:57:e7:29:
43:b5:2f:66:39:53:49:c6:01:0d:f2:47:95:84:ed:
56:ff:ba:51:3b:bb:f5:bb:34:eb:cd:87:f6:6d:d2:
23:31:d7:05:f4:a9:d0:c5:10:40:33:47:7c:8d:9f:
ef:95:98:49:22:a4:54:7a:38:f6:18:2c:5a:22:b7:
ef:1c:5e:08:3e:e5:33:8c:75:e8:4a:84:64:58:9c:
99:a2:a9:da:14:5b:68:53:49:93:71:3b:24:17:2f:
79:b5:89:17:cf:1c:88:6c:ce:71:58:5f:25:ad:e3:
f7:e6:c7:e7:af:29:cc:11:e7:50:ac:ff:7a:73:53:
2a:2c:12:ac:54:83:ce:b3:90:ae:07:33:3a:a8:61:
cc:2d:18:45:d1:c0:3d:e5:10:09:10:25:6a:d5:42:
22:e5:1f:aa:75:29:b1:8e:4f:b3:44:80:c7:b4:3b:
06:99:2a:ab:76:4b:f8:f2:b5:15:31:83:c1:05:17:
51:14:46:3d:38:f8:5d:0f:51:8d:f2:05:d1:ec:21:
16:96:05:0e:34:eb:c9:0f:5e:4c:b3:00:30:05:f9:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CD:47:76:76:C8:BE:AF:27:5C:8E:5A:04:50:37:61:A9:15:85:B6
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qs1HdnbIvq8nXI5aBFA3YakVhbY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:5900::/40
Signature Algorithm: sha256WithRSAEncryption
76:b2:ff:49:47:bf:4f:75:d7:2b:a6:55:68:8d:27:40:9a:60:
d5:b5:81:45:02:ca:ac:4a:10:a7:2e:6b:ce:9e:c6:c1:7a:fe:
09:35:60:a0:51:cf:5e:3b:00:92:f1:61:25:52:86:60:ae:20:
0f:b8:b6:50:b4:0a:fa:0c:d8:36:5c:78:79:62:ec:b1:e5:26:
a5:33:85:c7:89:09:81:c0:8e:3e:de:83:8d:e8:c2:6d:42:89:
f3:4b:d1:02:f0:9b:eb:ce:83:b5:f2:c8:3a:f0:ea:9e:73:38:
1f:6e:f3:71:9d:95:8a:cb:7c:ca:99:dd:be:63:cc:43:0f:27:
ac:50:59:86:df:55:9c:fa:3a:1f:22:40:2b:e4:70:74:97:7d:
15:f3:96:e3:41:43:cd:89:f1:9c:77:76:10:cb:4c:5f:46:ad:
c0:bf:70:8f:f6:7f:68:39:39:af:c6:28:3f:57:a8:f9:a8:ad:
87:90:7a:1e:33:72:c4:a4:02:0b:07:ab:29:74:fc:29:eb:3a:
0d:99:ef:8f:5a:79:0b:60:ff:af:f8:06:7c:bb:c9:f0:dc:38:
d5:dd:33:30:65:2b:38:d0:6b:f5:3a:88:3a:67:de:1f:d4:f6:
14:cd:e2:0f:e4:6d:e9:d7:41:1f:b2:55:2d:1c:46:3a:c2:8b:
33:30:74:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org