Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/gMsH0x4GGkcBWE5qCs-qBkLkwPA.roa
File: gMsH0x4GGkcBWE5qCs-qBkLkwPA.roa (raw, json)
Hash identifier: 0u6/erTI+VSoj+kAhzsxNKkO/8pdXZfNvOCf2Cj7KqM=
Subject key identifier: 80:CB:07:D3:1E:06:1A:47:01:58:4E:6A:0A:CF:AA:06:42:E4:C0:F0
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 8F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gMsH0x4GGkcBWE5qCs-qBkLkwPA.roa
Signing time: Tue 22 Feb 2022 07:34:07 +0000
ROA not before: Tue 22 Feb 2022 07:34:07 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 2497
IP address blocks: 220.156.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Feb 22 07:34:07 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=80CB07D31E061A4701584E6A0ACFAA0642E4C0F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:09:39:e9:9a:c3:56:95:dc:15:35:44:d2:
4f:7a:94:3d:d5:99:ea:2d:ec:8f:df:bb:6e:0a:36:
36:34:8c:79:ad:a8:40:44:59:89:1a:93:98:46:45:
da:0a:de:bb:56:9b:35:91:a6:e1:36:34:4e:6c:04:
92:4f:3e:f5:bf:e6:6c:3c:37:19:52:8d:df:73:e2:
45:64:60:ce:5e:a8:b4:48:75:69:f6:69:fe:ed:4d:
f1:1d:d7:4d:25:07:40:92:06:cc:08:d3:f5:0f:76:
5e:17:43:29:ca:d8:e7:9b:98:db:55:5e:0c:12:4a:
c8:ad:bc:d7:1f:11:20:4b:e8:7b:51:43:0b:fd:be:
95:2f:bd:17:e8:6a:07:a1:54:23:c7:79:58:b2:3b:
9a:09:70:07:a4:d2:77:db:71:dd:f5:91:a5:6a:8b:
75:99:66:a3:b0:23:b5:10:8d:38:72:0d:3d:14:a8:
a3:00:a2:e6:8e:1c:df:d1:01:91:bd:74:a4:66:73:
08:3f:6a:f9:84:66:b8:4c:ca:2d:d8:a5:a1:9e:73:
c4:8f:c0:be:01:c2:b4:52:b2:01:f9:3e:7c:f3:e7:
b8:a8:d9:42:86:0d:38:c4:a9:6e:f6:47:97:2f:d0:
24:3a:ca:e2:94:07:9d:b3:06:b5:01:13:5b:52:76:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CB:07:D3:1E:06:1A:47:01:58:4E:6A:0A:CF:AA:06:42:E4:C0:F0
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gMsH0x4GGkcBWE5qCs-qBkLkwPA.roa
sbgp-ipAddrBlock: critical
IPv4:
220.156.64.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:ae:a1:96:9b:e4:84:d5:35:68:f1:fe:ef:04:bc:64:f7:08:
6e:2e:01:f6:ff:8d:d7:01:b6:48:dd:91:83:86:32:57:60:ae:
af:26:42:9a:7b:ea:bd:b6:46:07:f0:22:5f:c7:e3:e5:ff:55:
d1:15:4e:60:31:52:9e:82:6d:58:9f:74:25:08:83:50:ae:d9:
bb:8e:30:dc:89:33:29:44:99:71:05:40:93:29:4f:75:b5:33:
3b:4e:10:b4:43:70:68:46:9e:70:3d:18:10:e2:c7:a8:e5:72:
87:04:98:09:cf:bc:d5:40:b9:38:83:94:a7:47:f4:bb:3b:c8:
58:d6:08:a3:49:e4:8d:41:34:7b:e3:85:be:01:d1:a3:49:04:
20:85:d4:88:b6:3b:b6:11:2a:da:cf:0f:c0:90:ee:16:2b:32:
6e:e7:bf:7d:6d:cb:54:b8:e8:32:4b:0d:37:e9:85:b9:bc:4b:
a4:f6:50:43:a9:66:ba:a5:b2:b3:e1:08:05:27:07:d3:8c:98:
24:0a:bd:51:b4:f0:28:17:36:b6:1c:bc:56:e3:f9:e6:ee:2f:
3f:d7:7d:35:1d:fa:0d:03:f0:de:64:d7:88:2d:5d:e5:5a:b7:
47:d7:7e:6e:30:fc:9e:f5:14:ba:d6:b8:ea:85:bd:05:79:77:
5b:8b:ff:b1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMjAyMjIw
NzM0MDdaFw0yMzAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgwQ0IwN0QzMUUwNjFB
NDcwMTU4NEU2QTBBQ0ZBQTA2NDJFNEMwRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDezwk56ZrDVpXcFTVE0k96lD3Vmeot7I/fu24KNjY0jHmtqEBE
WYkak5hGRdoK3rtWmzWRpuE2NE5sBJJPPvW/5mw8NxlSjd9z4kVkYM5eqLRIdWn2
af7tTfEd100lB0CSBswI0/UPdl4XQynK2OebmNtVXgwSSsitvNcfESBL6HtRQwv9
vpUvvRfoagehVCPHeViyO5oJcAek0nfbcd31kaVqi3WZZqOwI7UQjThyDT0UqKMA
ouaOHN/RAZG9dKRmcwg/avmEZrhMyi3YpaGec8SPwL4BwrRSsgH5Pnzz57io2UKG
DTjEqW72R5cv0CQ6yuKUB52zBrUBE1tSdlhHAgMBAAGjggHVMIIB0TAdBgNVHQ4E
FgQUgMsH0x4GGkcBWE5qCs+qBkLkwPAwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF
BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvZ01zSDB4NEdHa2NCV0U1cUNzLXFCa0xrd1BBLnJvYTAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBdycQDANBgkqhkiG9w0BAQsFAAOCAQEASq6h
lpvkhNU1aPH+7wS8ZPcIbi4B9v+N1wG2SN2Rg4YyV2CuryZCmnvqvbZGB/AiX8fj
5f9V0RVOYDFSnoJtWJ90JQiDUK7Zu44w3IkzKUSZcQVAkylPdbUzO04QtENwaEae
cD0YEOLHqOVyhwSYCc+81UC5OIOUp0f0uzvIWNYIo0nkjUE0e+OFvgHRo0kEIIXU
iLY7thEq2s8PwJDuFisybue/fW3LVLjoMksNN+mFubxLpPZQQ6lmuqWys+EIBScH
04yYJAq9UbTwKBc2thy8VuP55u4vP9d9NR36DQPw3mTXiC1d5Vq3R9d+bjD8nvUU
uta46oW9BXl3W4v/sQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org