Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Ty3-20iOvZYbS-e0WoOvm22_MHo.roa
File: Ty3-20iOvZYbS-e0WoOvm22_MHo.roa (raw, json)
Hash identifier: 2PczYwdnlYDEHLruvz+yEef458Nafx6LyKskEZqfuU8=
Subject key identifier: 4F:2D:FE:DB:48:8E:BD:96:1B:4B:E7:B4:5A:83:AF:9B:6D:BF:30:7A
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 91
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Ty3-20iOvZYbS-e0WoOvm22_MHo.roa
Signing time: Tue 01 Feb 2022 01:31:21 +0000
ROA not before: Tue 01 Feb 2022 01:31:21 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 182.168.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:21 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=4F2DFEDB488EBD961B4BE7B45A83AF9B6DBF307A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:05:35:7d:cb:89:d6:75:45:3a:6a:c4:e8:
5c:6c:71:01:71:4c:ae:0d:b6:4b:5a:00:24:08:33:
45:4a:05:c5:81:82:d5:45:f4:18:f5:af:b9:33:b2:
f7:24:23:f1:e5:ca:30:e0:21:24:86:77:b2:3c:59:
ed:96:81:9d:12:03:d5:c4:65:7a:e2:af:c3:a2:59:
7b:a8:e2:e5:3c:5a:9f:dd:96:6b:4d:3f:f2:2f:14:
ed:eb:98:d6:18:53:16:f8:34:ac:b8:59:82:e9:86:
da:53:a1:60:8e:0e:e1:b7:9e:7b:f8:0b:af:39:5a:
a6:50:1a:73:db:a4:24:0e:04:83:17:47:16:e9:7f:
e5:ba:95:61:6a:4d:d7:64:c8:2e:d3:c8:9d:24:40:
28:94:43:f7:42:54:77:ae:cb:c2:3b:c3:a6:6d:7e:
91:9f:01:27:6f:29:94:5a:e6:9a:c1:93:32:d5:d9:
ae:59:92:20:f7:f4:80:41:3e:3a:f5:67:8d:b6:f9:
af:e8:84:ef:d7:34:42:08:e8:ac:8c:d4:f4:3f:5c:
05:70:28:6f:d8:de:2e:fb:22:c2:86:66:64:fb:4b:
a4:b4:dc:86:7f:94:56:17:f9:9c:b0:c7:95:e8:15:
d3:4a:c4:b5:33:65:23:b8:48:b0:04:ba:0a:9b:d3:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2D:FE:DB:48:8E:BD:96:1B:4B:E7:B4:5A:83:AF:9B:6D:BF:30:7A
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Ty3-20iOvZYbS-e0WoOvm22_MHo.roa
sbgp-ipAddrBlock: critical
IPv4:
182.168.0.0/14
Signature Algorithm: sha256WithRSAEncryption
bd:88:ea:c5:61:f0:bd:33:d7:2b:11:99:3c:72:03:ef:8c:f7:
0c:0f:13:b8:41:d2:0b:8f:68:0b:2c:42:83:93:54:97:99:4d:
51:9c:98:10:51:ea:60:b7:48:a7:19:5e:53:6a:16:da:22:7b:
60:22:4c:ce:b3:e0:02:71:36:97:7e:87:bb:b8:df:93:cb:ee:
26:28:b0:25:95:07:0e:d3:70:93:18:3c:3b:27:aa:29:9c:4a:
c7:c8:b9:11:11:df:04:f2:6b:fe:57:69:88:26:a2:8d:69:7e:
c8:b9:3f:2c:3e:d0:4c:65:e0:56:96:53:fc:50:5a:c0:e2:d9:
a9:54:38:cc:06:ea:1d:99:3f:52:84:32:0c:c5:b2:3d:0c:3a:
fd:c1:d2:ac:40:b3:c3:8e:e3:4c:22:7a:a1:cb:57:95:4d:f3:
35:d2:62:5d:ab:47:20:10:3c:98:b6:e7:e7:38:9f:72:7c:1b:
e1:0f:1c:1c:7c:4f:59:d9:07:a6:77:44:be:19:14:bb:f3:be:
c1:80:4f:e1:b8:42:2f:e5:9f:43:6c:b0:1e:21:90:7f:08:8c:
16:38:1a:f6:bf:eb:06:3d:06:9f:18:8a:f7:bd:00:b4:96:18:
39:04:c6:ab:15:1b:7b:e9:0f:52:93:ab:f6:a6:44:9e:7a:51:
64:9c:51:2c
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMjAyMDEw
MTMxMjFaFw0yMzAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRGMkRGRURCNDg4RUJE
OTYxQjRCRTdCNDVBODNBRjlCNkRCRjMwN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJSAU1fcuJ1nVFOmrE6FxscQFxTK4NtktaACQIM0VKBcWBgtVF
9Bj1r7kzsvckI/HlyjDgISSGd7I8We2WgZ0SA9XEZXrir8OiWXuo4uU8Wp/dlmtN
P/IvFO3rmNYYUxb4NKy4WYLphtpToWCODuG3nnv4C685WqZQGnPbpCQOBIMXRxbp
f+W6lWFqTddkyC7TyJ0kQCiUQ/dCVHeuy8I7w6ZtfpGfASdvKZRa5prBkzLV2a5Z
kiD39IBBPjr1Z422+a/ohO/XNEII6KyM1PQ/XAVwKG/Y3i77IsKGZmT7S6S03IZ/
lFYX+Zywx5XoFdNKxLUzZSO4SLAEugqb03JFAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUTy3+20iOvZYbS+e0WoOvm22/MHowHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9UeTMtMjBpT3ZaWWJTLWUwV29Pdm0yMl9NSG8ucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMCtqgwDQYJKoZIhvcNAQELBQADggEBAL2I
6sVh8L0z1ysRmTxyA++M9wwPE7hB0guPaAssQoOTVJeZTVGcmBBR6mC3SKcZXlNq
Ftoie2AiTM6z4AJxNpd+h7u435PL7iYosCWVBw7TcJMYPDsnqimcSsfIuRER3wTy
a/5XaYgmoo1pfsi5Pyw+0Exl4FaWU/xQWsDi2alUOMwG6h2ZP1KEMgzFsj0MOv3B
0qxAs8OO40wieqHLV5VN8zXSYl2rRyAQPJi25+c4n3J8G+EPHBx8T1nZB6Z3RL4Z
FLvzvsGAT+G4Qi/ln0NssB4hkH8IjBY4Gva/6wY9Bp8Yive9ALSWGDkExqsVG3vp
D1KTq/amRJ56UWScUSw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org