Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30155/HVYAXebSplfTZxezIqHIj__NbQ8.roa
File: HVYAXebSplfTZxezIqHIj__NbQ8.roa (raw, json)
Hash identifier: 29neHgu+n+fgSHwTyrKZsmITj+cY3ZxxUinbwjVb7pI=
Subject key identifier: 1D:56:00:5D:E6:D2:A6:57:D3:67:17:B3:22:A1:C8:8F:FF:CD:6D:0F
Certificate issuer: /CN=540D04AB978801867F711546D16FB476A278FC9A
Certificate serial: 3E
Authority key identifier: 54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/HVYAXebSplfTZxezIqHIj__NbQ8.roa
Signing time: Thu 13 Apr 2023 09:52:41 +0000
ROA not before: Thu 13 Apr 2023 09:52:41 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 55391
IP address blocks: 2404:8e00::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540D04AB978801867F711546D16FB476A278FC9A
Validity
Not Before: Apr 13 09:52:41 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=1D56005DE6D2A657D36717B322A1C88FFFCD6D0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5c:4b:04:8f:83:01:89:e5:76:43:e8:b8:ba:
f1:4f:bc:48:cb:d1:72:92:04:c7:fa:fc:19:b5:49:
8f:53:e1:20:6f:5f:07:bf:a1:85:b2:c9:0c:2c:7f:
74:49:e4:77:06:94:2f:94:a3:4c:26:e2:bc:61:b7:
a5:02:75:6d:77:9a:11:bb:5b:fa:b8:68:52:43:30:
e5:99:51:08:1f:71:86:a9:5f:50:b3:93:f5:64:7d:
0c:49:e9:b9:53:47:4d:70:43:1c:b7:33:08:6c:7b:
41:a7:35:2a:d3:b7:ce:3b:39:50:23:28:97:1e:2a:
41:3a:75:7b:8b:71:fe:31:0a:9a:75:2b:d5:dc:31:
bb:6e:a6:12:e8:36:21:16:51:62:fc:db:54:d2:d4:
4d:7f:e7:b9:7e:f8:a9:e0:9a:ea:a4:82:e4:07:b6:
60:9c:d6:1a:e9:cb:c0:e9:4e:c8:96:3a:cc:8e:c8:
35:95:20:ee:6c:9e:52:73:43:b7:ed:73:78:79:52:
49:e8:38:da:60:75:ea:b8:68:6c:38:c6:a9:d6:9f:
4a:7b:8a:33:28:f4:01:71:89:69:1a:d9:8f:52:5d:
f2:b1:e7:e8:f8:49:b3:4e:2f:9c:c6:4a:95:58:e8:
5f:5d:99:a3:e4:81:78:1d:74:b4:95:b7:f2:6d:a8:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:56:00:5D:E6:D2:A6:57:D3:67:17:B3:22:A1:C8:8F:FF:CD:6D:0F
X509v3 Authority Key Identifier:
keyid:54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/HVYAXebSplfTZxezIqHIj__NbQ8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:8e00::/32
Signature Algorithm: sha256WithRSAEncryption
64:88:74:6d:0c:e4:09:f8:1d:e4:d8:4b:b8:68:e6:67:3f:aa:
64:66:39:98:70:39:93:06:ca:9a:32:7f:8a:41:3a:47:a2:cb:
ca:f6:49:d9:b5:11:e6:27:83:60:77:40:ea:69:c4:f8:82:e7:
10:64:93:c0:63:c9:03:58:7d:3f:49:05:79:94:fb:48:83:13:
99:33:5a:2d:01:29:bc:e2:3e:03:0a:ba:99:8a:78:87:b9:f1:
b9:72:37:f6:42:96:10:87:20:9e:bd:e5:aa:d1:cf:77:a6:93:
d4:59:2b:58:1b:9a:d1:22:ff:55:f8:5b:16:91:b6:3f:e1:4b:
90:de:ee:68:3f:5c:72:03:72:b4:17:e7:a5:4a:e4:ee:74:b9:
00:19:e8:18:6e:6c:04:34:ab:9c:c3:45:9a:f2:2c:db:14:16:
a2:5c:23:ce:d0:1b:a8:43:3c:79:9b:94:11:c7:ed:91:28:a6:
2d:77:8b:cf:6b:7d:f3:77:0e:56:89:bd:8c:af:d8:f3:14:37:
97:9c:f1:7d:14:a7:b5:60:d5:c8:f3:d9:2a:45:bb:51:a7:59:
97:fc:23:18:b5:c0:95:85:ae:17:92:11:17:38:6f:c4:00:c8:
4b:86:52:eb:34:5d:24:90:95:a0:83:5d:4c:08:6c:a0:ab:a0:
9c:63:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:19 2025 by rpki-client