Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/j-JE6SpHGLrAnWHokIZef1BNXbY.roa
File: j-JE6SpHGLrAnWHokIZef1BNXbY.roa (raw, json)
Hash identifier: 8z0XB/GRyXCEiqXTrxzQv42yWSBYigyuXxNbFzxhlwQ=
Subject key identifier: 8F:E2:44:E9:2A:47:18:BA:C0:9D:61:E8:90:86:5E:7F:50:4D:5D:B6
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 17
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/j-JE6SpHGLrAnWHokIZef1BNXbY.roa
Signing time: Wed 18 Aug 2021 07:54:10 +0000
ROA not before: Wed 18 Aug 2021 07:54:10 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 0
IP address blocks: 157.17.128.0/17 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Aug 18 07:54:10 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=8FE244E92A4718BAC09D61E890865E7F504D5DB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:47:e8:f7:2c:e2:ab:5b:33:7f:4a:31:b1:
d4:47:3c:1d:bc:c2:1b:2c:13:16:01:d6:bc:88:b6:
c1:fb:b1:a9:e1:46:6d:a6:fe:44:07:b7:cd:e0:75:
6d:46:1c:c8:e6:ce:da:96:f2:e4:04:cb:d5:9f:f0:
40:16:2e:d2:5d:85:13:4e:cc:7f:cd:d6:3c:6c:d1:
2f:f4:df:76:fe:64:b3:47:1a:1d:14:75:f9:fd:74:
0e:d6:5b:61:fc:02:ec:bd:27:a4:1e:bf:6d:67:04:
6c:3b:79:fe:41:87:b4:e2:94:4a:40:0c:9b:69:1b:
ab:88:65:05:cf:93:ff:19:fa:a4:0b:2a:c7:e0:9e:
93:97:5c:fd:1a:df:01:dd:88:51:65:a0:8c:69:96:
c9:a9:73:86:87:08:f4:44:b8:25:17:df:46:bc:17:
df:87:81:89:53:39:72:1b:68:c6:ad:b9:5e:0a:6d:
0f:e3:66:b6:e2:27:f2:0e:77:3e:7a:64:85:9e:4b:
86:fe:2b:f3:36:1b:8c:4d:1f:5d:6b:70:d4:40:bb:
e6:3b:d0:a6:e8:70:fe:2a:76:4d:d9:a6:d2:7c:fb:
49:65:3e:64:61:ac:6a:85:37:e4:7f:10:a8:89:a5:
75:d8:1b:6a:e9:fb:a1:e5:10:2e:ce:29:8c:a9:97:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E2:44:E9:2A:47:18:BA:C0:9D:61:E8:90:86:5E:7F:50:4D:5D:B6
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/j-JE6SpHGLrAnWHokIZef1BNXbY.roa
sbgp-ipAddrBlock: critical
IPv4:
157.17.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8d:3b:2a:bd:4e:11:12:63:a4:af:64:c9:32:1a:95:c1:f7:e9:
06:05:94:1c:a4:a3:0e:64:7f:3f:52:c5:a6:07:8b:f8:9c:3d:
10:8f:95:4b:4f:b3:93:67:08:32:70:ac:e9:a8:91:08:9a:54:
e2:52:f5:fe:4b:4f:ab:4f:04:15:b3:6a:81:8e:a2:0c:2b:ed:
1f:5d:b0:73:02:9b:0a:93:a3:b8:81:3b:68:1a:07:16:6b:39:
05:c6:c6:96:74:4c:ce:2b:54:04:b8:14:da:89:c9:32:67:19:
51:19:ec:d1:e0:66:c7:8f:82:c8:bb:f4:8e:37:66:00:22:36:
65:7b:61:f8:ca:f4:6a:6b:9f:25:e8:17:0b:01:cf:7e:96:00:
ac:45:42:fc:dc:39:a1:2a:19:2a:f3:b0:48:17:f8:7f:08:d9:
04:af:d2:5c:f5:24:f7:2a:ff:df:b0:a1:4c:2b:d1:e4:71:a0:
9e:4f:ab:6b:ca:30:fd:21:55:34:e8:eb:08:40:d8:e1:8c:ee:
c3:cd:d5:c9:88:21:14:4d:7f:21:a6:64:32:1c:7f:a4:4a:3d:
ba:15:cd:96:c1:87:27:be:4b:f0:e1:07:3f:6e:c2:af:2a:86:
fb:e1:87:e2:c2:bf:85:47:0b:0e:e9:18:34:51:fe:6f:6a:81:
1e:bc:9f:bc
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkM0
NjI5NEE1RDU2NDM3RTE5QTExQUVGOUZCOUI4Nzc2OTAxNDNFMB4XDTIxMDgxODA3
NTQxMFoXDTIyMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoOEZFMjQ0RTkyQTQ3MThC
QUMwOUQ2MUU4OTA4NjVFN0Y1MDRENURCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKXKR+j3LOKrWzN/SjGx1Ec8HbzCGywTFgHWvIi2wfuxqeFGbab+
RAe3zeB1bUYcyObO2pby5ATL1Z/wQBYu0l2FE07Mf83WPGzRL/Tfdv5ks0caHRR1
+f10DtZbYfwC7L0npB6/bWcEbDt5/kGHtOKUSkAMm2kbq4hlBc+T/xn6pAsqx+Ce
k5dc/RrfAd2IUWWgjGmWyalzhocI9ES4JRffRrwX34eBiVM5chtoxq25XgptD+Nm
tuIn8g53PnpkhZ5Lhv4r8zYbjE0fXWtw1EC75jvQpuhw/ip2Tdmm0nz7SWU+ZGGs
aoU35H8QqImlddgbaun7oeUQLs4pjKmXXvECAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBSP4kTpKkcYusCdYeiQhl5/UE1dtjAfBgNVHSMEGDAWgBT7xGKUpdVkN+GaEa75
+5uHdpAUPjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvLThSaWxLWFZaRGZobWhHdS1mdWJoM2FRRkQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLThSaWxLWFZaRGZobWhHdS1mdWJo
M2FRRkQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzExMjQ3L2otSkU2U3BIR0xyQW5XSG9rSVplZjFCTlhiWS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAedEYAwDQYJKoZIhvcNAQELBQAD
ggEBAI07Kr1OERJjpK9kyTIalcH36QYFlBykow5kfz9SxaYHi/icPRCPlUtPs5Nn
CDJwrOmokQiaVOJS9f5LT6tPBBWzaoGOogwr7R9dsHMCmwqTo7iBO2gaBxZrOQXG
xpZ0TM4rVAS4FNqJyTJnGVEZ7NHgZsePgsi79I43ZgAiNmV7YfjK9GprnyXoFwsB
z36WAKxFQvzcOaEqGSrzsEgX+H8I2QSv0lz1JPcq/9+woUwr0eRxoJ5Pq2vKMP0h
VTTo6whA2OGM7sPN1cmIIRRNfyGmZDIcf6RKPboVzZbBhye+S/DhBz9uwq8qhvvh
h+LCv4VHCw7pGDRR/m9qgR68n7w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org