Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/Bx4WZYjNuLM1cK0tSHVt37xqXSo.roa
File: Bx4WZYjNuLM1cK0tSHVt37xqXSo.roa (raw, json)
Hash identifier: 28UNtqWChzpUUhySarJCUbjNg2PKvrhWxe5oqu123qY=
Subject key identifier: 07:1E:16:65:88:CD:B8:B3:35:70:AD:2D:48:75:6D:DF:BC:6A:5D:2A
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: C0
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Bx4WZYjNuLM1cK0tSHVt37xqXSo.roa
Signing time: Sun 01 Jan 2023 01:29:13 +0000
ROA not before: Sun 01 Jan 2023 01:29:13 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 10021
IP address blocks: 117.55.208.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Jan 1 01:29:13 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=071E166588CDB8B33570AD2D48756DDFBC6A5D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:d8:d7:12:e4:60:05:3d:96:16:b2:99:bc:
75:8f:5b:53:fc:c0:ae:90:c4:d7:db:75:41:e1:7e:
c8:83:99:f1:7d:5d:31:45:c1:b7:a3:47:67:3c:bc:
57:2c:f5:27:da:cb:1a:01:7d:36:d6:71:9d:12:11:
c0:66:2b:fb:78:9f:06:07:49:1f:04:83:53:3c:90:
de:ba:0f:74:d2:79:72:5a:1d:75:de:f5:e5:82:10:
b3:c7:80:58:c6:f2:b4:a1:74:c7:99:93:c0:62:0b:
99:98:b7:2f:f1:5f:cf:be:b1:15:d8:bd:94:8a:86:
40:cd:c8:3a:1c:bd:2e:ed:4d:0a:fd:e8:87:6a:d4:
78:4d:5f:4f:94:c2:2f:b3:d2:5d:96:98:63:84:8f:
51:01:2b:32:ad:85:18:3b:37:b9:8f:af:3c:41:cd:
fb:7b:5a:4d:05:8c:8d:a5:7e:21:87:14:cc:7f:2f:
6f:97:0e:f6:11:dc:bc:75:08:bf:96:5c:d6:6b:86:
90:af:72:21:e3:f8:b7:4f:3e:7f:b7:4a:2c:b1:be:
a1:04:65:c2:ea:b0:bd:37:a2:96:dc:88:f5:08:e9:
5a:e8:1d:6b:62:83:34:36:d1:32:d9:ca:29:37:08:
aa:ec:5a:65:31:7b:d5:e3:2a:86:38:06:fd:6c:55:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1E:16:65:88:CD:B8:B3:35:70:AD:2D:48:75:6D:DF:BC:6A:5D:2A
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Bx4WZYjNuLM1cK0tSHVt37xqXSo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.55.208.0/21
Signature Algorithm: sha256WithRSAEncryption
67:e1:24:a6:3d:1d:3f:45:9c:15:8e:1b:8a:f8:6e:fe:3f:e5:
10:b8:73:81:cb:f5:ce:33:9e:b7:f4:b3:9b:ef:f1:3c:99:f8:
5d:3e:bb:da:0c:81:e3:03:bb:73:41:aa:85:bf:02:17:da:46:
6e:47:73:3a:1a:5a:97:29:12:f7:36:30:1f:e9:17:0b:3c:18:
c6:85:4a:56:8a:4a:e0:8d:f5:e0:00:42:fb:8e:a9:4d:38:63:
b5:ac:40:4a:c7:45:3a:38:8c:6b:22:9c:47:30:30:4e:fa:ca:
9b:84:09:e8:2c:6c:68:fe:95:79:34:ac:11:10:2d:8e:e8:77:
eb:2e:3e:a9:71:0b:8c:c0:b4:48:d6:7e:03:8a:4c:ca:90:38:
3a:7e:02:04:03:0f:8c:b5:f0:b6:fd:de:a2:2d:f6:fc:e3:67:
96:6f:49:30:ba:92:6f:96:c4:db:1b:c8:19:e9:17:98:a3:62:
09:5c:29:e9:34:a0:b7:b5:da:5d:0c:26:8a:ca:57:23:7f:fe:
5c:70:33:85:4a:fe:65:6e:7f:4b:79:da:0e:37:3c:56:15:d8:
29:53:f4:1f:c4:8d:1b:e4:72:96:a0:08:88:a8:2c:83:7f:ba:
47:cc:d1:c3:e3:4a:3d:6a:0f:9f:41:36:91:91:01:a4:08:b1:
01:8a:47:56
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzAxMDEw
MTI5MTNaFw0yMzEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA3MUUxNjY1ODhDREI4
QjMzNTcwQUQyRDQ4NzU2RERGQkM2QTVEMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCq9jXEuRgBT2WFrKZvHWPW1P8wK6QxNfbdUHhfsiDmfF9XTFF
wbejR2c8vFcs9SfayxoBfTbWcZ0SEcBmK/t4nwYHSR8Eg1M8kN66D3TSeXJaHXXe
9eWCELPHgFjG8rShdMeZk8BiC5mYty/xX8++sRXYvZSKhkDNyDocvS7tTQr96Idq
1HhNX0+Uwi+z0l2WmGOEj1EBKzKthRg7N7mPrzxBzft7Wk0FjI2lfiGHFMx/L2+X
DvYR3Lx1CL+WXNZrhpCvciHj+LdPPn+3SiyxvqEEZcLqsL03opbciPUI6VroHWti
gzQ20TLZyik3CKrsWmUxe9XjKoY4Bv1sVedRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUBx4WZYjNuLM1cK0tSHVt37xqXSowHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L0J4NFdaWWpOdUxNMWNLMHRTSFZ0Mzd4cVhTby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAN1N9AwDQYJKoZIhvcNAQELBQADggEBAGfhJKY9HT9FnBWOG4r4bv4/5RC4
c4HL9c4znrf0s5vv8TyZ+F0+u9oMgeMDu3NBqoW/AhfaRm5HczoaWpcpEvc2MB/p
Fws8GMaFSlaKSuCN9eAAQvuOqU04Y7WsQErHRTo4jGsinEcwME76ypuECegsbGj+
lXk0rBEQLY7od+suPqlxC4zAtEjWfgOKTMqQODp+AgQDD4y18Lb93qIt9vzjZ5Zv
STC6km+WxNsbyBnpF5ijYglcKek0oLe12l0MJorKVyN//lxwM4VK/mVuf0t52g43
PFYV2ClT9B/EjRvkcpagCIioLIN/ukfM0cPjSj1qD59BNpGRAaQIsQGKR1Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org