Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/Izy5oxWxsfmyArR5jA7yP15wOl8.roa
File: Izy5oxWxsfmyArR5jA7yP15wOl8.roa (raw, json)
Hash identifier: oPJRA6tWVAKJbM9nKkGlWnxraq9NPJU6Vv/X91ylIgs=
Subject key identifier: 23:3C:B9:A3:15:B1:B1:F9:B2:02:B4:79:8C:0E:F2:3F:5E:70:3A:5F
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 19
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/Izy5oxWxsfmyArR5jA7yP15wOl8.roa
Signing time: Wed 18 Aug 2021 07:54:09 +0000
ROA not before: Wed 18 Aug 2021 07:54:09 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 7684
IP address blocks: 153.125.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: Aug 18 07:54:09 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=233CB9A315B1B1F9B202B4798C0EF23F5E703A5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:b3:b3:83:96:da:f5:c4:8d:a7:7e:68:54:
16:9b:da:dd:0c:32:87:5a:18:05:af:f4:da:5e:d9:
85:91:c8:e4:3b:02:58:79:d8:b3:4b:25:0a:04:9f:
86:69:56:69:b5:a4:db:85:33:db:d9:6e:8f:b8:12:
c8:24:b6:da:75:31:a7:44:d6:15:eb:4b:f9:fa:d7:
e6:ac:5b:4b:b3:c2:20:d7:1f:cd:e0:da:ea:1d:55:
62:69:1d:64:62:66:4c:07:32:b4:0f:49:16:cd:5b:
0f:1b:2f:90:2c:a4:80:74:92:4a:76:d9:a0:6f:e0:
3c:25:7b:4b:6b:20:de:3a:25:99:84:b6:50:2c:6d:
48:20:03:a3:5a:38:d9:b6:83:0f:ea:60:0a:49:50:
ec:83:d3:93:30:9d:a1:3f:77:e5:36:11:6a:fa:f8:
29:e2:97:ef:74:bd:25:45:45:7a:bd:ec:67:3a:f4:
ed:c4:e0:e4:16:69:21:af:6f:cc:1f:2d:89:5b:1e:
f2:11:2e:9d:cb:9e:a3:7e:ca:48:f0:15:a2:71:9d:
48:b8:4b:82:4a:7c:89:aa:0f:bd:23:3e:b1:d2:0f:
fe:1c:a6:c2:15:c4:2a:b8:01:b0:43:b3:c3:3a:84:
fa:f2:78:12:90:2c:03:24:8c:6c:a5:ee:1b:d9:8d:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3C:B9:A3:15:B1:B1:F9:B2:02:B4:79:8C:0E:F2:3F:5E:70:3A:5F
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/Izy5oxWxsfmyArR5jA7yP15wOl8.roa
sbgp-ipAddrBlock: critical
IPv4:
153.125.128.0/18
Signature Algorithm: sha256WithRSAEncryption
74:11:25:30:49:b4:4d:b6:68:aa:85:e5:eb:f5:2c:d3:ec:53:
6f:6f:d6:65:8c:38:00:ae:4b:7d:7a:4f:6c:70:7b:fa:1a:58:
56:ca:e3:ca:c7:23:79:24:24:ef:88:39:7d:6b:e5:f8:2b:da:
3b:69:f3:84:d8:54:be:56:c5:2d:7e:ba:7b:20:d2:5e:c4:2b:
a5:ae:9d:d4:ce:3d:62:4f:20:09:66:8f:b0:5d:c5:17:02:46:
0a:46:75:67:da:07:b9:48:01:55:d0:d8:2c:b3:18:e0:11:dc:
cd:3b:6e:63:3b:2d:10:a0:36:2d:f6:19:f3:9d:48:0b:48:13:
f7:a7:55:5d:c8:b8:10:24:59:e9:37:ca:1f:5e:30:81:da:94:
7b:c0:b8:f1:da:fe:fa:4b:a5:d7:b4:3e:de:2b:d2:79:fe:15:
61:e8:bd:06:a6:89:0f:ad:2f:23:af:96:79:f4:e1:f3:f5:ba:
f0:f5:2b:fa:0c:2c:aa:2f:cb:26:c2:46:26:a1:bb:e3:af:82:
72:86:c7:75:ec:49:a5:bb:58:61:4a:94:fe:e4:59:87:28:dd:
e1:3a:cc:58:7a:f2:a1:b7:07:6a:45:73:a5:20:7a:a7:51:96:
e5:51:b8:85:a0:b4:12:4a:2c:3c:30:7d:d1:a4:e6:bf:92:fc:
b2:f0:46:2e
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRkMx
NTY0OUE4MjU3RjY0RkM5NDIxNjdFMzEwQUQzOEFEMDJDREJDMB4XDTIxMDgxODA3
NTQwOVoXDTIyMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoMjMzQ0I5QTMxNUIxQjFG
OUIyMDJCNDc5OEMwRUYyM0Y1RTcwM0E1RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL5Xs7ODltr1xI2nfmhUFpva3Qwyh1oYBa/02l7ZhZHI5DsCWHnY
s0slCgSfhmlWabWk24Uz29luj7gSyCS22nUxp0TWFetL+frX5qxbS7PCINcfzeDa
6h1VYmkdZGJmTAcytA9JFs1bDxsvkCykgHSSSnbZoG/gPCV7S2sg3jolmYS2UCxt
SCADo1o42baDD+pgCklQ7IPTkzCdoT935TYRavr4KeKX73S9JUVFer3sZzr07cTg
5BZpIa9vzB8tiVse8hEuncueo37KSPAVonGdSLhLgkp8iaoPvSM+sdIP/hymwhXE
KrgBsEOzwzqE+vJ4EpAsAySMbKXuG9mNUTcCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQjPLmjFbGx+bICtHmMDvI/XnA6XzAfBgNVHSMEGDAWgBTvwVZJqCV/ZPyUIWfj
EK04rQLNvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RPSzBDemJ3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RP
SzBDemJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzExMjQ3L0l6eTVveFd4c2ZteUFyUjVqQTd5UDE1d09sOC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaZfYAwDQYJKoZIhvcNAQELBQAD
ggEBAHQRJTBJtE22aKqF5ev1LNPsU29v1mWMOACuS316T2xwe/oaWFbK48rHI3kk
JO+IOX1r5fgr2jtp84TYVL5WxS1+unsg0l7EK6WundTOPWJPIAlmj7BdxRcCRgpG
dWfaB7lIAVXQ2CyzGOAR3M07bmM7LRCgNi32GfOdSAtIE/enVV3IuBAkWek3yh9e
MIHalHvAuPHa/vpLpde0Pt4r0nn+FWHovQamiQ+tLyOvlnn04fP1uvD1K/oMLKov
yybCRiahu+OvgnKGx3XsSaW7WGFKlP7kWYco3eE6zFh68qG3B2pFc6UgeqdRluVR
uIWgtBJKLDwwfdGk5r+S/LLwRi4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-ams.rpki-client.org