Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/u72SmmfdTeSrP02gHorIP3y9vwo.roa
File: u72SmmfdTeSrP02gHorIP3y9vwo.roa (raw, json)
Hash identifier: nFCotRY5Sej4sBD0k+yxiKGNWeBkUD60z46OTDqlx4U=
Subject key identifier: BB:BD:92:9A:67:DD:4D:E4:AB:3F:4D:A0:1E:8A:C8:3F:7C:BD:BF:0A
Certificate issuer: /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial: 3B
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/u72SmmfdTeSrP02gHorIP3y9vwo.roa
Signing time: Thu 13 Apr 2023 09:53:11 +0000
ROA not before: Thu 13 Apr 2023 09:53:11 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9607
IP address blocks: 2001:370::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Validity
Not Before: Apr 13 09:53:11 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=BBBD929A67DD4DE4AB3F4DA01E8AC83F7CBDBF0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:e5:73:e0:5f:79:d4:e6:00:f5:18:7f:c2:
d4:c8:3a:ba:4b:5c:e6:78:25:a6:7b:27:35:ee:bc:
b8:3f:cd:c7:ea:fa:07:b3:0b:5a:23:54:d8:39:e2:
61:d3:a7:c8:ef:73:85:66:b6:36:b2:19:08:2e:66:
4e:5a:07:5c:80:66:3c:f0:d2:3e:32:d1:26:8f:bf:
7e:7c:f5:e4:a9:0b:ec:a0:bd:e1:8e:52:cf:b5:e2:
cf:63:4a:b0:00:60:1c:f6:38:22:de:ba:d8:80:39:
20:6e:20:30:77:aa:2f:8f:56:8c:b6:d3:99:c9:54:
d4:64:f4:96:44:e3:5c:0a:ad:7d:93:eb:e5:11:f3:
77:db:fe:e4:7b:5b:76:2e:ff:9d:97:f9:de:6d:bd:
2a:76:c0:aa:97:6e:dc:b1:88:69:39:07:14:90:bf:
c3:95:52:9e:90:16:e9:c9:c4:be:ac:41:30:18:6d:
57:56:4d:dc:18:a7:5f:53:a1:98:84:3b:13:9e:44:
5b:ef:6e:a7:18:ed:23:7b:dc:99:df:86:21:8e:21:
c5:23:a4:33:9e:d6:50:d1:b1:6a:ec:a4:17:3f:01:
4c:b6:b8:99:98:61:65:de:9d:81:2d:6e:16:74:24:
b4:eb:f4:bf:0e:01:70:f9:ad:79:0f:3c:2f:91:20:
2c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BD:92:9A:67:DD:4D:E4:AB:3F:4D:A0:1E:8A:C8:3F:7C:BD:BF:0A
X509v3 Authority Key Identifier:
keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/u72SmmfdTeSrP02gHorIP3y9vwo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:370::/32
Signature Algorithm: sha256WithRSAEncryption
34:51:d2:40:4e:3a:28:30:49:9a:5d:a0:af:35:d7:1f:89:c9:
4f:c1:96:21:77:5e:3d:dc:eb:3c:0c:8d:a8:ec:fc:fc:e0:40:
74:1e:a9:d7:0d:76:8c:cb:1a:a3:3a:8b:15:60:14:41:d4:cc:
59:df:1e:56:09:4b:45:a9:03:d3:75:19:fc:e8:7d:62:cc:27:
4e:bd:11:a8:7e:b5:12:2d:e8:41:01:6d:78:00:b2:20:60:05:
b0:6b:fb:5f:97:bd:34:2b:b7:77:2b:e5:7d:c1:31:68:97:92:
f9:7f:b5:00:72:6c:d6:2a:d9:85:d7:05:16:f8:ce:ed:2c:9b:
09:25:e8:d0:98:c7:11:57:b7:75:09:9d:bb:cc:c7:17:16:e1:
4b:4a:b3:42:5b:c1:b3:a7:42:18:29:a6:28:d3:92:fe:41:33:
07:3b:12:43:46:73:8b:24:aa:5c:23:f9:44:bc:e2:6c:ae:db:
52:95:7d:6f:bb:60:31:8a:61:7f:14:bf:18:8e:c0:76:81:06:
2c:a4:0c:92:26:bf:9d:f4:18:9e:40:1e:5e:7a:6b:00:38:16:
6b:06:22:c8:33:b1:21:f3:9a:d9:6d:8f:c3:11:a7:07:6d:26:
82:cd:9d:32:3c:78:bd:d7:46:3a:f0:64:f3:41:f8:7b:24:e7:
3b:1b:42:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org