Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/C7e8nfd52mkKv76xK047n4lVoWU.roa
File: C7e8nfd52mkKv76xK047n4lVoWU.roa (raw, json)
Hash identifier: 2aZNQyMND73U2WwZYKi1nQCWmdGbQSsJZYGGeOQBfd0=
Subject key identifier: 0B:B7:BC:9D:F7:79:DA:69:0A:BF:BE:B1:2B:4E:3B:9F:89:55:A1:65
Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial: 22
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/C7e8nfd52mkKv76xK047n4lVoWU.roa
Signing time: Tue 25 May 2021 02:31:48 +0000
ROA not before: Tue 25 May 2021 02:31:48 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 55391
IP address blocks: 217.178.0.0/16 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Validity
Not Before: May 25 02:31:48 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=0BB7BC9DF779DA690ABFBEB12B4E3B9F8955A165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:02:f6:f5:97:c0:be:d1:d1:c6:cd:95:b1:
1d:a7:c3:b1:47:02:11:5d:d7:5c:a8:1c:1b:97:39:
4f:6d:bf:ae:59:34:f1:54:e0:fe:b3:df:7b:ec:b3:
de:3c:3a:23:26:02:29:39:48:e9:02:94:85:52:d9:
f8:fe:61:de:2d:6e:93:bf:0c:79:4d:4b:6c:6b:b1:
e2:f0:7b:16:2d:1c:2e:27:f3:8b:dd:bb:33:1d:46:
9c:0f:fd:d7:d0:48:48:23:b4:2e:fe:b6:0c:7c:df:
5e:94:5b:cf:55:02:8a:53:03:35:3b:e6:4d:f6:1a:
4e:8d:fc:ee:04:eb:25:cf:b2:f6:8d:f9:40:84:0d:
c8:21:97:72:7a:08:10:49:45:8b:16:eb:f1:1d:e4:
0b:48:2f:59:36:91:ab:e4:79:f9:39:3d:42:2f:3b:
71:8b:0b:f4:10:ea:af:58:11:a7:12:65:49:0d:e3:
70:e3:02:36:b5:d6:de:1f:a0:a6:eb:9f:3e:50:ce:
9f:8b:87:1a:3f:63:fb:9a:d5:60:87:8c:d2:db:d5:
5e:4e:48:a6:14:f3:36:9f:ef:d3:eb:b4:3c:bd:bc:
db:d8:6c:f6:3b:8b:66:68:7a:7c:55:c2:f2:70:64:
c1:23:fc:98:3d:df:65:3d:cb:0d:66:7a:67:d7:c2:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B7:BC:9D:F7:79:DA:69:0A:BF:BE:B1:2B:4E:3B:9F:89:55:A1:65
X509v3 Authority Key Identifier:
keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/C7e8nfd52mkKv76xK047n4lVoWU.roa
sbgp-ipAddrBlock: critical
IPv4:
217.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:a1:51:de:16:1a:5f:c2:8a:83:26:b1:df:10:af:d1:d2:1a:
6e:d1:bb:d6:9f:3d:6a:aa:40:fc:48:1b:38:6a:91:8f:a4:4a:
66:ca:a6:9d:8e:c9:25:50:f3:cc:09:33:4e:29:0a:0f:0c:a2:
37:e1:90:b7:8b:ac:5f:a3:19:4e:63:20:5e:db:81:30:91:4d:
09:16:79:f2:3e:f7:34:41:01:d5:8e:9b:13:1f:3c:36:a5:09:
bc:73:b6:44:03:bd:06:9e:4f:cd:c2:cf:d9:0c:03:b2:e3:74:
9d:7c:af:af:e6:15:fc:57:1a:88:b4:54:9c:0b:a8:95:d3:f1:
46:24:11:21:1a:89:39:c9:7a:0c:38:02:60:94:0e:90:17:a4:
e6:c4:b8:39:8e:3a:83:4a:41:92:82:f3:a6:b1:44:4c:44:da:
94:95:6a:c8:7d:48:74:d0:5c:14:c3:cc:02:0e:96:7b:39:c8:
3f:f6:da:0b:e7:cf:f7:6b:15:a2:a6:92:ee:c5:7b:d7:f9:07:
fd:cc:0a:b6:5c:fc:af:ce:a5:0d:ab:cb:4d:45:9b:ae:9e:c7:
05:3a:07:04:ff:39:04:f7:f2:a4:f6:00:75:28:6d:09:46:e3:
bb:b7:37:e4:8a:fb:7a:ee:f2:10:d4:0e:f8:4c:7e:44:7b:d2:
ec:9c:1c:08
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDU2
RDA1MDFENDMwQ0UwRkNGMERCMDY3NUJBRkM5MEIwNUQ5QkY1MB4XDTIxMDUyNTAy
MzE0OFoXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoMEJCN0JDOURGNzc5REE2
OTBBQkZCRUIxMkI0RTNCOUY4OTU1QTE2NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANA2Avb1l8C+0dHGzZWxHafDsUcCEV3XXKgcG5c5T22/rlk08VTg
/rPfe+yz3jw6IyYCKTlI6QKUhVLZ+P5h3i1uk78MeU1LbGux4vB7Fi0cLifzi927
Mx1GnA/919BISCO0Lv62DHzfXpRbz1UCilMDNTvmTfYaTo387gTrJc+y9o35QIQN
yCGXcnoIEElFixbr8R3kC0gvWTaRq+R5+Tk9Qi87cYsL9BDqr1gRpxJlSQ3jcOMC
NrXW3h+gpuufPlDOn4uHGj9j+5rVYIeM0tvVXk5IphTzNp/v0+u0PL2829hs9juL
Zmh6fFXC8nBkwSP8mD3fZT3LDWZ6Z9fCoqkCAwEAAaOCAdwwggHYMB0GA1UdDgQW
BBQLt7yd93naaQq/vrErTjufiVWhZTAfBgNVHSMEGDAWgBTgVtBQHUMM4Pzw2wZ1
uvyQsF2b9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyMDcvNEZiUVVCMURET0Q4OE5zR2RicjhrTEJkbV9VLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNEZiUVVCMURET0Q4OE5zR2Ricjhr
TEJkbV9VLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzExMjA3L0M3ZThuZmQ1Mm1rS3Y3NnhLMDQ3bjRsVm9XVS5yb2Ew
HgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDZsjANBgkqhkiG9w0BAQsFAAOC
AQEAOqFR3hYaX8KKgyax3xCv0dIabtG71p89aqpA/EgbOGqRj6RKZsqmnY7JJVDz
zAkzTikKDwyiN+GQt4usX6MZTmMgXtuBMJFNCRZ58j73NEEB1Y6bEx88NqUJvHO2
RAO9Bp5PzcLP2QwDsuN0nXyvr+YV/FcaiLRUnAuoldPxRiQRIRqJOcl6DDgCYJQO
kBek5sS4OY46g0pBkoLzprFETETalJVqyH1IdNBcFMPMAg6WeznIP/baC+fP92sV
oqaS7sV71/kH/cwKtlz8r86lDavLTUWbrp7HBToHBP85BPfypPYAdShtCUbju7c3
5Ir7eu7yENQO+Ex+RHvS7JwcCA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org