Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lUxsPLnNYm5k4dwkzhMz6aQsyaY.roa
File: lUxsPLnNYm5k4dwkzhMz6aQsyaY.roa (raw, json)
Hash identifier: G2q+thAkVhJ6qy9We60eNUkSx8epYlBq5GGcGO5IFFo=
Subject key identifier: 95:4C:6C:3C:B9:CD:62:6E:64:E1:DC:24:CE:13:33:E9:A4:2C:C9:A6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 020F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lUxsPLnNYm5k4dwkzhMz6aQsyaY.roa
Signing time: Tue 30 May 2023 16:29:32 +0000
ROA not before: Tue 30 May 2023 16:29:32 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 27.230.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:29:32 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=954C6C3CB9CD626E64E1DC24CE1333E9A42CC9A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:12:ca:9c:bb:91:86:c9:c9:c4:12:31:cc:
5f:03:f0:80:14:61:74:f4:60:56:39:63:85:00:39:
55:6e:91:54:c1:d5:30:fb:62:97:49:d5:b3:85:48:
85:09:8a:e9:57:01:6e:01:9c:ec:0b:18:44:5a:bc:
3d:9a:b6:75:11:d3:88:1f:b5:ea:62:a8:48:ed:ee:
37:cd:fc:ac:4f:83:39:d4:f3:82:9e:67:1c:4d:41:
75:71:df:40:d0:ce:e2:7d:6f:f4:96:e6:04:24:a3:
22:11:a0:c7:8e:8a:55:bc:d6:67:07:c1:82:04:92:
11:5a:58:03:48:7c:e6:98:27:ce:0d:1c:5c:64:5b:
49:8e:7d:ae:ba:f9:6b:a2:cd:5c:8d:78:82:16:1e:
10:54:3a:b9:33:12:65:00:0f:41:87:e1:a8:19:4a:
e9:4f:93:6d:e7:03:59:03:7f:6d:ee:92:00:ec:7f:
d3:92:1e:d6:e4:87:4e:5c:51:0f:c5:ad:22:1e:6d:
ec:34:3b:5d:3f:fa:15:0e:21:f9:31:98:24:d8:e3:
b4:b9:8a:18:94:cb:7b:d5:1f:bb:08:a4:13:7c:1d:
65:53:62:b0:da:10:b8:a0:1f:ea:5c:3f:ba:fb:a5:
5c:6d:c4:ba:3c:1b:b9:d4:7c:f8:1d:9c:70:95:96:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4C:6C:3C:B9:CD:62:6E:64:E1:DC:24:CE:13:33:E9:A4:2C:C9:A6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lUxsPLnNYm5k4dwkzhMz6aQsyaY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.230.64.0/20
Signature Algorithm: sha256WithRSAEncryption
53:ac:a5:d1:62:fa:85:fe:f0:c1:ab:df:d9:2b:30:53:a0:4f:
9d:43:2c:e9:c5:ad:98:b8:ca:63:6a:1e:83:be:ab:55:84:9c:
c0:3e:9d:63:79:58:47:92:54:c6:da:62:b0:e6:86:b6:5a:72:
4f:d0:48:5e:20:44:ea:33:43:af:8a:47:a3:62:ba:fb:0f:19:
a5:94:fa:11:01:9e:5e:b9:b4:6a:e1:a8:14:cd:c1:6a:3d:c2:
f3:41:bc:33:17:d2:4e:50:89:b4:09:51:e3:fc:6e:1d:46:96:
99:b2:48:f3:b6:21:87:80:23:cf:84:d9:5e:65:3d:64:7b:2e:
b7:ae:0d:22:9f:f5:25:0b:50:f1:09:53:bb:2a:7f:bf:fe:c2:
49:fb:1e:c1:c6:93:36:6c:a0:e7:48:51:fd:35:79:a8:51:30:
63:12:20:5b:45:7a:47:f2:54:10:fc:4b:d9:c4:38:39:5b:f6:
04:3d:56:60:c4:f0:c1:99:18:ea:57:fc:c2:8f:d5:b1:a5:77:
dc:eb:30:1d:d9:ff:92:71:93:ff:42:41:a0:30:e5:54:54:72:
87:f3:02:c9:7b:a9:3d:62:6a:14:1c:41:7e:0e:37:24:a1:cc:
ae:d5:b7:39:18:a5:37:7f:7e:26:b7:ba:db:71:c4:08:35:50:
03:ba:e8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:55 2025 by rpki-client