Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/8GXftcytfDDu1k6t8vBkiXK-t84.roa
File: 8GXftcytfDDu1k6t8vBkiXK-t84.roa (raw, json)
Hash identifier: UuoifSERy3MFLnFS58cwg+PIElC3FkP89jWOQxDTdvQ=
Subject key identifier: F0:65:DF:B5:CC:AD:7C:30:EE:D6:4E:AD:F2:F0:64:89:72:BE:B7:CE
Certificate issuer: /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial: 02
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/8GXftcytfDDu1k6t8vBkiXK-t84.roa
Signing time: Wed 20 Apr 2022 03:11:46 +0000
ROA not before: Wed 20 Apr 2022 03:11:46 +0000
ROA not after: Thu 20 Apr 2023 03:04:46 +0000
asID: 23618
IP address blocks: 223.29.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Validity
Not Before: Apr 20 03:11:46 2022 GMT
Not After : Apr 20 03:04:46 2023 GMT
Subject: CN=F065DFB5CCAD7C30EED64EADF2F0648972BEB7CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:55:bc:5d:4b:17:de:4e:bb:d8:48:7a:ec:
3c:66:25:52:92:c4:de:e9:5c:cb:74:2a:90:f4:b3:
f8:7b:5f:b1:1a:c4:aa:1e:de:ed:9d:98:90:3c:9c:
13:41:33:08:4b:99:c2:a7:e5:3a:90:85:f2:ee:ab:
85:8b:fb:24:49:04:81:98:2e:16:4f:80:44:75:69:
99:12:52:0d:0c:cb:df:b9:4e:49:b6:de:2d:a2:f9:
c3:5d:88:96:de:dc:b3:58:1e:7f:d3:19:10:b2:fc:
22:dc:00:01:88:a3:ab:26:00:5e:28:e6:e2:c1:4e:
e1:5a:a2:9c:85:63:e8:1a:3e:8e:cc:7c:6e:f1:c0:
4e:72:bb:fc:08:66:46:d6:5c:6b:1d:b2:47:c4:1b:
db:a4:ff:6a:02:71:53:97:dc:c7:68:67:d2:07:e3:
50:06:75:00:c1:93:e2:9c:3f:5a:28:db:df:71:ae:
e5:a8:bb:c5:99:b2:0a:0b:cc:79:1f:46:dc:db:29:
43:1d:2a:c1:7d:62:8f:4d:a1:a6:ee:56:9a:6b:86:
8b:d4:a0:a1:a2:70:d6:1e:8e:bc:0b:e4:de:64:83:
0c:d0:9f:e4:70:07:9e:15:b6:87:5e:af:5f:f0:43:
56:5a:a4:12:c1:5a:c5:74:84:0d:68:c2:13:34:ed:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:65:DF:B5:CC:AD:7C:30:EE:D6:4E:AD:F2:F0:64:89:72:BE:B7:CE
X509v3 Authority Key Identifier:
keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/8GXftcytfDDu1k6t8vBkiXK-t84.roa
sbgp-ipAddrBlock: critical
IPv4:
223.29.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:ba:51:a8:86:e4:62:b9:f3:3a:57:10:be:c7:36:0a:01:0e:
7b:e5:11:42:26:13:0b:1d:75:f8:97:37:72:8a:38:e4:99:b7:
cf:59:65:93:9c:2d:b5:6d:d8:2e:a1:a3:fb:08:0a:ae:3a:2e:
cd:a6:11:05:8f:cd:0c:d9:0d:c8:de:02:50:23:c9:4b:68:ef:
c4:d3:c9:f6:9d:5d:56:b3:62:3a:40:45:2f:bc:77:9a:e1:b6:
a5:57:41:2e:36:88:6c:b9:6c:42:b1:9a:fc:94:e3:3a:49:8e:
14:27:81:11:f3:8f:fc:72:aa:7c:8d:31:94:36:e2:a8:fc:e3:
07:56:16:cb:27:33:a3:ce:1d:8e:6a:92:3c:34:d2:ca:42:67:
6b:c8:af:77:ab:77:c2:a2:04:74:18:bd:3a:53:b9:5d:72:23:
bb:63:0b:d9:4f:41:dd:a4:ae:77:d7:c6:6b:7c:41:5a:54:7a:
68:4b:bd:38:57:ee:5a:85:0c:21:6c:c3:d9:12:68:67:5a:08:
b7:b0:37:c1:c9:10:76:1a:be:56:1f:f4:2d:6f:c5:b7:9d:cf:
10:73:f8:28:f9:15:8b:ad:9c:ce:20:9d:a4:3c:d2:de:65:00:
74:7b:13:00:a9:ca:3b:91:0f:58:9a:23:0f:bd:e2:47:61:bb:
92:f8:c4:db
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RTcw
OEU4NUIxMEFDNjAzQzA2RDc4NUI0MjE1M0RDRkUxNjYzQUVBMB4XDTIyMDQyMDAz
MTE0NloXDTIzMDQyMDAzMDQ0NlowMzExMC8GA1UEAxMoRjA2NURGQjVDQ0FEN0Mz
MEVFRDY0RUFERjJGMDY0ODk3MkJFQjdDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN3iVbxdSxfeTrvYSHrsPGYlUpLE3ulcy3QqkPSz+HtfsRrEqh7e
7Z2YkDycE0EzCEuZwqflOpCF8u6rhYv7JEkEgZguFk+ARHVpmRJSDQzL37lOSbbe
LaL5w12Ilt7cs1gef9MZELL8ItwAAYijqyYAXijm4sFO4VqinIVj6Bo+jsx8bvHA
TnK7/AhmRtZcax2yR8Qb26T/agJxU5fcx2hn0gfjUAZ1AMGT4pw/Wijb33Gu5ai7
xZmyCgvMeR9G3NspQx0qwX1ij02hpu5WmmuGi9SgoaJw1h6OvAvk3mSDDNCf5HAH
nhW2h16vX/BDVlqkEsFaxXSEDWjCEzTtr5MCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTwZd+1zK18MO7WTq3y8GSJcr63zjAfBgNVHSMEGDAWgBRecI6FsQrGA8BteFtC
FT3P4WY66jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODI2L1huQ09oYkVLeGdQQWJYaGJRaFU5ei1GbU91by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1huQ09oYkVLeGdQQWJYaGJRaFU5ei1G
bU91by5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84MjYvOEdYZnRjeXRmRER1MWs2dDh2QmtpWEstdDg0LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAt8d9DANBgkqhkiG9w0BAQsFAAOCAQEA
frpRqIbkYrnzOlcQvsc2CgEOe+URQiYTCx11+Jc3coo45Jm3z1llk5wttW3YLqGj
+wgKrjouzaYRBY/NDNkNyN4CUCPJS2jvxNPJ9p1dVrNiOkBFL7x3muG2pVdBLjaI
bLlsQrGa/JTjOkmOFCeBEfOP/HKqfI0xlDbiqPzjB1YWyyczo84djmqSPDTSykJn
a8ivd6t3wqIEdBi9OlO5XXIju2ML2U9B3aSud9fGa3xBWlR6aEu9OFfuWoUMIWzD
2RJoZ1oIt7A3wckQdhq+Vh/0LW/Ft53PEHP4KPkVi62cziCdpDzS3mUAdHsTAKnK
O5EPWJojD73iR2G7kvjE2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org