Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/l2z4U3Bv4zR9f9HPmuFVq9b4xok.roa
File: l2z4U3Bv4zR9f9HPmuFVq9b4xok.roa (raw, json)
Hash identifier: i8VabHQpKLrhKXpakwz3KIfNWFta4czmQt3h3BhqARY=
Subject key identifier: 97:6C:F8:53:70:6F:E3:34:7D:7F:D1:CF:9A:E1:55:AB:D6:F8:C6:89
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 028F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l2z4U3Bv4zR9f9HPmuFVq9b4xok.roa
Signing time: Tue 30 May 2023 16:36:27 +0000
ROA not before: Tue 30 May 2023 16:36:27 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 27.230.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:36:27 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=976CF853706FE3347D7FD1CF9AE155ABD6F8C689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:e1:6b:d3:9d:b8:70:8f:4c:1c:fb:88:af:
c8:e0:43:58:5b:85:91:1d:96:9f:f8:8b:89:c6:61:
98:d4:3f:ff:a9:0d:b8:75:9a:3d:6a:56:b4:47:f7:
7f:16:e8:d3:7a:f6:9d:11:d8:17:0a:6c:dc:e7:e6:
f0:00:1a:5c:74:13:bd:23:cf:40:2c:08:41:59:b8:
f6:1f:12:75:c9:d9:27:b6:c4:6c:b0:28:a9:71:fa:
38:5b:66:e2:d3:8d:3e:7a:ba:dd:0b:ca:ef:c7:60:
65:5e:6e:e7:16:02:c6:ab:d6:86:6e:e0:33:ad:00:
3b:df:f2:df:59:20:2b:7f:54:36:03:da:01:e5:e8:
d6:94:53:6a:6a:ef:cf:0c:a9:5f:f4:22:5e:07:59:
71:be:66:d0:b1:e9:5e:11:50:a3:7b:fd:c1:d2:ed:
a8:e5:22:71:00:86:f3:30:42:e4:a7:86:f1:3e:06:
ff:a7:84:5f:cf:d5:f4:8e:23:73:d5:e6:cb:6c:14:
42:bf:b9:21:3f:ed:51:cc:d8:4a:6e:4c:05:f4:fb:
9e:b6:37:bc:44:f5:75:7f:ef:42:d8:de:2a:39:1e:
76:f0:bc:a8:b5:9e:a6:e1:1a:9e:bd:66:c5:8b:dd:
e6:0d:08:42:56:53:c7:17:09:5a:28:a2:aa:3e:57:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6C:F8:53:70:6F:E3:34:7D:7F:D1:CF:9A:E1:55:AB:D6:F8:C6:89
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l2z4U3Bv4zR9f9HPmuFVq9b4xok.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.230.192.0/18
Signature Algorithm: sha256WithRSAEncryption
35:de:28:a4:83:84:69:57:78:67:11:af:56:77:01:6f:c4:b0:
14:a8:2a:1e:6f:c0:06:8c:e4:03:f6:a6:b4:e4:3c:21:57:d4:
fe:29:0b:62:f6:a7:da:99:9a:f2:aa:ce:36:5f:17:b5:65:37:
f8:ca:b3:d8:cf:58:b4:82:88:a8:74:73:67:c3:78:b9:d8:5d:
0a:99:f5:03:fd:1a:b4:0a:b0:7a:4b:8b:25:64:8c:a8:72:13:
7a:03:d8:26:2f:26:a7:65:f8:c7:fe:78:e7:f6:fe:8d:05:5d:
16:7c:7b:35:45:ed:19:c8:0a:3c:e7:4a:23:38:59:70:3d:06:
d1:68:f8:3d:c9:fd:91:54:61:a6:e3:3d:26:4a:31:97:c9:b4:
fd:cd:e0:b1:5a:48:2a:d3:cc:c9:24:e8:96:22:6a:2e:8c:72:
90:3d:5c:89:47:97:92:cd:6c:51:2a:c1:32:ae:97:1a:a8:b2:
13:62:9d:b5:2c:d2:c5:b6:a8:f5:43:5a:38:4a:89:94:db:cf:
31:08:89:7c:43:7d:31:f3:3f:87:ad:35:dd:a8:e5:3b:03:63:
c1:54:21:3a:d0:84:29:78:d7:86:de:59:00:42:33:5d:a9:df:
fe:08:74:1e:69:5b:2a:fa:1e:a5:f7:8a:32:1d:f3:16:47:16:
0c:1f:34:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org