Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/5ImFWTS2l3o-T9cA7bI76azjJBE.roa
File: 5ImFWTS2l3o-T9cA7bI76azjJBE.roa (raw, json)
Hash identifier: s9+Qc3BhFIxQjEBIjMC4iahoYNXV6GFVvZnWctj8XX4=
Subject key identifier: E4:89:85:59:34:B6:97:7A:3E:4F:D7:00:ED:B2:3B:E9:AC:E3:24:11
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 36
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/5ImFWTS2l3o-T9cA7bI76azjJBE.roa
Signing time: Wed 20 Apr 2022 09:27:35 +0000
ROA not before: Wed 20 Apr 2022 09:27:35 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:27:35 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=E489855934B6977A3E4FD700EDB23BE9ACE32411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:39:57:5d:fb:e0:75:07:6a:fc:f9:44:96:
29:d6:c8:e5:ce:df:a9:82:e6:ee:87:b5:c5:74:f6:
2a:0b:d9:87:f9:bb:72:54:c4:c4:30:cc:23:9e:0d:
70:db:48:6f:84:eb:23:64:85:67:97:4d:34:3a:5d:
0e:02:ef:ce:a3:9e:b8:0d:48:f1:52:7e:a9:27:f6:
a5:3c:12:03:7d:72:50:7b:72:88:fe:a8:96:68:93:
fb:21:39:29:02:3f:a4:25:6a:0a:33:be:70:87:aa:
29:dc:23:a2:94:3f:46:96:c8:6d:bf:43:d7:b9:58:
1b:fb:2f:a2:0f:b0:19:ac:8f:46:da:80:aa:63:75:
a5:96:93:e9:29:7c:9c:f9:ae:00:c2:3a:07:98:36:
be:6c:39:6e:36:f0:49:1d:bf:f7:c5:cb:13:d6:ed:
4a:46:86:82:a4:97:5a:5e:70:22:23:2f:ae:47:4c:
d0:e0:10:ea:f4:2e:1f:ed:1e:ca:44:1e:d4:dc:56:
dd:d5:b5:fa:63:a4:26:6d:d6:03:d0:92:29:94:17:
4b:ba:f1:c6:9a:8d:62:45:0a:e7:78:02:c6:98:9f:
7e:72:2e:1f:64:d6:47:95:4c:97:d4:6d:2b:ee:37:
54:2c:5c:0c:74:07:b4:e9:0b:eb:a7:e8:e7:be:d5:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:89:85:59:34:B6:97:7A:3E:4F:D7:00:ED:B2:3B:E9:AC:E3:24:11
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/5ImFWTS2l3o-T9cA7bI76azjJBE.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.87.0/24
Signature Algorithm: sha256WithRSAEncryption
84:78:76:57:b2:b6:e1:33:9c:22:ff:df:14:0f:fe:1b:b5:4c:
f8:c8:89:1c:1e:d3:27:a3:9b:7b:76:9b:81:23:db:fc:36:c0:
71:b0:7c:21:69:57:8b:a9:b9:79:ac:5a:c3:9f:2b:b8:9b:0d:
92:a5:6a:d9:7e:84:80:e4:3d:7d:be:58:a8:36:bc:13:f2:21:
fa:5d:b6:90:21:58:58:45:8b:78:f0:54:6d:35:0f:4a:06:ac:
3f:bf:d2:8d:16:36:f3:57:fc:ed:1d:37:e2:19:47:47:c5:4a:
88:a9:f1:ea:19:53:e8:dc:ce:f8:76:3c:4e:f3:6d:93:18:51:
a6:20:d1:89:9b:eb:93:66:4e:34:fa:36:04:7e:0c:69:bd:d7:
60:b2:7b:8f:a3:fb:5c:6e:25:6f:2c:6c:c0:fc:85:b1:73:33:
bf:16:97:dd:82:14:4a:f2:9f:e3:8f:63:12:c6:7d:ff:f4:4a:
7d:a7:49:3a:f8:e4:7b:d3:c9:36:0b:bf:f8:00:12:67:04:70:
1c:d5:4d:61:93:93:33:f4:e2:b5:9b:a3:67:15:80:f5:00:4a:
9f:2f:f9:da:03:32:e5:4f:55:c2:be:78:7e:2a:9c:50:fb:fc:
7b:10:a9:70:f2:68:6a:ea:5d:c5:51:05:a9:f4:4f:0e:f6:85:
36:42:5e:58
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MjczNVoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoRTQ4OTg1NTkzNEI2OTc3
QTNFNEZENzAwRURCMjNCRTlBQ0UzMjQxMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOr7OVdd++B1B2r8+USWKdbI5c7fqYLm7oe1xXT2KgvZh/m7clTE
xDDMI54NcNtIb4TrI2SFZ5dNNDpdDgLvzqOeuA1I8VJ+qSf2pTwSA31yUHtyiP6o
lmiT+yE5KQI/pCVqCjO+cIeqKdwjopQ/RpbIbb9D17lYG/svog+wGayPRtqAqmN1
pZaT6Sl8nPmuAMI6B5g2vmw5bjbwSR2/98XLE9btSkaGgqSXWl5wIiMvrkdM0OAQ
6vQuH+0eykQe1NxW3dW1+mOkJm3WA9CSKZQXS7rxxpqNYkUK53gCxpiffnIuH2TW
R5VMl9RtK+43VCxcDHQHtOkL66fo577V6IECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTkiYVZNLaXej5P1wDtsjvprOMkETAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvNUltRldUUzJsM28tVDljQTdiSTc2YXpqSkJFLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMohVzANBgkqhkiG9w0BAQsFAAOCAQEA
hHh2V7K24TOcIv/fFA/+G7VM+MiJHB7TJ6Obe3abgSPb/DbAcbB8IWlXi6m5eaxa
w58ruJsNkqVq2X6EgOQ9fb5YqDa8E/Ih+l22kCFYWEWLePBUbTUPSgasP7/SjRY2
81f87R034hlHR8VKiKnx6hlT6NzO+HY8TvNtkxhRpiDRiZvrk2ZONPo2BH4Mab3X
YLJ7j6P7XG4lbyxswPyFsXMzvxaX3YIUSvKf449jEsZ9//RKfadJOvjke9PJNgu/
+AASZwRwHNVNYZOTM/TitZujZxWA9QBKny/52gMy5U9Vwr54fiqcUPv8exCpcPJo
aupdxVEFqfRPDvaFNkJeWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org