Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/lE3zukC6NFskb9rxVacqMJtp5bM.roa
File: lE3zukC6NFskb9rxVacqMJtp5bM.roa (raw, json)
Hash identifier: ib6/Z4JpdAhewszCjTgo9UwdLvK2wzcq0OSKDCFaNdY=
Subject key identifier: 94:4D:F3:BA:40:BA:34:5B:24:6F:DA:F1:55:A7:2A:30:9B:69:E5:B3
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 02E5
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/lE3zukC6NFskb9rxVacqMJtp5bM.roa
Signing time: Tue 25 May 2021 02:41:51 +0000
ROA not before: Tue 25 May 2021 02:41:51 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 220.216.96.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741 (0x2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 25 02:41:51 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=944DF3BA40BA345B246FDAF155A72A309B69E5B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:b9:c6:82:ec:42:eb:bd:10:1d:0e:22:c2:
72:3f:34:a4:cc:d0:06:45:89:4e:c5:89:db:db:56:
53:54:d9:ea:48:c1:89:36:98:4b:88:1e:58:40:3e:
f9:9b:5c:1c:e3:bf:6d:21:5d:f6:56:9c:d9:7a:8f:
88:89:b9:62:06:72:17:a1:62:d9:8d:c3:48:83:36:
60:5a:32:9d:13:77:b8:c8:b9:f8:c4:90:89:46:9c:
72:bb:66:3a:08:f2:1d:94:9f:14:0a:fd:44:e2:1a:
52:6c:cf:a0:19:87:15:c1:5e:64:c3:90:ae:18:08:
86:5c:a1:8a:8c:3d:f1:20:48:0c:67:80:4f:5e:36:
1b:24:9a:ca:08:ac:c0:ee:1c:fc:ba:4a:cd:38:ec:
7e:26:d2:9a:c4:45:bf:16:1c:71:52:c8:6a:0d:f5:
26:30:0d:d6:86:9a:5e:3a:25:d9:ef:fd:48:44:36:
50:a5:85:e8:be:88:55:ad:fe:ab:41:e7:ec:fe:97:
fe:36:ce:e3:37:9a:a5:c5:08:c2:a4:01:21:4f:ba:
f8:cf:de:13:dc:cb:5c:1d:77:f6:ba:96:85:c0:4e:
1a:af:5e:f2:b9:85:10:18:fc:8f:fb:9f:f4:18:8e:
76:ae:42:f4:09:91:01:a7:01:5f:84:8c:ed:e7:2d:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4D:F3:BA:40:BA:34:5B:24:6F:DA:F1:55:A7:2A:30:9B:69:E5:B3
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/lE3zukC6NFskb9rxVacqMJtp5bM.roa
sbgp-ipAddrBlock: critical
IPv4:
220.216.96.0/22
Signature Algorithm: sha256WithRSAEncryption
88:9d:f5:08:b8:34:00:07:66:3d:ae:60:a6:a7:9a:6d:eb:03:
7f:79:78:97:c9:64:6a:5a:92:e6:db:67:f9:53:02:09:05:ff:
1b:00:85:04:48:01:d7:d0:b9:38:36:32:9c:9f:50:1c:6a:66:
3f:2c:6f:87:54:66:ac:79:1b:34:82:54:49:b5:e9:14:5e:a5:
da:48:0b:07:81:f7:c1:e6:54:76:9b:5d:f2:c6:12:e4:55:12:
5d:a8:1f:cb:bc:84:63:ed:b2:74:3b:04:99:dc:f1:4a:71:73:
52:26:fb:54:50:03:4b:6a:d6:fc:ab:68:d1:c8:06:fa:84:5d:
cf:35:b0:9c:56:3d:d6:cf:b1:24:28:8a:a2:6e:1b:34:33:5c:
ba:d2:59:6a:83:f7:44:46:46:ba:ac:48:a7:a7:a2:aa:de:f1:
9c:c0:2a:12:6c:ba:b5:be:09:ec:d4:7a:2e:e6:5e:a7:ee:92:
05:81:18:99:67:60:0e:29:f3:f7:83:eb:8a:c3:10:23:49:0a:
0f:ce:86:bf:08:07:3c:44:16:91:a6:82:45:b9:ee:b6:67:62:
be:81:73:d4:4f:ed:b0:1b:a4:08:86:4a:fd:07:40:ad:f2:8a:
ec:b0:fc:fe:04:a4:b6:55:57:27:97:1c:b8:56:ef:49:41:5a:
10:5f:2b:ff
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMTA1MjUw
MjQxNTFaFw0yMjA1MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0NERGM0JBNDBCQTM0
NUIyNDZGREFGMTU1QTcyQTMwOUI2OUU1QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXcbnGguxC670QHQ4iwnI/NKTM0AZFiU7FidvbVlNU2epIwYk2
mEuIHlhAPvmbXBzjv20hXfZWnNl6j4iJuWIGchehYtmNw0iDNmBaMp0Td7jIufjE
kIlGnHK7ZjoI8h2UnxQK/UTiGlJsz6AZhxXBXmTDkK4YCIZcoYqMPfEgSAxngE9e
NhskmsoIrMDuHPy6Ss047H4m0prERb8WHHFSyGoN9SYwDdaGml46Jdnv/UhENlCl
hei+iFWt/qtB5+z+l/42zuM3mqXFCMKkASFPuvjP3hPcy1wdd/a6loXAThqvXvK5
hRAY/I/7n/QYjnauQvQJkQGnAV+EjO3nLSGfAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUlE3zukC6NFskb9rxVacqMJtp5bMwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L2xFM3p1a0M2TkZza2I5cnhWYWNxTUp0cDViTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALc2GAwDQYJKoZIhvcNAQELBQADggEB
AIid9Qi4NAAHZj2uYKanmm3rA395eJfJZGpakubbZ/lTAgkF/xsAhQRIAdfQuTg2
MpyfUBxqZj8sb4dUZqx5GzSCVEm16RRepdpICweB98HmVHabXfLGEuRVEl2oH8u8
hGPtsnQ7BJnc8Upxc1Im+1RQA0tq1vyraNHIBvqEXc81sJxWPdbPsSQoiqJuGzQz
XLrSWWqD90RGRrqsSKenoqre8ZzAKhJsurW+CezUei7mXqfukgWBGJlnYA4p8/eD
64rDECNJCg/Ohr8IBzxEFpGmgkW57rZnYr6Bc9RP7bAbpAiGSv0HQK3yiuyw/P4E
pLZVVyeXHLhW70lBWhBfK/8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org