Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30319/7qFfUH4wnPKhcmW7DpzLFGbJE8Y.roa
File: 7qFfUH4wnPKhcmW7DpzLFGbJE8Y.roa (raw, json)
Hash identifier: J29ptPikDF+mpr4fTlZqDjRz9BmADF5ht2T+5+G6tCg=
Subject key identifier: EE:A1:5F:50:7E:30:9C:F2:A1:72:65:BB:0E:9C:CB:14:66:C9:13:C6
Certificate issuer: /CN=AFF61F445B6F8E921C7D767B3B676BF669816F6C
Certificate serial: 02
Authority key identifier: AF:F6:1F:44:5B:6F:8E:92:1C:7D:76:7B:3B:67:6B:F6:69:81:6F:6C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/7qFfUH4wnPKhcmW7DpzLFGbJE8Y.roa
Signing time: Fri 30 Sep 2022 02:25:58 +0000
ROA not before: Fri 30 Sep 2022 02:25:58 +0000
ROA not after: Sat 30 Sep 2023 02:16:37 +0000
asID: 131161
IP address blocks: 2400:53e0::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFF61F445B6F8E921C7D767B3B676BF669816F6C
Validity
Not Before: Sep 30 02:25:58 2022 GMT
Not After : Sep 30 02:16:37 2023 GMT
Subject: CN=EEA15F507E309CF2A17265BB0E9CCB1466C913C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:fc:06:ce:5f:fe:5b:72:4d:94:db:6b:1d:
bf:41:4c:6f:ee:30:a9:45:49:c0:cf:f5:d9:1e:bb:
ce:bf:40:8d:a2:46:4a:c8:2b:58:e9:16:47:31:df:
88:65:ed:7e:a3:86:a9:3d:49:65:2c:ae:13:6d:3d:
34:f6:32:00:8a:49:43:0d:5b:b9:5d:9f:94:c9:75:
ca:f4:6b:16:39:e5:47:f5:0f:ee:de:d4:42:46:e2:
61:34:7f:56:1d:90:9d:ac:69:a0:14:16:c4:1d:08:
cd:52:c8:ba:35:9e:5a:23:73:b0:83:f6:c7:aa:f7:
58:d7:4c:25:dd:86:d5:54:c9:88:85:6d:00:e1:45:
08:01:66:6a:40:a1:5c:1c:f7:0b:c4:18:fc:86:2e:
72:3f:37:dc:fe:99:d1:2c:c6:43:37:57:b5:de:37:
05:16:68:6c:19:0a:cf:04:1c:f6:09:f8:66:4c:be:
37:a9:57:bc:ee:34:bf:43:28:de:2c:99:40:71:b5:
fe:a5:16:f9:83:d3:46:94:3a:87:f0:5f:65:7f:00:
52:81:ae:d0:92:9c:96:b6:cf:59:b3:17:07:6d:62:
f0:cb:be:b3:73:f6:4c:b0:8c:88:b2:db:a9:70:45:
69:74:37:42:f1:29:b5:0a:8a:8f:68:34:db:28:51:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A1:5F:50:7E:30:9C:F2:A1:72:65:BB:0E:9C:CB:14:66:C9:13:C6
X509v3 Authority Key Identifier:
keyid:AF:F6:1F:44:5B:6F:8E:92:1C:7D:76:7B:3B:67:6B:F6:69:81:6F:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/7qFfUH4wnPKhcmW7DpzLFGbJE8Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:53e0::/32
Signature Algorithm: sha256WithRSAEncryption
a7:26:83:91:13:d5:ee:4e:32:a6:67:20:1c:cc:3e:06:f4:b8:
60:bf:62:a0:17:10:14:e4:6c:f8:f1:3a:3a:94:6d:82:32:f8:
96:e8:79:90:be:10:a7:9d:de:38:de:09:f1:cb:21:9c:9e:a9:
55:45:ed:21:b5:66:2b:e7:a9:b3:21:3d:45:0a:75:b2:dc:53:
35:50:cd:8a:12:c1:ee:ed:b1:35:d7:4c:f0:0d:3f:20:c3:47:
7b:98:03:45:24:0b:d8:3a:aa:51:15:07:df:ee:83:a3:81:5b:
89:9b:27:ca:73:b7:af:47:e3:e0:c6:f3:cc:0d:52:1f:5c:b4:
5e:eb:31:d8:61:11:bf:e3:e0:9f:6c:f6:ea:d3:e1:aa:1f:b7:
65:18:dd:d4:e2:75:a4:52:13:ea:01:b3:1e:71:2b:34:b7:64:
d8:5d:21:fd:1b:60:28:ed:72:b5:31:f6:73:46:be:07:9b:b1:
f4:18:da:5f:a8:50:6e:0f:d8:b8:42:7e:f0:02:47:d6:e7:e9:
ae:53:66:3f:ca:5e:28:da:b0:24:50:9e:ba:d6:14:9e:f4:5a:
57:ba:74:23:cb:1d:75:3a:6c:6f:94:17:7a:27:cd:31:a2:a1:
b3:35:24:01:f1:f6:d7:77:82:32:c6:0b:9d:e0:6e:2a:ab:d0:
08:c6:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org