Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30286/yc23bah55kzlNR4Rxd8zUdy-AXQ.roa
File: yc23bah55kzlNR4Rxd8zUdy-AXQ.roa (raw, json)
Hash identifier: B3oCzxFHoIqGv3bB6pZ+Hh/sKc4aRfm2xZwLWgrQzr8=
Subject key identifier: C9:CD:B7:6D:A8:79:E6:4C:E5:35:1E:11:C5:DF:33:51:DC:BE:01:74
Certificate issuer: /CN=0CE9148428894A9D99226AC1F46D15383D64D856
Certificate serial: 12
Authority key identifier: 0C:E9:14:84:28:89:4A:9D:99:22:6A:C1:F4:6D:15:38:3D:64:D8:56
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DOkUhCiJSp2ZImrB9G0VOD1k2FY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/yc23bah55kzlNR4Rxd8zUdy-AXQ.roa
Signing time: Wed 01 Feb 2023 06:53:49 +0000
ROA not before: Wed 01 Feb 2023 06:53:49 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 23805
IP address blocks: 2405:fc80::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CE9148428894A9D99226AC1F46D15383D64D856
Validity
Not Before: Feb 1 06:53:49 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=C9CDB76DA879E64CE5351E11C5DF3351DCBE0174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:2a:82:a1:ae:eb:f6:4a:e1:15:3a:8a:b1:
10:fd:48:e7:e4:11:9b:0d:ad:cf:ab:ac:31:a5:fe:
c2:14:01:94:22:0b:e8:74:e2:6b:9f:c6:1f:a9:c0:
31:32:a3:10:fb:8f:bd:3d:1b:f3:a1:24:37:45:d0:
61:49:94:d9:4a:c4:16:a8:b1:19:19:40:f7:9d:9a:
2a:ad:75:4c:77:11:1d:5f:38:6e:bc:ee:3c:46:02:
b3:24:d0:96:f1:12:19:36:0f:d7:b5:22:11:9a:4b:
90:1d:c0:2b:e1:51:91:6a:be:19:7b:33:8b:07:2a:
88:fb:cb:36:df:62:b2:cb:9e:48:09:f7:22:98:0f:
26:48:43:62:7d:04:34:16:35:1b:9b:f8:18:2f:07:
74:57:dc:ed:11:ac:32:88:c7:12:f2:5a:27:55:2d:
60:e6:e6:7a:92:80:c4:d6:72:36:95:cf:41:a1:0c:
00:aa:8a:d4:fe:0b:cf:20:30:56:d8:4a:b8:cb:56:
3d:dd:f4:17:42:d7:a4:74:5b:a6:48:6a:b3:ce:55:
0f:54:66:8c:75:b8:61:4d:91:bd:27:cb:88:bd:5a:
98:fd:b4:92:b6:61:6f:ff:c1:88:52:70:23:7f:ca:
81:97:54:9b:e5:04:b1:ed:91:82:12:7d:83:85:98:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:B7:6D:A8:79:E6:4C:E5:35:1E:11:C5:DF:33:51:DC:BE:01:74
X509v3 Authority Key Identifier:
keyid:0C:E9:14:84:28:89:4A:9D:99:22:6A:C1:F4:6D:15:38:3D:64:D8:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/DOkUhCiJSp2ZImrB9G0VOD1k2FY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DOkUhCiJSp2ZImrB9G0VOD1k2FY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/yc23bah55kzlNR4Rxd8zUdy-AXQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:fc80::/32
Signature Algorithm: sha256WithRSAEncryption
22:91:1b:85:53:af:ba:bd:1a:16:35:f3:2f:73:49:d1:55:49:
92:13:5e:7a:04:d6:69:d4:24:1a:4a:71:c7:54:3d:24:6d:e6:
ec:e0:ec:6c:2c:d6:1d:64:12:28:a8:a9:b6:c1:d6:65:51:eb:
7c:f7:e9:80:64:ae:64:e1:c3:d1:b8:bf:9c:4c:5b:58:0f:db:
3a:ba:fc:3d:88:b4:b8:78:09:a1:a8:9c:7d:89:74:4e:42:5f:
12:6f:ca:1b:42:12:a1:12:b4:4f:95:4f:dd:48:47:3c:c6:6b:
d8:02:b0:e8:0b:5b:a0:e3:00:3e:78:c1:af:8e:55:31:e5:bc:
78:50:35:4f:64:6b:96:50:7c:31:48:c5:3f:42:9f:3b:86:6c:
80:d0:e3:d8:5b:95:8b:85:62:e3:b9:cf:1e:60:8c:53:d6:3a:
73:88:25:28:8e:bb:d2:bd:5d:43:68:2d:36:db:d4:e0:c1:9c:
9c:a7:83:a1:40:6d:35:cc:bc:c4:72:55:62:2f:25:90:9d:e5:
be:f2:9f:5c:14:54:e8:db:e3:9b:1d:ec:c4:38:41:4d:64:d7:
65:00:19:43:a3:25:70:f1:8c:0b:64:14:c8:e3:7e:3e:8e:da:
c7:6d:bf:4f:dd:e8:a4:39:c7:52:e9:5d:90:0b:c0:c4:f9:8d:
50:11:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org