Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2XgAisG-ib7M-9pN7dJMVwZEIEM.roa
File: 2XgAisG-ib7M-9pN7dJMVwZEIEM.roa (raw, json)
Hash identifier: Dhh8pVSWgXLi54km+6rNzjSougIcMv8IdcdC6N7B9WY=
Subject key identifier: D9:78:00:8A:C1:BE:89:BE:CC:FB:DA:4D:ED:D2:4C:57:06:44:20:43
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 21
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2XgAisG-ib7M-9pN7dJMVwZEIEM.roa
Signing time: Tue 11 Oct 2022 01:33:56 +0000
ROA not before: Tue 11 Oct 2022 01:33:56 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 4721
IP address blocks: 203.153.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 11 01:33:56 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=D978008AC1BE89BECCFBDA4DEDD24C5706442043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:b2:93:46:ea:93:a1:a0:fc:e4:54:69:db:
b0:53:49:23:08:b9:ee:f9:b1:c9:6f:d0:3c:f9:cc:
9b:bb:e4:df:fc:50:43:2a:dd:d0:b6:e7:21:f4:2d:
1d:4e:17:1e:36:5c:bb:91:6f:5e:c5:36:5d:fb:8d:
e5:52:01:c5:51:5a:55:08:c7:06:0b:83:7a:95:86:
2a:7c:67:5e:2d:6b:8d:b9:d5:8e:11:38:5d:6a:17:
48:77:2d:0d:aa:5f:d6:39:db:90:d4:6e:7f:eb:b0:
b4:38:d1:a9:2f:b5:67:9c:44:d8:88:84:ad:08:46:
e9:3f:c5:f7:bc:20:46:aa:93:0e:5c:6e:4d:3f:a0:
aa:87:3b:28:69:2e:47:18:bf:a2:c2:b7:e7:c3:17:
0b:92:54:ed:5f:b9:47:5f:6f:82:fe:e6:91:d4:53:
7d:b6:b0:67:3d:28:d2:9a:00:be:fa:49:87:60:72:
0f:07:63:52:ef:19:5e:85:0d:c4:ca:d7:67:a2:54:
d7:32:3a:ad:0d:bc:40:1d:aa:49:68:e1:9b:0c:78:
2c:d6:3d:a7:55:05:94:6c:6a:26:65:be:8b:89:ce:
4c:e8:60:58:fd:63:11:d9:8b:c1:f5:bb:26:43:50:
37:44:7e:23:70:8d:bb:75:9a:57:c1:ef:e4:1f:10:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:78:00:8A:C1:BE:89:BE:CC:FB:DA:4D:ED:D2:4C:57:06:44:20:43
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2XgAisG-ib7M-9pN7dJMVwZEIEM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.153.56.0/22
Signature Algorithm: sha256WithRSAEncryption
58:1b:8d:20:14:4c:af:39:52:6c:0c:1a:c7:a9:c0:5b:24:25:
2f:f1:97:00:d6:ac:3b:40:1d:a1:fa:c9:e9:b6:af:3b:81:55:
86:4b:e5:27:81:5c:5e:01:17:24:4f:8c:20:77:0b:7e:d0:4e:
82:5e:ba:12:f8:8e:e7:de:be:67:55:e0:09:ac:b7:12:d8:2c:
63:67:28:cc:fd:41:52:2d:dc:6a:89:a5:fa:90:40:5f:d5:d1:
8f:e8:96:05:44:1b:33:2d:3a:21:c2:60:66:b8:52:0a:63:7a:
e9:4d:47:d7:ae:00:7d:2c:87:32:46:26:6a:ed:84:05:7b:79:
64:0d:aa:6f:41:c6:c4:76:92:e5:1f:8f:36:c0:aa:9a:6d:53:
4c:18:b6:51:d9:72:5f:f5:0a:fd:41:9f:5c:04:60:3a:38:e4:
9d:a7:bc:a8:ea:0f:fe:ca:92:c6:fd:0b:05:f0:35:9e:83:f9:
50:43:f9:ca:3d:58:ea:8a:11:43:bf:85:a6:24:7d:a6:33:f6:
cf:3e:66:95:5f:db:19:4c:1c:41:0b:05:8b:0d:48:71:97:5e:
bc:14:83:c1:79:c8:32:a8:22:42:0e:5d:49:f0:08:46:b2:ff:
8a:7a:f6:c5:e4:6f:52:c3:72:df:d5:fb:46:b1:fe:c0:db:fa:
e9:9e:5a:41
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxMTAx
MzM1NloXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoRDk3ODAwOEFDMUJFODlC
RUNDRkJEQTRERUREMjRDNTcwNjQ0MjA0MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOR5spNG6pOhoPzkVGnbsFNJIwi57vmxyW/QPPnMm7vk3/xQQyrd
0LbnIfQtHU4XHjZcu5FvXsU2XfuN5VIBxVFaVQjHBguDepWGKnxnXi1rjbnVjhE4
XWoXSHctDapf1jnbkNRuf+uwtDjRqS+1Z5xE2IiErQhG6T/F97wgRqqTDlxuTT+g
qoc7KGkuRxi/osK358MXC5JU7V+5R19vgv7mkdRTfbawZz0o0poAvvpJh2ByDwdj
Uu8ZXoUNxMrXZ6JU1zI6rQ28QB2qSWjhmwx4LNY9p1UFlGxqJmW+i4nOTOhgWP1j
EdmLwfW7JkNQN0R+I3CNu3WaV8Hv5B8Q4SMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTZeACKwb6Jvsz72k3t0kxXBkQgQzAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvMlhnQWlzRy1pYjdNLTlwTjdkSk1Wd1pFSUVNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsuZODANBgkqhkiG9w0BAQsFAAOCAQEAWBuNIBRMrzlSbAwax6nAWyQlL/GX
ANasO0AdofrJ6bavO4FVhkvlJ4FcXgEXJE+MIHcLftBOgl66EviO596+Z1XgCay3
EtgsY2cozP1BUi3caoml+pBAX9XRj+iWBUQbMy06IcJgZrhSCmN66U1H164AfSyH
MkYmau2EBXt5ZA2qb0HGxHaS5R+PNsCqmm1TTBi2UdlyX/UK/UGfXARgOjjknae8
qOoP/sqSxv0LBfA1noP5UEP5yj1Y6ooRQ7+FpiR9pjP2zz5mlV/bGUwcQQsFiw1I
cZdevBSDwXnIMqgiQg5dSfAIRrL/inr2xeRvUsNy39X7RrH+wNv66Z5aQQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org