Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/MM9bo7szhhNRUhIcaQxfM8reKAs.roa
File: MM9bo7szhhNRUhIcaQxfM8reKAs.roa (raw, json)
Hash identifier: jb4tI/odfVS2+xsUhnVzbwzGUnFIm/3jny5vYe+m2o8=
Subject key identifier: 30:CF:5B:A3:BB:33:86:13:51:52:12:1C:69:0C:5F:33:CA:DE:28:0B
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 39
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/MM9bo7szhhNRUhIcaQxfM8reKAs.roa
Signing time: Wed 20 Apr 2022 09:32:46 +0000
ROA not before: Wed 20 Apr 2022 09:32:46 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.34.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:32:46 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=30CF5BA3BB3386135152121C690C5F33CADE280B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:ad:2a:2b:f4:cd:98:d7:a9:64:e8:36:d5:
e6:5a:6a:56:8c:d3:64:68:8e:63:94:99:82:f0:b5:
d4:36:36:ab:3c:ec:ad:f3:cd:4d:93:96:76:2b:d2:
ea:fe:ba:98:ff:4b:a2:1c:22:fc:17:bb:ec:b5:f5:
75:6d:24:f6:56:f3:c2:b5:34:3a:79:61:e0:7b:4f:
84:77:2b:0b:c8:51:3c:57:68:98:81:54:fd:a8:82:
ba:b6:c3:d8:bf:7a:aa:bd:ba:ea:a0:3d:54:f6:b8:
90:67:6e:5f:82:6e:00:65:88:07:6b:27:98:06:ce:
86:ba:f0:a8:13:85:da:47:04:da:e2:82:38:01:f5:
ff:02:4c:76:f9:5b:f8:16:db:13:cc:80:10:35:33:
b2:9a:6b:a4:9c:45:7e:ee:93:75:6d:8f:12:d7:d1:
f0:6a:b7:b8:26:5c:a1:38:c3:6f:c5:af:a0:07:de:
60:42:b0:bb:c4:88:53:89:e4:22:81:5b:d5:29:41:
7c:cd:22:b5:18:b4:74:ea:32:b5:38:46:50:9e:37:
e9:d8:e3:72:54:82:6d:8c:0f:69:bf:1c:02:f9:5e:
91:fd:4b:3e:c0:d8:44:b1:c1:3b:97:ef:b4:88:be:
02:fb:c3:08:da:05:1a:2e:58:d7:52:0d:dc:d1:e4:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CF:5B:A3:BB:33:86:13:51:52:12:1C:69:0C:5F:33:CA:DE:28:0B
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/MM9bo7szhhNRUhIcaQxfM8reKAs.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.34.0/23
Signature Algorithm: sha256WithRSAEncryption
75:ce:48:c1:5f:c4:a0:81:d8:a2:a7:71:1d:c2:52:81:7e:0a:
ca:be:85:2f:f1:68:c2:7f:d0:e1:5b:1f:1d:82:31:93:b6:92:
3a:42:17:eb:16:c3:3c:8a:6c:d2:e3:48:c0:04:b4:a5:1f:15:
f7:f6:d5:48:93:37:dd:3d:4b:1d:8e:8a:7d:53:80:ec:53:71:
b9:c4:5d:73:68:a9:5c:05:1d:bb:d9:34:50:41:08:a4:44:83:
a2:b4:a6:9f:11:bc:19:04:45:73:2d:36:f8:f4:5d:c1:5f:77:
9a:5c:9c:a0:27:76:47:a7:33:ae:fa:04:cc:ca:cb:84:48:6d:
e8:11:27:fc:fb:78:bc:47:47:24:70:fb:83:92:fc:69:f1:a0:
d1:a8:e5:6d:75:ee:9b:54:9a:3c:27:e2:8f:a7:01:39:81:96:
c4:d9:e8:2d:cb:41:a8:a6:d1:e6:9b:ab:75:32:5c:bb:7c:ab:
cd:bb:a1:17:c1:6c:7d:2c:74:18:be:f8:bc:32:74:58:88:d8:
fe:58:98:9d:1d:e2:f6:79:ce:d6:86:1a:5d:e2:8b:74:0f:f8:
9a:f0:31:d9:74:f2:9b:02:c9:47:75:e6:5c:2e:3e:0e:9a:27:
b4:51:0c:42:45:ca:2a:b2:b4:1c:d9:0a:a1:52:5d:6a:69:4a:
d8:81:af:b7
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MzI0NloXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMzBDRjVCQTNCQjMzODYx
MzUxNTIxMjFDNjkwQzVGMzNDQURFMjgwQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJsKrSor9M2Y16lk6DbV5lpqVozTZGiOY5SZgvC11DY2qzzsrfPN
TZOWdivS6v66mP9Lohwi/Be77LX1dW0k9lbzwrU0Onlh4HtPhHcrC8hRPFdomIFU
/aiCurbD2L96qr266qA9VPa4kGduX4JuAGWIB2snmAbOhrrwqBOF2kcE2uKCOAH1
/wJMdvlb+BbbE8yAEDUzspprpJxFfu6TdW2PEtfR8Gq3uCZcoTjDb8WvoAfeYEKw
u8SIU4nkIoFb1SlBfM0itRi0dOoytThGUJ436djjclSCbYwPab8cAvlekf1LPsDY
RLHBO5fvtIi+AvvDCNoFGi5Y11IN3NHkALsCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQwz1ujuzOGE1FSEhxpDF8zyt4oCzAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvTU05Ym83c3poaE5SVWhJY2FReGZNOHJlS0FzLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcohIjANBgkqhkiG9w0BAQsFAAOCAQEA
dc5IwV/EoIHYoqdxHcJSgX4Kyr6FL/Fown/Q4VsfHYIxk7aSOkIX6xbDPIps0uNI
wAS0pR8V9/bVSJM33T1LHY6KfVOA7FNxucRdc2ipXAUdu9k0UEEIpESDorSmnxG8
GQRFcy02+PRdwV93mlycoCd2R6czrvoEzMrLhEht6BEn/Pt4vEdHJHD7g5L8afGg
0ajlbXXum1SaPCfij6cBOYGWxNnoLctBqKbR5purdTJcu3yrzbuhF8FsfSx0GL74
vDJ0WIjY/liYnR3i9nnO1oYaXeKLdA/4mvAx2XTymwLJR3XmXC4+DpontFEMQkXK
KrK0HNkKoVJdamlK2IGvtw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org