Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/2niKdsCcpU4A1Ar5QSI4XefQRsU.roa
File: 2niKdsCcpU4A1Ar5QSI4XefQRsU.roa (raw, json)
Hash identifier: 6W8bYzQKdnbOmJzm28O1+f6TpNGuq+ruNF+/XvZ2/Oo=
Subject key identifier: DA:78:8A:76:C0:9C:A5:4E:00:D4:0A:F9:41:22:38:5D:E7:D0:46:C5
Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial: 48
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/2niKdsCcpU4A1Ar5QSI4XefQRsU.roa
Signing time: Tue 24 May 2022 01:25:04 +0000
ROA not before: Tue 24 May 2022 01:25:04 +0000
ROA not after: Mon 15 May 2023 01:30:04 +0000
asID: 10010
IP address blocks: 2406:bb00::/29 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
Validity
Not Before: May 24 01:25:04 2022 GMT
Not After : May 15 01:30:04 2023 GMT
Subject: CN=DA788A76C09CA54E00D40AF94122385DE7D046C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:69:02:b3:b5:04:24:71:4f:1b:76:19:38:
e1:74:f1:38:55:2c:ab:b1:4b:36:87:9c:e8:35:94:
80:63:2e:ef:e7:a2:dd:92:94:b5:9d:92:80:c8:88:
0c:e0:fc:80:a7:78:79:18:0b:98:ba:30:6d:d6:8a:
05:3a:f3:f0:23:ff:15:bd:24:31:f5:f1:69:82:23:
33:56:9d:a0:8f:55:b1:1d:8b:08:ac:ec:ce:78:75:
84:78:05:2d:0f:10:5d:c5:24:2c:4c:52:d8:c7:21:
26:92:73:08:d7:7a:e0:51:46:af:8e:51:8c:16:db:
79:df:62:66:d5:69:bd:47:2b:a4:0f:16:e4:b1:58:
bf:de:d3:48:92:49:d2:41:63:5d:63:18:b0:e4:40:
0d:97:5b:05:6f:b1:3b:b3:b3:51:24:aa:a3:f3:fa:
f4:a2:a7:f0:7f:85:4a:07:4c:5b:87:f9:3f:4c:5e:
f6:97:5d:57:1e:18:0b:d4:29:38:a0:d7:9e:4f:d9:
bf:5d:52:77:7a:71:9e:a4:df:b8:63:8e:73:8e:c5:
b1:48:d5:bf:da:13:4d:91:7f:df:d8:b6:df:9d:e0:
a6:68:57:48:62:a7:f6:e2:f6:ae:82:a8:5f:27:dc:
8b:3c:e3:89:18:07:05:10:40:20:34:bb:9a:e9:b0:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:78:8A:76:C0:9C:A5:4E:00:D4:0A:F9:41:22:38:5D:E7:D0:46:C5
X509v3 Authority Key Identifier:
keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/2niKdsCcpU4A1Ar5QSI4XefQRsU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:bb00::/29
Signature Algorithm: sha256WithRSAEncryption
32:31:74:85:81:57:3f:28:08:68:ca:c2:a1:c3:79:ed:eb:32:
7b:67:29:2d:8d:0c:99:16:ab:2b:a5:e1:cb:c9:69:ce:b6:51:
01:59:ab:3e:93:1b:da:79:04:dc:98:20:e3:1a:b9:82:3b:5c:
83:d3:93:47:33:31:de:ca:11:e7:53:c4:48:59:d9:42:46:93:
1d:89:03:7a:22:60:52:1c:00:79:52:b1:a9:9a:59:64:8c:45:
3e:41:a7:86:4c:76:16:3c:f0:dd:fc:83:c9:48:b9:80:64:53:
91:b1:58:14:9c:df:46:2b:05:17:4a:05:81:12:12:eb:e5:d4:
52:1a:71:07:6f:e0:e6:4e:1e:9b:e6:9d:72:b7:27:6e:01:79:
28:5c:80:2e:f1:58:c2:e4:60:6b:7b:b9:6d:ae:26:98:e4:e2:
48:fc:29:e3:5f:65:1f:23:01:ac:5d:54:a8:dd:e4:23:57:90:
63:7c:f7:a3:c2:e9:5e:d8:f7:4a:91:4c:8d:b8:02:02:e0:58:
4b:ed:5e:cf:b5:07:4f:d0:8c:7e:7b:e5:65:de:b7:e3:8b:8e:
3a:9c:de:ff:18:e3:e9:51:74:c4:cf:11:5b:6f:d8:d0:48:6a:
e6:87:b1:e1:ac:53:c4:23:58:ec:37:5e:cc:d2:89:52:ef:33:
bf:63:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org