Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/2r6w9Fli3LnVGz-bPwUJX_41lGY.roa
File: 2r6w9Fli3LnVGz-bPwUJX_41lGY.roa (raw, json)
Hash identifier: xrRukmcYJ7W6oCdpPgpld/KBmAb7vkUOtgc9weWMFY8=
Subject key identifier: DA:BE:B0:F4:59:62:DC:B9:D5:1B:3F:9B:3F:05:09:5F:FE:35:94:66
Certificate issuer: /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
Certificate serial: 02
Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/2r6w9Fli3LnVGz-bPwUJX_41lGY.roa
Signing time: Fri 25 Feb 2022 07:42:42 +0000
ROA not before: Fri 25 Feb 2022 07:42:42 +0000
ROA not after: Sat 25 Feb 2023 07:35:18 +0000
asID: 17676
IP address blocks: 2403:7a00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
Validity
Not Before: Feb 25 07:42:42 2022 GMT
Not After : Feb 25 07:35:18 2023 GMT
Subject: CN=DABEB0F45962DCB9D51B3F9B3F05095FFE359466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:fd:69:1f:9c:d9:bd:c9:8a:a5:6b:86:6b:
7e:dc:75:f8:75:59:45:77:80:c5:9b:96:dd:d0:e9:
f8:3a:cc:0f:eb:59:ce:10:e8:b5:f3:94:7c:c4:19:
47:23:ea:7f:94:97:10:f0:97:17:a9:81:ee:1a:d9:
de:3f:8c:ca:45:14:73:12:45:a7:de:9b:d8:8d:ad:
8e:8d:39:cf:0b:b1:56:bb:3b:9f:66:9b:a3:65:10:
50:e7:56:b5:73:49:6a:ff:e9:cf:1f:ed:b8:76:01:
aa:d1:53:e0:66:c1:8a:9c:d7:97:7a:23:8b:33:2a:
da:96:e8:0b:2c:4c:d5:dd:fb:75:37:9e:a4:ea:54:
d8:c7:87:23:ee:9d:09:e5:de:d2:87:ec:a5:1d:98:
8f:82:65:54:44:fe:0b:e2:66:7b:a2:c9:aa:f8:5f:
1c:3a:c4:1b:8e:91:8d:f6:de:38:f9:31:5e:55:f5:
59:b7:b5:b1:e8:8d:07:47:42:34:66:a6:bc:07:9c:
0d:7b:55:53:55:96:a6:08:bd:82:30:92:b1:a7:65:
82:9d:25:8a:22:be:1c:08:ba:fe:4f:15:2a:d8:0a:
e9:e6:f7:66:9c:6d:3d:34:b3:32:a0:30:69:1e:43:
0c:c5:50:97:11:50:a2:06:d9:f5:52:f5:1c:d7:10:
a4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BE:B0:F4:59:62:DC:B9:D5:1B:3F:9B:3F:05:09:5F:FE:35:94:66
X509v3 Authority Key Identifier:
keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/2r6w9Fli3LnVGz-bPwUJX_41lGY.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:7a00::/32
Signature Algorithm: sha256WithRSAEncryption
ab:19:1a:01:fb:d0:2a:82:e6:21:fb:d5:95:82:54:ab:1a:4e:
a0:8b:b5:18:cc:c9:4b:8c:67:70:80:4a:38:93:05:3b:38:c3:
ba:59:be:14:3e:2e:36:c3:e8:50:92:3c:34:7f:6b:a9:8d:bc:
99:63:d1:56:28:27:3f:71:64:4d:72:e3:72:fc:45:9b:1f:1e:
e0:17:cb:b2:3a:cd:89:7a:55:8b:7e:08:62:97:35:51:3e:cb:
8f:8d:e2:f7:94:38:cb:dc:03:9c:64:0d:43:f1:65:23:9c:d3:
2a:f1:b1:08:4b:9c:26:67:1d:cf:04:28:df:64:a5:26:38:47:
94:de:09:d6:94:20:33:3d:a7:97:4c:2a:24:6c:77:ce:ac:4b:
27:e7:a8:5e:11:3f:0f:0c:cd:44:e1:e7:b1:a5:9a:89:01:5c:
81:44:ad:2b:dd:4a:8b:be:c7:d5:76:d2:84:6a:29:e3:0e:e6:
5b:d8:d0:23:7f:3e:3e:e8:dc:4b:f6:26:c1:53:9d:25:94:04:
12:52:ba:85:39:8a:d3:4f:89:4c:7f:29:ad:79:ad:57:81:1c:
11:8f:e9:3a:96:e1:e7:3f:01:57:cf:1d:7a:31:27:72:c3:c3:
3a:3f:2b:a3:fe:db:9f:60:05:c7:40:44:c1:a6:d2:d8:85:79:
86:aa:af:04
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0RB
RUMyMEVERjRBMjAxMDQyM0REN0IwMDRFMTU3NEYxMTNBNzM1MB4XDTIyMDIyNTA3
NDI0MloXDTIzMDIyNTA3MzUxOFowMzExMC8GA1UEAxMoREFCRUIwRjQ1OTYyRENC
OUQ1MUIzRjlCM0YwNTA5NUZGRTM1OTQ2NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANzK/WkfnNm9yYqla4Zrftx1+HVZRXeAxZuW3dDp+DrMD+tZzhDo
tfOUfMQZRyPqf5SXEPCXF6mB7hrZ3j+MykUUcxJFp96b2I2tjo05zwuxVrs7n2ab
o2UQUOdWtXNJav/pzx/tuHYBqtFT4GbBipzXl3ojizMq2pboCyxM1d37dTeepOpU
2MeHI+6dCeXe0ofspR2Yj4JlVET+C+Jme6LJqvhfHDrEG46RjfbeOPkxXlX1Wbe1
seiNB0dCNGamvAecDXtVU1WWpgi9gjCSsadlgp0liiK+HAi6/k8VKtgK6eb3Zpxt
PTSzMqAwaR5DDMVQlxFQogbZ9VL1HNcQpDkCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBTavrD0WWLcudUbP5s/BQlf/jWUZjAfBgNVHSMEGDAWgBSH2uwg7fSiAQQj3XsA
ThV08ROnNTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNDQvaDlyc0lPMzBvZ0VFSTkxN0FFNFZkUEVUcHpVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaDlyc0lPMzBvZ0VFSTkxN0FFNFZk
UEVUcHpVLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMTQ0LzJyNnc5RmxpM0xuVkd6LWJQd1VKWF80MWxHWS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA3oAMA0GCSqGSIb3DQEBCwUA
A4IBAQCrGRoB+9AqguYh+9WVglSrGk6gi7UYzMlLjGdwgEo4kwU7OMO6Wb4UPi42
w+hQkjw0f2upjbyZY9FWKCc/cWRNcuNy/EWbHx7gF8uyOs2JelWLfghilzVRPsuP
jeL3lDjL3AOcZA1D8WUjnNMq8bEIS5wmZx3PBCjfZKUmOEeU3gnWlCAzPaeXTCok
bHfOrEsn56heET8PDM1E4eexpZqJAVyBRK0r3UqLvsfVdtKEainjDuZb2NAjfz4+
6NxL9ibBU50llAQSUrqFOYrTT4lMfymtea1XgRwRj+k6luHnPwFXzx16MSdyw8M6
Pyuj/tufYAXHQETBptLYhXmGqq8E
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org