Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ytyUD53ov2WYBBV4Xy8VGg6JFys.roa
File: ytyUD53ov2WYBBV4Xy8VGg6JFys.roa (raw, json)
Hash identifier: nXeDJN7B2zKa+5JIsla+e4aPQdgDbou2bnDEFtIikXw=
Subject key identifier: CA:DC:94:0F:9D:E8:BF:65:98:04:15:78:5F:2F:15:1A:0E:89:17:2B
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 30
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ytyUD53ov2WYBBV4Xy8VGg6JFys.roa
Signing time: Mon 01 Nov 2021 01:28:28 +0000
ROA not before: Mon 01 Nov 2021 01:28:28 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 157.65.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Nov 1 01:28:28 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=CADC940F9DE8BF65980415785F2F151A0E89172B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:d2:2d:b9:1e:62:a1:a6:80:6f:2c:60:31:
fe:0d:20:22:b6:c3:76:e1:6c:eb:db:51:fe:c8:f2:
6c:83:3f:de:e5:8c:8b:c4:3a:6a:a8:e9:e7:7a:fa:
6a:49:bf:a1:6f:e8:2c:c4:4a:ba:b5:0f:f9:f7:af:
f9:24:60:ee:25:80:b8:be:59:13:df:aa:9f:f0:b7:
9e:6b:e1:99:7f:86:ff:5f:4b:28:76:05:18:8b:95:
bc:92:51:2b:9d:be:b6:68:8f:67:ec:6b:01:81:b9:
63:5e:8b:0b:64:ec:f2:72:16:7e:10:6a:39:4b:8f:
81:56:ee:94:f4:31:6f:6c:4f:82:20:18:52:9c:87:
aa:99:7a:34:7c:3c:da:7c:20:ef:04:66:05:c4:49:
6c:c9:b0:4a:7b:0e:d3:42:61:1e:85:34:01:80:b2:
43:da:7c:bc:14:04:c0:5f:e2:20:36:63:72:79:13:
38:22:7f:de:ab:80:e2:0d:28:14:5d:68:be:51:5b:
c7:36:fd:8c:18:31:2b:c2:96:6c:92:1e:e8:7c:04:
db:67:be:11:74:9d:77:3e:df:0b:73:59:2a:28:4c:
8d:69:fa:51:ac:d8:13:ad:f3:1a:37:f1:45:ff:a0:
7b:b9:1f:64:e4:db:fa:65:dd:b6:4e:36:13:41:7b:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DC:94:0F:9D:E8:BF:65:98:04:15:78:5F:2F:15:1A:0E:89:17:2B
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ytyUD53ov2WYBBV4Xy8VGg6JFys.roa
sbgp-ipAddrBlock: critical
IPv4:
157.65.192.0/21
Signature Algorithm: sha256WithRSAEncryption
bc:a9:61:d0:4d:4c:76:72:a0:0c:b3:6c:35:21:4b:42:02:ac:
ce:a4:70:91:14:80:79:e3:b5:92:c9:05:2a:9a:75:aa:1b:20:
ec:f3:f2:85:1c:46:82:f2:0f:b9:46:ec:87:bc:c2:31:a5:b3:
9a:7a:a2:37:12:a5:be:d5:9d:8d:78:2b:af:36:a3:96:8e:96:
0f:2b:77:12:37:62:f3:90:a8:e6:2a:46:c2:3e:c0:db:cc:29:
f6:aa:44:6d:ba:c5:66:a4:7c:40:a8:d2:0a:70:9b:09:71:1b:
e2:53:52:2b:b9:70:dc:1d:a5:59:47:46:ed:0b:1c:13:0b:b9:
e1:c8:50:3b:c0:22:9f:77:cc:79:ea:f6:d2:5a:6f:47:aa:8d:
e8:a9:24:a1:95:19:eb:97:15:4a:64:71:8d:9d:bb:19:44:11:
23:ab:4a:64:ef:70:50:cb:31:aa:fd:80:d8:ca:a6:d8:0d:3b:
15:9e:84:fb:59:e1:05:84:e9:09:aa:01:34:7e:67:da:8c:bf:
98:80:dc:a5:77:fa:5a:95:cb:0e:00:6c:ef:af:d7:96:67:fc:
9d:c9:6d:2e:b0:1c:78:77:cd:c4:ed:dc:71:6b:78:b7:69:17:
19:e4:d7:be:54:54:bf:1e:13:60:f3:9d:19:d4:ad:ec:3f:22:
ee:b0:dc:0c
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTY5
NjZERDcyMEMzMDU3NUY2MkQ4RkQ0MTQ5NDU4QTkwQUFDQUE0MB4XDTIxMTEwMTAx
MjgyOFoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0FEQzk0MEY5REU4QkY2
NTk4MDQxNTc4NUYyRjE1MUEwRTg5MTcyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALyW0i25HmKhpoBvLGAx/g0gIrbDduFs69tR/sjybIM/3uWMi8Q6
aqjp53r6akm/oW/oLMRKurUP+fev+SRg7iWAuL5ZE9+qn/C3nmvhmX+G/19LKHYF
GIuVvJJRK52+tmiPZ+xrAYG5Y16LC2Ts8nIWfhBqOUuPgVbulPQxb2xPgiAYUpyH
qpl6NHw82nwg7wRmBcRJbMmwSnsO00JhHoU0AYCyQ9p8vBQEwF/iIDZjcnkTOCJ/
3quA4g0oFF1ovlFbxzb9jBgxK8KWbJIe6HwE22e+EXSddz7fC3NZKihMjWn6UazY
E63zGjfxRf+ge7kfZOTb+mXdtk42E0F7X4MCAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBTK3JQPnei/ZZgEFXhfLxUaDokXKzAfBgNVHSMEGDAWgBQpaWbdcgwwV19i2P1B
SUWKkKrKpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5cVEuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5
cVEuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi95dHlVRDUzb3YyV1lCQlY0WHk4VkdnNkpGeXMucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDnUHAMA0GCSqGSIb3DQEBCwUAA4IBAQC8qWHQ
TUx2cqAMs2w1IUtCAqzOpHCRFIB547WSyQUqmnWqGyDs8/KFHEaC8g+5RuyHvMIx
pbOaeqI3EqW+1Z2NeCuvNqOWjpYPK3cSN2LzkKjmKkbCPsDbzCn2qkRtusVmpHxA
qNIKcJsJcRviU1IruXDcHaVZR0btCxwTC7nhyFA7wCKfd8x56vbSWm9Hqo3oqSSh
lRnrlxVKZHGNnbsZRBEjq0pk73BQyzGq/YDYyqbYDTsVnoT7WeEFhOkJqgE0fmfa
jL+YgNyld/palcsOAGzvr9eWZ/ydyW0usBx4d83E7dxxa3i3aRcZ5Ne+VFS/HhNg
850Z1K3sPyLusNwM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org