Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LCuPG28539qfNJZKR9olpZdH9Nw.roa
File: LCuPG28539qfNJZKR9olpZdH9Nw.roa (raw, json)
Hash identifier: un+Gi29t40w0MS9u/7K+rtMDNAwMriVfXZaBqTZ5Xxk=
Subject key identifier: 2C:2B:8F:1B:6F:39:DF:DA:9F:34:96:4A:47:DA:25:A5:97:47:F4:DC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: D5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LCuPG28539qfNJZKR9olpZdH9Nw.roa
Signing time: Wed 24 May 2023 16:02:20 +0000
ROA not before: Wed 24 May 2023 16:02:20 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:02:20 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=2C2B8F1B6F39DFDA9F34964A47DA25A59747F4DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:db:e9:bc:8d:08:4b:26:d1:c4:c4:70:df:
af:bc:53:cf:88:00:de:b0:65:b3:01:8b:a5:01:fb:
75:4e:3c:d9:54:79:07:c7:f3:85:49:09:dd:64:b1:
93:4c:f7:66:9e:d9:6d:16:2f:28:05:46:43:c9:b9:
b7:1d:a0:f6:85:51:5b:b5:27:d0:5d:cb:ff:27:e6:
2a:c7:f1:7d:3f:e8:d8:be:37:f1:bf:7f:8e:77:8a:
7a:97:2f:fb:9d:3e:3c:89:be:30:a2:43:ef:b2:08:
06:12:d2:ef:45:39:c5:3d:29:20:63:7c:b4:20:ec:
05:b2:71:d8:2b:d6:8a:c7:ad:61:47:15:70:b1:0c:
dc:5d:b8:e3:9c:31:22:bf:c0:69:61:32:9f:95:ff:
6d:30:8c:49:dc:73:ca:32:71:ab:40:88:77:f9:74:
c4:ee:6f:40:a1:fc:b6:69:27:84:40:19:18:e2:72:
b0:ca:0e:49:c3:bf:b4:a1:52:40:41:ac:a3:0a:7e:
43:6f:1e:19:80:bf:d2:6e:73:fa:84:72:de:99:51:
98:f6:07:76:c5:e7:5e:28:9f:1f:88:9a:e5:23:02:
54:b8:66:5f:2e:7b:bf:a0:cb:5f:79:d8:f0:7c:50:
ab:d0:86:70:f8:9a:e1:03:ed:77:c7:ef:7e:2c:7b:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:8F:1B:6F:39:DF:DA:9F:34:96:4A:47:DA:25:A5:97:47:F4:DC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LCuPG28539qfNJZKR9olpZdH9Nw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.228.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:5f:47:e4:ea:9a:02:30:bc:fc:77:50:d3:94:bb:0d:fd:4a:
5a:b4:f3:7b:6d:76:3f:ab:85:bf:68:f7:4e:e4:da:7e:86:b2:
e6:c7:ae:9d:28:d8:b1:cc:5a:05:3c:6c:54:35:28:b0:86:60:
43:d6:ab:75:82:88:31:15:82:1a:bc:17:44:87:e4:de:8c:e3:
7e:b8:a7:da:94:3b:a0:07:e3:1d:a5:e3:e4:0b:b9:7d:a3:50:
74:07:b2:f0:52:31:f3:d1:b1:4c:67:00:53:82:d7:2e:1e:16:
b5:44:5c:41:49:d4:3a:a5:77:13:26:9a:d8:76:52:26:f6:e4:
67:f2:83:a3:6f:b1:85:02:61:e6:54:73:73:4f:29:53:9f:16:
8a:f7:4e:a7:ec:37:25:a1:61:a6:b0:11:5e:6c:b6:86:34:c2:
7d:08:7c:2b:c6:3c:af:78:30:98:2b:e9:3c:fd:87:70:27:d6:
b4:5f:fa:7d:f5:39:88:e5:13:23:0d:de:e2:e6:ea:c0:d9:17:
02:33:2f:4e:35:d4:58:2c:3b:56:a5:1f:fe:22:02:05:12:77:
81:88:6a:63:98:9b:cb:01:08:ae:4b:0b:fb:46:55:bc:a0:42:
1a:b8:56:dd:b3:ab:7c:31:e5:f1:fa:76:52:26:63:85:5c:d2:
1e:97:9c:31
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICANUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjAyMjBaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDJDMkI4RjFCNkYzOURG
REE5RjM0OTY0QTQ3REEyNUE1OTc0N0Y0REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzx9vpvI0ISybRxMRw36+8U8+IAN6wZbMBi6UB+3VOPNlUeQfH
84VJCd1ksZNM92ae2W0WLygFRkPJubcdoPaFUVu1J9Bdy/8n5irH8X0/6Ni+N/G/
f453inqXL/udPjyJvjCiQ++yCAYS0u9FOcU9KSBjfLQg7AWycdgr1orHrWFHFXCx
DNxduOOcMSK/wGlhMp+V/20wjEncc8oycatAiHf5dMTub0Ch/LZpJ4RAGRjicrDK
DknDv7ShUkBBrKMKfkNvHhmAv9Juc/qEct6ZUZj2B3bF514onx+ImuUjAlS4Zl8u
e7+gy1952PB8UKvQhnD4muED7XfH734se/BhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQULCuPG28539qfNJZKR9olpZdH9NwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0xDdVBHMjg1MzlxZk5KWktSOW9scFpkSDlOdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYOQwDQYJKoZIhvcNAQELBQADggEBAItfR+TqmgIwvPx3UNOUuw39Slq0
83ttdj+rhb9o907k2n6GsubHrp0o2LHMWgU8bFQ1KLCGYEPWq3WCiDEVghq8F0SH
5N6M4364p9qUO6AH4x2l4+QLuX2jUHQHsvBSMfPRsUxnAFOC1y4eFrVEXEFJ1Dql
dxMmmth2Uib25Gfyg6NvsYUCYeZUc3NPKVOfFor3TqfsNyWhYaawEV5stoY0wn0I
fCvGPK94MJgr6Tz9h3An1rRf+n31OYjlEyMN3uLm6sDZFwIzL0411FgsO1alH/4i
AgUSd4GIamOYm8sBCK5LC/tGVbygQhq4Vt2zq3wx5fH6dlImY4Vc0h6XnDE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org