Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/hc66_4uBpNV40sc_tdB8yqJjErQ.roa
File: hc66_4uBpNV40sc_tdB8yqJjErQ.roa (raw, json)
Hash identifier: refYBq9h3JGAXxILLZVEHMaVkW64aX9uZ0vpNencqDI=
Subject key identifier: 85:CE:BA:FF:8B:81:A4:D5:78:D2:C7:3F:B5:D0:7C:CA:A2:63:12:B4
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 38
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/hc66_4uBpNV40sc_tdB8yqJjErQ.roa
Signing time: Tue 01 Feb 2022 01:31:13 +0000
ROA not before: Tue 01 Feb 2022 01:31:13 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 152.165.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 1 01:31:13 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=85CEBAFF8B81A4D578D2C73FB5D07CCAA26312B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:c8:2e:1c:47:3b:ff:52:b1:e3:cf:60:01:
7c:08:54:b7:db:ef:f4:b6:78:f0:c5:2e:83:b2:d8:
30:cd:57:0b:8e:4d:79:f5:86:be:cb:72:14:6d:43:
62:61:8c:c4:45:24:99:d3:59:0c:25:d8:13:a9:b1:
aa:ea:ed:f1:c4:2b:7e:bf:10:6c:9b:54:80:1c:a1:
a4:3e:48:a1:e4:d6:08:9b:11:67:9b:9b:7f:05:c3:
da:83:7b:ae:f2:9a:6b:2d:86:2d:d4:04:a1:64:b6:
37:e0:47:17:50:3c:5c:09:3d:1c:75:3e:e1:81:da:
4f:d5:10:27:4e:30:37:02:77:0d:5a:7d:60:ee:87:
55:a2:0d:a7:ed:f9:50:9e:f9:bc:43:a9:d5:93:82:
fa:b2:b2:6c:f9:41:3f:29:30:3a:c7:63:8d:ca:4d:
58:f6:98:5c:9b:3e:07:a1:06:c7:8f:39:7c:23:4b:
83:55:03:af:fd:a1:f2:26:fa:b0:c1:73:77:fd:18:
ce:40:e9:d5:5c:31:68:f7:73:87:b6:db:7a:c7:e8:
9e:bc:41:25:a6:4f:22:88:f6:cd:e6:43:36:23:17:
24:6e:ae:2e:33:b9:80:aa:1b:df:ce:b5:b3:20:64:
bc:9e:00:c9:df:08:ff:f6:ff:4c:06:3b:10:58:49:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CE:BA:FF:8B:81:A4:D5:78:D2:C7:3F:B5:D0:7C:CA:A2:63:12:B4
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/hc66_4uBpNV40sc_tdB8yqJjErQ.roa
sbgp-ipAddrBlock: critical
IPv4:
152.165.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:ff:2a:de:87:79:26:44:54:1e:65:d3:3f:6e:be:82:c6:88:
72:25:d3:ec:60:b6:81:7f:bc:7a:36:21:e0:38:00:be:b9:40:
68:78:6f:7c:73:87:40:a1:c3:67:d1:16:d9:30:94:05:c4:0b:
29:9e:79:1b:91:0d:89:c1:1e:55:48:0c:75:0e:70:1c:7d:f8:
e6:d8:15:a1:87:4a:c1:bd:8c:72:9e:90:4f:f2:ba:81:19:72:
0d:1c:8a:4c:f2:3d:ae:d5:b7:a7:bd:e4:39:37:6b:45:bd:f2:
9e:75:20:83:b2:80:0e:e6:68:fe:2c:72:be:d7:5c:ea:22:8f:
db:f6:1e:67:f0:04:b7:9c:86:32:9a:b5:1c:18:80:07:40:64:
6a:2d:a3:49:f4:35:f7:cb:28:29:35:fc:71:42:93:92:9d:11:
58:a5:1f:cc:de:60:38:dc:86:90:c6:91:9e:86:2f:26:aa:24:
73:dd:30:86:a5:94:b5:7c:24:fd:1a:f5:f6:37:68:d2:be:f0:
94:c6:88:34:70:5d:0c:4a:aa:32:74:54:fe:a4:c7:20:b2:37:
f0:f7:81:87:b7:e8:63:06:62:2a:b6:d5:55:43:d0:30:33:2a:
79:bc:75:74:84:a1:85:ac:d3:c4:a6:78:92:b0:2b:7a:c8:fd:
9b:a4:22:f6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNENB
N0YzNUFGMUE4RjUyNTc1QTlGRUZGRjIxQzRBNDcwODBEREZBMB4XDTIyMDIwMTAx
MzExM1oXDTIzMDExNTAxMzAwM1owMzExMC8GA1UEAxMoODVDRUJBRkY4QjgxQTRE
NTc4RDJDNzNGQjVEMDdDQ0FBMjYzMTJCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM71yC4cRzv/UrHjz2ABfAhUt9vv9LZ48MUug7LYMM1XC45NefWG
vstyFG1DYmGMxEUkmdNZDCXYE6mxqurt8cQrfr8QbJtUgByhpD5IoeTWCJsRZ5ub
fwXD2oN7rvKaay2GLdQEoWS2N+BHF1A8XAk9HHU+4YHaT9UQJ04wNwJ3DVp9YO6H
VaINp+35UJ75vEOp1ZOC+rKybPlBPykwOsdjjcpNWPaYXJs+B6EGx485fCNLg1UD
r/2h8ib6sMFzd/0YzkDp1VwxaPdzh7bbesfonrxBJaZPIoj2zeZDNiMXJG6uLjO5
gKob3861syBkvJ4Ayd8I//b/TAY7EFhJweECAwEAAaOCAdYwggHSMB0GA1UdDgQW
BBSFzrr/i4Gk1XjSxz+10HzKomMStDAfBgNVHSMEGDAWgBQEyn81rxqPUldan+//
IcSkcIDd+jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENBM2ZvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENB
M2ZvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL2hjNjZfNHVCcE5WNDBzY190ZEI4eXFKakVyUS5yb2EwHgYIKwYB
BQUHAQcBAf8EDzANMAsEAgABMAUDAwCYpTANBgkqhkiG9w0BAQsFAAOCAQEAGv8q
3od5JkRUHmXTP26+gsaIciXT7GC2gX+8ejYh4DgAvrlAaHhvfHOHQKHDZ9EW2TCU
BcQLKZ55G5ENicEeVUgMdQ5wHH345tgVoYdKwb2Mcp6QT/K6gRlyDRyKTPI9rtW3
p73kOTdrRb3ynnUgg7KADuZo/ixyvtdc6iKP2/YeZ/AEt5yGMpq1HBiAB0Bkai2j
SfQ198soKTX8cUKTkp0RWKUfzN5gONyGkMaRnoYvJqokc90whqWUtXwk/Rr19jdo
0r7wlMaINHBdDEqqMnRU/qTHILI38PeBh7foYwZiKrbVVUPQMDMqebx1dIShhazT
xKZ4krAresj9m6Qi9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org