Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/IlvEaCNfzmBCzofe2NA1k7rDHFg.roa
File: IlvEaCNfzmBCzofe2NA1k7rDHFg.roa (raw, json)
Hash identifier: Ke3U8Mt88+78J6tMZu/G+j5YOoJHhJtc4nqPCDDnnGw=
Subject key identifier: 22:5B:C4:68:23:5F:CE:60:42:CE:87:DE:D8:D0:35:93:BA:C3:1C:58
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 40
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/IlvEaCNfzmBCzofe2NA1k7rDHFg.roa
Signing time: Tue 01 Feb 2022 01:31:53 +0000
ROA not before: Tue 01 Feb 2022 01:31:53 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 157.147.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 1 01:31:53 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=225BC468235FCE6042CE87DED8D03593BAC31C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:42:1d:4c:b0:89:3f:ce:93:f3:34:49:35:9c:
26:af:5e:8e:c9:6f:57:04:7d:b1:18:ef:11:31:bd:
a0:ae:cc:47:d4:07:a9:ed:79:2f:42:63:14:1c:42:
cd:87:c3:aa:0f:bc:f2:75:8a:63:f9:0c:57:48:3d:
7c:a7:26:26:25:5e:4e:a8:91:39:94:64:21:f4:8b:
dd:c8:38:9e:d9:6d:9d:c6:da:39:01:b5:71:c9:e6:
02:9e:59:1f:67:39:fd:bc:b8:b4:cf:23:58:8f:23:
ab:7a:43:0d:16:c1:29:7e:10:67:d3:5b:65:f1:68:
28:11:cc:54:8c:b2:21:8a:ec:32:43:cd:c1:67:9e:
9e:b2:fc:5c:c7:80:07:35:d2:57:45:ef:b9:aa:c1:
2c:3e:60:cb:d5:9c:5e:45:45:35:de:2c:fc:db:64:
e4:af:83:d7:5d:ea:4f:1a:9b:6c:51:22:64:28:01:
7c:aa:15:22:8b:a5:aa:de:e8:07:4e:4a:b1:79:31:
83:0f:c0:93:50:80:8f:c6:86:28:ed:a5:62:79:52:
d1:f3:b6:e3:75:e4:5a:bc:31:ab:d3:cf:7e:b4:82:
74:a4:6a:9c:d1:b5:ad:12:b0:91:bb:f2:91:76:13:
c9:01:e4:d8:f9:a0:0c:fa:35:33:20:d4:b7:24:9f:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:C4:68:23:5F:CE:60:42:CE:87:DE:D8:D0:35:93:BA:C3:1C:58
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/IlvEaCNfzmBCzofe2NA1k7rDHFg.roa
sbgp-ipAddrBlock: critical
IPv4:
157.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:01:4b:cf:13:71:07:aa:46:65:11:15:54:08:e0:97:e1:58:
5e:f1:d7:77:a1:fb:20:d0:bb:24:86:20:43:73:80:11:d3:e2:
09:a2:8b:1e:de:08:60:a9:a8:6f:1e:53:e8:9f:11:08:71:b5:
51:41:52:5d:87:a3:19:cd:ce:0b:8c:ac:3e:35:ac:71:13:95:
6e:bc:b1:fc:e3:ec:44:46:d4:b3:6b:b5:55:a3:74:2d:dd:4f:
af:37:42:63:61:42:a0:86:a8:cd:97:bf:68:c8:e4:ca:2a:d0:
d8:97:b0:74:b2:59:a6:88:43:15:78:87:c2:5c:77:ef:8b:d2:
32:3c:e8:38:90:56:db:63:17:c5:73:8d:b1:61:e5:63:87:8f:
3b:21:d2:1a:1d:d4:39:89:a5:11:a9:2f:a9:b8:39:a6:f2:a4:
ce:36:21:b8:67:f0:2d:35:4d:d2:ce:a7:59:fa:60:f2:74:5a:
b8:e6:8b:dc:c4:61:11:a4:d0:02:0a:c5:c1:cf:99:74:d7:25:
e4:92:ae:e5:c4:0b:35:4d:48:b2:cc:3c:70:05:5f:d5:ea:84:
84:19:64:51:7b:2e:e4:89:f4:14:81:d5:15:28:00:83:89:7e:
07:b4:d6:7f:2d:6c:60:64:9d:93:6f:7b:9f:6a:57:b9:3e:e0:
b6:bb:c9:8c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNENB
N0YzNUFGMUE4RjUyNTc1QTlGRUZGRjIxQzRBNDcwODBEREZBMB4XDTIyMDIwMTAx
MzE1M1oXDTIzMDExNTAxMzAwM1owMzExMC8GA1UEAxMoMjI1QkM0NjgyMzVGQ0U2
MDQyQ0U4N0RFRDhEMDM1OTNCQUMzMUM1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPdCHUywiT/Ok/M0STWcJq9ejslvVwR9sRjvETG9oK7MR9QHqe15
L0JjFBxCzYfDqg+88nWKY/kMV0g9fKcmJiVeTqiROZRkIfSL3cg4ntltncbaOQG1
ccnmAp5ZH2c5/by4tM8jWI8jq3pDDRbBKX4QZ9NbZfFoKBHMVIyyIYrsMkPNwWee
nrL8XMeABzXSV0XvuarBLD5gy9WcXkVFNd4s/Ntk5K+D113qTxqbbFEiZCgBfKoV
Ioulqt7oB05KsXkxgw/Ak1CAj8aGKO2lYnlS0fO243XkWrwxq9PPfrSCdKRqnNG1
rRKwkbvykXYTyQHk2PmgDPo1MyDUtySfmUsCAwEAAaOCAdYwggHSMB0GA1UdDgQW
BBQiW8RoI1/OYELOh97Y0DWTusMcWDAfBgNVHSMEGDAWgBQEyn81rxqPUldan+//
IcSkcIDd+jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENBM2ZvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENB
M2ZvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0lsdkVhQ05mem1CQ3pvZmUyTkExazdyREhGZy5yb2EwHgYIKwYB
BQUHAQcBAf8EDzANMAsEAgABMAUDAwCdkzANBgkqhkiG9w0BAQsFAAOCAQEARQFL
zxNxB6pGZREVVAjgl+FYXvHXd6H7INC7JIYgQ3OAEdPiCaKLHt4IYKmobx5T6J8R
CHG1UUFSXYejGc3OC4ysPjWscROVbryx/OPsREbUs2u1VaN0Ld1PrzdCY2FCoIao
zZe/aMjkyirQ2JewdLJZpohDFXiHwlx374vSMjzoOJBW22MXxXONsWHlY4ePOyHS
Gh3UOYmlEakvqbg5pvKkzjYhuGfwLTVN0s6nWfpg8nRauOaL3MRhEaTQAgrFwc+Z
dNcl5JKu5cQLNU1Issw8cAVf1eqEhBlkUXsu5In0FIHVFSgAg4l+B7TWfy1sYGSd
k297n2pXuT7gtrvJjA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org