Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30400/ZLAiOMyAPhSUXYydVf5MAfnMmQE.roa
File: ZLAiOMyAPhSUXYydVf5MAfnMmQE.roa (raw, json)
Hash identifier: k0MItGv41ofpWnZ0LLUU1BnZ7Mwif9WeZisL+r2PdH0=
Subject key identifier: 64:B0:22:38:CC:80:3E:14:94:5D:8C:9D:55:FE:4C:01:F9:CC:99:01
Certificate issuer: /CN=0DEDB24B5E5CDA80EA9BD8D00BE27AA0804EA808
Certificate serial: 02
Authority key identifier: 0D:ED:B2:4B:5E:5C:DA:80:EA:9B:D8:D0:0B:E2:7A:A0:80:4E:A8:08
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/De2yS15c2oDqm9jQC-J6oIBOqAg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/ZLAiOMyAPhSUXYydVf5MAfnMmQE.roa
Signing time: Thu 31 Mar 2022 08:51:40 +0000
ROA not before: Thu 31 Mar 2022 08:51:40 +0000
ROA not after: Fri 31 Mar 2023 08:43:50 +0000
asID: 63784
IP address blocks: 2406:ab40::/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DEDB24B5E5CDA80EA9BD8D00BE27AA0804EA808
Validity
Not Before: Mar 31 08:51:40 2022 GMT
Not After : Mar 31 08:43:50 2023 GMT
Subject: CN=64B02238CC803E14945D8C9D55FE4C01F9CC9901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:f4:3a:03:c1:f4:ca:06:17:9f:7f:92:4e:
4b:a8:3d:1b:e2:39:2e:71:22:31:90:d8:65:8d:e7:
88:61:dd:7d:e3:fa:a4:32:cb:46:9a:8a:94:c5:86:
78:1a:15:2c:1d:2f:3f:c7:69:a0:eb:ca:aa:03:91:
e1:ff:b9:26:c2:61:65:0b:e6:0c:93:04:26:fc:3c:
c8:24:24:63:90:7b:c1:9c:83:cc:28:a1:c0:c2:e7:
67:30:ae:06:04:fe:8e:c8:35:65:6b:3e:d4:23:f2:
c4:56:06:3a:16:0e:17:9b:e2:32:e4:46:f5:12:90:
05:0d:47:dd:61:7b:29:87:0b:e9:18:cc:dd:a2:3a:
1b:d8:58:f2:ec:a3:0a:21:cb:7f:95:59:6b:b9:0a:
f6:8b:71:e4:13:ac:12:a8:f2:24:cb:41:86:c3:4c:
43:92:68:2f:aa:0d:8b:58:fd:b4:9b:27:f8:0f:7b:
df:4e:35:b8:07:28:a0:ef:35:79:58:47:20:f4:91:
5c:e6:70:10:e1:f6:ab:44:d1:6e:2c:1a:a0:eb:1a:
79:a0:ad:a0:b0:c7:b3:71:6b:fb:e9:7e:80:8d:ce:
cc:5e:56:57:a8:bc:9b:85:f8:ff:93:70:27:de:6e:
60:6b:0c:00:03:e0:95:fa:ad:98:a5:e7:df:eb:e9:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B0:22:38:CC:80:3E:14:94:5D:8C:9D:55:FE:4C:01:F9:CC:99:01
X509v3 Authority Key Identifier:
keyid:0D:ED:B2:4B:5E:5C:DA:80:EA:9B:D8:D0:0B:E2:7A:A0:80:4E:A8:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/De2yS15c2oDqm9jQC-J6oIBOqAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/De2yS15c2oDqm9jQC-J6oIBOqAg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/ZLAiOMyAPhSUXYydVf5MAfnMmQE.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:ab40::/28
Signature Algorithm: sha256WithRSAEncryption
1d:c9:c0:34:6b:9d:47:cf:2f:78:75:66:d6:6e:8c:a2:ea:45:
5e:4a:ca:11:e8:d7:fb:0a:b6:4b:9d:7a:df:97:9c:ac:83:47:
59:36:01:18:75:77:2f:8d:f9:d5:8c:67:28:84:7b:e6:a6:2c:
d7:ba:af:a5:93:32:ce:7c:bf:32:62:6a:0d:7d:59:4d:8c:fd:
93:85:9f:06:31:0b:5f:c3:f1:3d:94:75:6b:07:33:48:b6:da:
53:b8:ed:73:a4:6e:50:0f:79:58:9f:05:98:a7:34:74:3c:ce:
f8:61:8c:42:c2:ec:06:3c:c6:82:ab:3b:77:09:a0:a1:4c:a3:
2f:de:62:c3:44:0f:98:f7:0c:7a:eb:04:5a:91:23:5e:f3:f0:
08:75:10:59:dc:d8:d6:44:00:ba:8c:dd:75:d5:ae:bf:2b:c9:
26:e2:be:5f:b6:99:b2:9c:c6:b4:bd:ac:5b:d0:43:4b:a0:04:
07:af:d8:c6:4b:d9:46:d9:c9:43:cd:17:10:6b:29:0a:7d:4b:
81:fd:60:d3:fc:9d:9b:53:3c:17:61:50:99:89:84:fd:e8:32:
31:34:50:db:f4:f5:18:53:41:04:49:a6:5f:eb:60:54:d1:2b:
3c:1a:40:17:28:e0:8a:e6:36:17:47:77:2d:56:30:71:0a:14:
99:05:e9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org