Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ssiTZMp7I-PWXNkAcEDunSSO9jY.roa
File: ssiTZMp7I-PWXNkAcEDunSSO9jY.roa (raw, json)
Hash identifier: 4c3SRQYjSehhSAzQIOpC1scWnYiDZoIOlTmWJkUHKYs=
Subject key identifier: B2:C8:93:64:CA:7B:23:E3:D6:5C:D9:00:70:40:EE:9D:24:8E:F6:36
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0104
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ssiTZMp7I-PWXNkAcEDunSSO9jY.roa
Signing time: Sat 01 Jan 2022 01:31:16 +0000
ROA not before: Sat 01 Jan 2022 01:31:16 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 210.224.180.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:16 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=B2C89364CA7B23E3D65CD9007040EE9D248EF636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:c8:02:49:e0:e6:b6:c4:f5:c7:f1:0b:43:
ac:9d:98:9f:7d:a8:05:23:32:9c:fa:6f:67:98:cc:
68:b8:6f:32:15:9f:00:c3:72:3e:9c:0e:0b:12:aa:
eb:a1:b4:85:5e:8a:66:4a:1f:04:39:5e:ef:28:2b:
ad:04:b8:2f:c6:db:3f:6d:a5:d9:44:10:8f:5b:47:
06:79:2a:24:30:14:92:f7:f9:ca:1e:4c:c2:a7:94:
49:b5:33:2c:b0:0a:c3:44:2d:2f:de:ee:de:2d:cd:
42:23:4f:ee:81:34:ac:b2:03:fb:22:97:ab:e7:80:
64:7d:2b:26:ab:5a:82:66:29:99:de:ee:b3:fe:3d:
f3:1f:42:f3:db:5b:6d:76:48:1e:89:c4:a3:7b:8f:
1d:4f:91:28:2a:65:45:8c:63:72:1a:e8:4f:3d:23:
15:3f:26:71:e2:14:7b:36:dc:3d:05:0e:a4:18:f7:
a7:1c:66:73:56:38:52:0f:f2:54:b1:91:98:db:31:
87:56:67:58:99:de:c1:11:9b:2e:64:75:46:84:d0:
25:41:32:08:db:fb:ed:6e:61:5e:12:b4:21:e2:8c:
45:49:96:2e:0e:50:82:d9:a3:20:1d:36:61:fe:ae:
ff:11:3e:24:6b:39:12:f0:d9:5f:71:ea:02:41:ab:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C8:93:64:CA:7B:23:E3:D6:5C:D9:00:70:40:EE:9D:24:8E:F6:36
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ssiTZMp7I-PWXNkAcEDunSSO9jY.roa
sbgp-ipAddrBlock: critical
IPv4:
210.224.180.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:e6:bc:f2:b6:e5:72:dc:7a:97:c2:37:7c:87:18:a2:e1:f9:
4b:7d:36:64:f6:86:68:38:a2:7f:69:3b:dc:a8:f5:45:ed:45:
c3:63:3f:3a:52:8f:83:7e:27:3c:04:e9:7c:34:ea:cc:04:a9:
17:b4:43:8f:56:be:0b:5f:4b:86:f7:15:3d:47:ca:84:d5:65:
5b:2e:77:1c:a4:66:bc:4a:6b:d1:fb:66:1e:17:5b:3d:5b:0b:
81:a0:5f:27:8f:9a:d1:86:d2:63:cf:4f:b1:9f:20:5e:cb:e5:
fb:6d:c1:d2:56:a6:40:e5:95:32:00:ac:4d:7c:85:e4:dd:2b:
77:87:39:4d:6f:e4:f3:c5:20:ce:b0:6f:a8:3d:ec:33:3b:a6:
b5:b1:65:c6:0a:3e:38:15:2b:52:6e:c3:8a:e4:24:95:ac:77:
b6:37:bf:0a:aa:26:0f:b2:de:da:14:20:9b:f5:cb:db:ea:b8:
6e:f0:6d:c0:9c:ed:84:d2:62:87:db:16:18:33:83:8c:c9:ea:
06:44:97:fd:2d:0a:c3:f7:33:ca:44:a7:a6:b2:82:30:aa:a5:
4e:cc:c7:73:86:bc:5d:25:7d:d3:55:3a:9a:a3:31:9c:ef:b1:
c9:bb:30:a5:5b:8d:01:2f:62:fe:e0:4a:63:d8:99:89:30:65:
83:6c:de:f8
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjAxMDEw
MTMxMTZaFw0yMjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIyQzg5MzY0Q0E3QjIz
RTNENjVDRDkwMDcwNDBFRTlEMjQ4RUY2MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA28gCSeDmtsT1x/ELQ6ydmJ99qAUjMpz6b2eYzGi4bzIVnwDD
cj6cDgsSquuhtIVeimZKHwQ5Xu8oK60EuC/G2z9tpdlEEI9bRwZ5KiQwFJL3+coe
TMKnlEm1MyywCsNELS/e7t4tzUIjT+6BNKyyA/sil6vngGR9KyarWoJmKZne7rP+
PfMfQvPbW212SB6JxKN7jx1PkSgqZUWMY3Ia6E89IxU/JnHiFHs23D0FDqQY96cc
ZnNWOFIP8lSxkZjbMYdWZ1iZ3sERmy5kdUaE0CVBMgjb++1uYV4StCHijEVJli4O
UILZoyAdNmH+rv8RPiRrORLw2V9x6gJBq29bAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUssiTZMp7I+PWXNkAcEDunSSO9jYwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDI0Ny9zc2lUWk1wN0ktUFdYTmtBY0VEdW5TU085alkucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0uC0MA0GCSqGSIb3DQEBCwUA
A4IBAQDB5rzytuVy3HqXwjd8hxii4flLfTZk9oZoOKJ/aTvcqPVF7UXDYz86Uo+D
fic8BOl8NOrMBKkXtEOPVr4LX0uG9xU9R8qE1WVbLnccpGa8SmvR+2YeF1s9WwuB
oF8nj5rRhtJjz0+xnyBey+X7bcHSVqZA5ZUyAKxNfIXk3St3hzlNb+TzxSDOsG+o
PewzO6a1sWXGCj44FStSbsOK5CSVrHe2N78KqiYPst7aFCCb9cvb6rhu8G3AnO2E
0mKH2xYYM4OMyeoGRJf9LQrD9zPKRKemsoIwqqVOzMdzhrxdJX3TVTqaozGc77HJ
uzClW40BL2L+4Epj2JmJMGWDbN74
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org