Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LJKaUnF9EHMq8VUm3w3OzoRaYzU.roa
File: LJKaUnF9EHMq8VUm3w3OzoRaYzU.roa (raw, json)
Hash identifier: pGNzAZ6EhmUsj8r10db3ucWfNoPTvdmB70oiX80eUoQ=
Subject key identifier: 2C:92:9A:52:71:7D:10:73:2A:F1:55:26:DF:0D:CE:CE:84:5A:63:35
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 27
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LJKaUnF9EHMq8VUm3w3OzoRaYzU.roa
Signing time: Mon 27 Mar 2023 16:02:01 +0000
ROA not before: Mon 27 Mar 2023 16:02:01 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:02:01 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=2C929A52717D10732AF15526DF0DCECE845A6335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:0a:d8:2b:5f:a9:2a:10:58:15:76:a4:16:
3c:e2:cf:1a:90:8e:4d:ed:bf:60:32:82:52:b0:f1:
16:5e:ed:73:2f:e0:af:c6:99:65:5e:0b:2c:bd:22:
67:c6:bf:94:3f:05:75:67:d5:63:15:d7:a5:bc:11:
6a:c3:84:27:e8:1f:06:b3:34:06:c5:08:c7:db:f5:
bc:39:49:96:bb:d7:54:37:9c:f8:25:79:86:d4:12:
a0:0a:e1:7c:df:3d:b6:fa:17:6c:cb:d0:d7:aa:88:
a0:5d:d5:ac:e3:74:54:97:01:9d:d7:26:4d:3a:2b:
0f:c4:23:77:6a:9a:39:6a:f0:12:ff:35:e4:97:d9:
d1:17:f8:94:d9:ea:18:22:c3:26:85:cd:2c:93:aa:
45:df:15:b1:c4:a1:f4:a9:5e:d6:d7:03:bc:65:17:
55:dc:72:3a:33:39:18:b2:3b:ee:e4:b5:58:5f:78:
de:58:96:a2:28:24:1c:5a:8c:9a:b1:b2:42:39:77:
65:48:8d:5b:ad:02:c5:c1:58:e9:a4:11:11:d5:22:
b9:a6:e9:ba:98:bc:94:d6:cc:d7:59:84:59:94:1c:
35:d6:0e:7d:ac:6d:88:3b:89:09:dc:16:a8:f8:99:
a3:5d:aa:52:53:ed:be:4e:4d:2e:1f:6c:4a:ce:04:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:92:9A:52:71:7D:10:73:2A:F1:55:26:DF:0D:CE:CE:84:5A:63:35
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LJKaUnF9EHMq8VUm3w3OzoRaYzU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.0.0/24
Signature Algorithm: sha256WithRSAEncryption
43:3a:98:68:c3:cb:9f:e3:1c:e8:5a:ee:dd:f7:24:0a:fa:de:
94:81:8b:6a:0d:b0:2a:aa:a5:a7:8a:5a:65:21:a9:33:8f:6d:
29:13:67:24:6a:a4:8d:7d:fa:21:6d:a1:11:33:83:ee:51:48:
2a:32:40:60:cd:e0:a8:7f:69:47:15:01:bc:81:46:fd:92:57:
c0:9f:26:6d:1f:5b:cc:dd:4f:73:64:77:6d:24:c0:9c:fb:5b:
14:e0:a1:fa:f1:27:23:74:20:19:19:86:56:c1:c9:77:de:43:
27:16:52:64:75:a4:c9:19:48:73:32:6b:14:20:be:46:95:a3:
57:ff:d9:0c:8d:54:34:bf:0c:75:2d:82:81:88:84:81:7d:94:
86:75:c2:56:0f:71:c1:c7:cd:c1:67:e3:f0:92:1a:08:14:9b:
d6:b5:ed:22:0c:52:5e:81:8b:1a:9b:a5:41:b1:02:fe:9e:4a:
63:0c:b8:d4:91:e6:a9:17:a7:08:f4:ca:21:97:37:ba:59:72:
f0:0b:96:23:57:af:3b:30:76:bc:90:8b:72:fd:98:11:54:fc:
76:9f:b6:0d:62:e5:c0:e7:d5:2a:01:30:be:e5:57:20:46:20:
e2:75:43:30:26:16:de:0d:d7:17:91:74:c3:34:93:4b:51:72:
0f:d6:fb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org