Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/h2o0G-sfQ0zwtcwD7_ddmDqa9BA.roa
File: h2o0G-sfQ0zwtcwD7_ddmDqa9BA.roa (raw, json)
Hash identifier: pjt3UkyQz7h2jCr9IeKkkF4sM9S7ksb8LAz1wrTv/s0=
Subject key identifier: 87:6A:34:1B:EB:1F:43:4C:F0:B5:CC:03:EF:F7:5D:98:3A:9A:F4:10
Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial: 21
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/h2o0G-sfQ0zwtcwD7_ddmDqa9BA.roa
Signing time: Tue 01 Feb 2022 01:31:34 +0000
ROA not before: Tue 01 Feb 2022 01:31:34 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 131898
IP address blocks: 219.100.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Validity
Not Before: Feb 1 01:31:34 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=876A341BEB1F434CF0B5CC03EFF75D983A9AF410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:28:47:ee:dc:21:5f:f8:2e:f1:b3:2a:2c:
0d:e6:5c:a2:dc:a4:07:5b:e2:fb:14:c0:ec:66:52:
61:f7:a0:59:f6:7c:3f:d8:94:48:43:19:7b:04:d1:
c1:91:8f:ac:64:34:f9:07:5b:92:48:18:0b:bf:7d:
71:98:df:48:7f:34:d5:74:a9:78:ea:ee:7c:d2:cd:
7e:36:2e:37:d7:95:10:ee:fa:f7:67:09:54:cc:27:
66:ab:7f:49:6f:37:d6:5e:77:f6:5b:e8:c1:64:45:
9e:f1:6f:b4:b7:81:60:79:6a:d7:2f:73:27:b4:19:
3d:a7:6d:e2:8f:4f:ee:84:15:2d:d8:23:ef:d7:55:
8f:43:d9:73:3e:76:07:12:01:1a:3a:6e:72:81:2a:
3a:9a:87:bb:39:82:f1:5e:8e:3e:f6:1a:1e:35:6b:
53:47:d0:55:27:ba:9e:c0:2e:87:28:7d:be:71:c3:
ae:84:3c:da:72:94:c7:5b:bc:bc:ca:8b:94:18:63:
a9:3b:46:e6:68:e9:c9:05:8c:a6:66:35:77:71:14:
e6:64:13:1d:70:e4:41:56:77:b5:12:39:19:fd:52:
bc:b7:36:36:ae:3e:f8:79:90:04:2d:6e:28:2d:71:
0f:a2:b2:d0:27:cb:49:83:b2:7d:cb:ea:24:9a:a0:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6A:34:1B:EB:1F:43:4C:F0:B5:CC:03:EF:F7:5D:98:3A:9A:F4:10
X509v3 Authority Key Identifier:
keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/h2o0G-sfQ0zwtcwD7_ddmDqa9BA.roa
sbgp-ipAddrBlock: critical
IPv4:
219.100.146.0/24
Signature Algorithm: sha256WithRSAEncryption
82:45:08:16:38:c7:4e:7f:3a:79:15:4a:3b:f1:2b:b8:8d:8c:
f8:98:b1:a9:b6:a0:29:53:86:a5:92:95:66:04:77:94:49:99:
ec:9f:41:fa:a9:20:75:64:aa:df:5e:f2:2c:9b:fc:6f:9d:69:
05:c4:93:9c:b6:b9:0e:28:3d:52:8a:10:68:aa:08:02:26:6d:
e2:0c:0c:00:03:ac:5c:9a:7b:b7:a1:18:b6:2a:a2:c5:d0:59:
6e:cd:8d:ce:0a:76:3f:c0:91:b9:be:bc:50:b1:69:ec:81:87:
a2:e7:a0:80:12:5a:79:e2:81:33:0d:74:fa:83:1c:4d:f4:7b:
77:27:a8:4f:b6:6d:8d:d4:19:27:0b:92:01:a0:eb:45:84:0a:
19:53:13:d0:49:b2:04:f8:10:6c:e9:eb:7d:2a:d7:29:76:31:
83:64:de:cf:14:7f:5a:ac:33:0d:43:70:d6:63:4a:3c:c6:39:
3d:1b:45:3d:58:ec:bc:18:0a:70:01:66:db:a6:51:ea:ca:99:
5e:11:0f:3c:a4:ae:89:2d:34:15:1f:81:63:bb:62:60:f0:02:
ff:28:25:89:72:a8:fc:1e:1b:a9:1a:24:2d:01:24:21:d2:ea:
04:92:72:5c:10:41:d4:4e:75:9c:12:43:c0:3e:db:9e:5c:fd:
89:d0:56:7f
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF
NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTIyMDIwMTAx
MzEzNFoXDTIzMDExNTAxMzAwM1owMzExMC8GA1UEAxMoODc2QTM0MUJFQjFGNDM0
Q0YwQjVDQzAzRUZGNzVEOTgzQTlBRjQxMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMIfKEfu3CFf+C7xsyosDeZcotykB1vi+xTA7GZSYfegWfZ8P9iU
SEMZewTRwZGPrGQ0+QdbkkgYC799cZjfSH801XSpeOrufNLNfjYuN9eVEO7692cJ
VMwnZqt/SW831l539lvowWRFnvFvtLeBYHlq1y9zJ7QZPadt4o9P7oQVLdgj79dV
j0PZcz52BxIBGjpucoEqOpqHuzmC8V6OPvYaHjVrU0fQVSe6nsAuhyh9vnHDroQ8
2nKUx1u8vMqLlBhjqTtG5mjpyQWMpmY1d3EU5mQTHXDkQVZ3tRI5Gf1SvLc2Nq4+
+HmQBC1uKC1xD6Ky0CfLSYOyfcvqJJqgCOcCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBSHajQb6x9DTPC1zAPv912YOpr0EDAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY
guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X
WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMTE2L2gybzBHLXNmUTB6d3Rjd0Q3X2RkbURxYTlCQS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADbZJIwDQYJKoZIhvcNAQELBQAD
ggEBAIJFCBY4x05/OnkVSjvxK7iNjPiYsam2oClThqWSlWYEd5RJmeyfQfqpIHVk
qt9e8iyb/G+daQXEk5y2uQ4oPVKKEGiqCAImbeIMDAADrFyae7ehGLYqosXQWW7N
jc4Kdj/Akbm+vFCxaeyBh6LnoIASWnnigTMNdPqDHE30e3cnqE+2bY3UGScLkgGg
60WEChlTE9BJsgT4EGzp630q1yl2MYNk3s8Uf1qsMw1DcNZjSjzGOT0bRT1Y7LwY
CnABZtumUerKmV4RDzykroktNBUfgWO7YmDwAv8oJYlyqPweG6kaJC0BJCHS6gSS
clwQQdROdZwSQ8A+255c/YnQVn8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org