Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/xLLdyP-XrK4ZKRUCtNPNzL1blKI.roa
File: xLLdyP-XrK4ZKRUCtNPNzL1blKI.roa (raw, json)
Hash identifier: WH3xVYnFg6gxHLXX4iSFgPuDOnb27JxR1zZjAllFs1k=
Subject key identifier: C4:B2:DD:C8:FF:97:AC:AE:19:29:15:02:B4:D3:CD:CC:BD:5B:94:A2
Certificate issuer: /CN=E8CDBC24A6C3C530B99815AE7B5C0DA3EF8A84D5
Certificate serial: 1D
Authority key identifier: E8:CD:BC:24:A6:C3:C5:30:B9:98:15:AE:7B:5C:0D:A3:EF:8A:84:D5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/xLLdyP-XrK4ZKRUCtNPNzL1blKI.roa
Signing time: Tue 01 Mar 2022 01:33:04 +0000
ROA not before: Tue 01 Mar 2022 01:33:04 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 2515
IP address blocks: 192.41.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8CDBC24A6C3C530B99815AE7B5C0DA3EF8A84D5
Validity
Not Before: Mar 1 01:33:04 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=C4B2DDC8FF97ACAE19291502B4D3CDCCBD5B94A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:1e:92:ad:ed:94:27:77:af:f5:68:58:70:
1c:78:b0:3b:7f:29:28:b6:f9:f7:a5:56:1f:b0:98:
8c:14:51:84:24:0e:a3:1e:ec:6f:a3:62:28:c8:a0:
28:a8:07:64:40:ef:6c:e9:a7:25:bf:30:5f:a9:cb:
c5:22:05:44:cd:6f:f9:67:1e:ba:c9:28:79:6c:92:
be:5b:f5:9d:ca:7f:7b:2d:4b:96:6a:9e:93:f2:56:
10:8f:b3:5c:06:ad:ca:62:66:74:c2:02:e3:8e:67:
9d:83:dc:5f:f1:b3:39:50:27:2c:4f:2b:d4:a9:f5:
28:b9:6f:1a:fa:dd:ba:42:54:37:c3:59:6c:a1:28:
b8:53:02:80:fe:6e:c1:e8:33:d1:21:a2:31:9e:8a:
b9:3b:72:b6:a6:72:72:38:e5:ce:d7:1e:59:a7:8d:
96:09:7c:75:ba:2a:59:87:d8:c2:de:f6:4b:77:49:
12:f8:2a:19:b8:a3:43:2f:36:f0:51:b4:78:0c:46:
23:ea:16:3f:77:c4:2e:4d:92:34:e1:37:63:cb:3c:
c1:0a:db:aa:0b:db:98:11:bd:6e:e4:a2:50:c7:64:
a1:4d:3f:86:c1:43:3a:45:f5:44:d7:2b:cb:c4:ba:
0e:66:aa:79:52:b2:8e:8e:2c:4b:84:89:cd:29:5a:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B2:DD:C8:FF:97:AC:AE:19:29:15:02:B4:D3:CD:CC:BD:5B:94:A2
X509v3 Authority Key Identifier:
keyid:E8:CD:BC:24:A6:C3:C5:30:B9:98:15:AE:7B:5C:0D:A3:EF:8A:84:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/xLLdyP-XrK4ZKRUCtNPNzL1blKI.roa
sbgp-ipAddrBlock: critical
IPv4:
192.41.192.0/24
Signature Algorithm: sha256WithRSAEncryption
38:35:5b:28:af:18:b0:bf:c6:11:bd:94:fb:3d:95:bc:99:e7:
21:1c:21:33:52:40:37:98:6c:35:cc:b3:6d:58:e9:be:e7:1f:
6b:c3:fa:af:66:ec:e0:b7:b3:90:88:82:2d:7a:78:1b:df:27:
c8:8d:53:70:5a:52:af:b5:3a:19:da:01:9c:bd:86:29:e6:fa:
98:1d:02:f0:ce:b8:bd:97:70:52:0c:0f:6c:ab:00:93:86:42:
44:ec:f2:96:d7:2c:e4:3e:67:70:87:70:bd:9e:60:67:84:cc:
19:0c:ef:31:1b:bc:92:5a:7b:0d:8c:39:3e:d5:4f:fb:50:70:
cb:b8:a5:71:1f:ff:3f:7d:c6:36:bd:8f:28:a6:eb:28:5e:80:
20:43:43:0c:d4:f2:07:97:b0:21:96:3c:f8:8d:d0:91:54:07:
8a:6f:fd:28:31:81:46:04:8b:06:0c:af:e3:15:25:25:58:1d:
f3:0c:86:b4:99:20:d1:8d:ee:94:70:5b:7c:d9:c0:73:4e:b0:
bb:7e:9c:e0:36:10:e3:2e:c7:d4:74:96:69:d9:71:80:6d:df:
fd:e8:7a:62:9f:51:17:12:ce:24:4d:f3:7d:cb:48:55:74:ec:
a6:f0:48:04:16:4b:f1:fb:9a:d0:4d:bb:29:83:fe:cf:79:35:
83:5d:0e:c2
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFOENE
QkMyNEE2QzNDNTMwQjk5ODE1QUU3QjVDMERBM0VGOEE4NEQ1MB4XDTIyMDMwMTAx
MzMwNFoXDTIzMDIxNTAxMzAwM1owMzExMC8GA1UEAxMoQzRCMkREQzhGRjk3QUNB
RTE5MjkxNTAyQjREM0NEQ0NCRDVCOTRBMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKzeHpKt7ZQnd6/1aFhwHHiwO38pKLb596VWH7CYjBRRhCQOox7s
b6NiKMigKKgHZEDvbOmnJb8wX6nLxSIFRM1v+WceuskoeWySvlv1ncp/ey1Llmqe
k/JWEI+zXAatymJmdMIC445nnYPcX/GzOVAnLE8r1Kn1KLlvGvrdukJUN8NZbKEo
uFMCgP5uwegz0SGiMZ6KuTtytqZycjjlztceWaeNlgl8dboqWYfYwt72S3dJEvgq
GbijQy828FG0eAxGI+oWP3fELk2SNOE3Y8s8wQrbqgvbmBG9buSiUMdkoU0/hsFD
OkX1RNcry8S6DmaqeVKyjo4sS4SJzSlaDxMCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBTEst3I/5esrhkpFQK0083MvVuUojAfBgNVHSMEGDAWgBTozbwkpsPFMLmYFa57
XA2j74qE1TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTAwMy82TTI4SktiRHhUQzVtQld1ZTF3Tm8tLUtoTlUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC82TTI4SktiRHhUQzVtQld1ZTF3Tm8t
LUtoTlUuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTAwMy94TExkeVAtWHJLNFpLUlVDdE5QTnpMMWJsS0kucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnAMA0GCSqGSIb3DQEBCwUAA4IB
AQA4NVsorxiwv8YRvZT7PZW8mechHCEzUkA3mGw1zLNtWOm+5x9rw/qvZuzgt7OQ
iIItengb3yfIjVNwWlKvtToZ2gGcvYYp5vqYHQLwzri9l3BSDA9sqwCThkJE7PKW
1yzkPmdwh3C9nmBnhMwZDO8xG7ySWnsNjDk+1U/7UHDLuKVxH/8/fcY2vY8opuso
XoAgQ0MM1PIHl7Ahljz4jdCRVAeKb/0oMYFGBIsGDK/jFSUlWB3zDIa0mSDRje6U
cFt82cBzTrC7fpzgNhDjLsfUdJZp2XGAbd/96Hpin1EXEs4kTfN9y0hVdOym8EgE
Fkvx+5rQTbspg/7PeTWDXQ7C
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:00 2023 by rpki-client on console-fra.rpki-client.org