Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/RIC9HKCJTsVs0a1OJcRB0N42LTg.roa
File: RIC9HKCJTsVs0a1OJcRB0N42LTg.roa (raw, json)
Hash identifier: Cg+Kl/L/9/7Uca2uysaox9QPhyES26pP4oWS3ETBOWk=
Subject key identifier: 44:80:BD:1C:A0:89:4E:C5:6C:D1:AD:4E:25:C4:41:D0:DE:36:2D:38
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 43
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/RIC9HKCJTsVs0a1OJcRB0N42LTg.roa
Signing time: Wed 20 Apr 2022 09:37:39 +0000
ROA not before: Wed 20 Apr 2022 09:37:39 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:37:39 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=4480BD1CA0894EC56CD1AD4E25C441D0DE362D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:a2:2b:a3:e6:ba:51:0b:4f:2a:88:c8:bc:
1a:64:c1:18:b9:1c:e5:6d:14:60:3b:85:1f:39:a2:
3e:d1:dd:12:3b:e3:1c:af:2f:45:ad:1d:56:a8:28:
85:82:a9:3d:89:d5:d6:fe:e3:75:27:92:a9:f3:91:
9f:27:d9:ed:40:c2:6b:65:12:11:ce:e8:82:82:48:
0f:04:02:c7:5b:04:5a:d4:ba:09:3f:9a:69:12:06:
35:36:68:b0:c0:a9:9c:f3:c2:a5:d2:dc:72:c8:a6:
fb:de:7f:86:6c:cc:a2:72:44:8a:6e:69:fc:a5:74:
f8:b9:ff:e4:0d:e6:65:f4:17:b2:fd:5f:3c:c4:b6:
f4:0f:fd:5f:9d:ec:59:a4:1a:0f:8b:fb:65:ff:fc:
de:11:0d:cb:1e:01:26:a0:3e:38:a2:a1:14:da:50:
24:48:6a:7e:0e:66:cc:68:27:12:81:7e:94:c1:7f:
fa:a6:01:08:1f:40:fc:b9:6c:5e:5f:e9:2f:b5:a7:
b0:df:0c:13:a1:af:b1:7f:78:40:2b:1f:d8:e1:51:
de:1a:2b:df:6d:85:53:89:c7:89:a9:12:e8:b7:98:
a7:2c:39:e0:8c:05:17:af:86:c7:46:3f:39:cf:2d:
17:f4:f4:6f:d9:34:92:df:25:3f:fb:c7:b3:06:a4:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:80:BD:1C:A0:89:4E:C5:6C:D1:AD:4E:25:C4:41:D0:DE:36:2D:38
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/RIC9HKCJTsVs0a1OJcRB0N42LTg.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.166.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e0:2a:2c:f7:de:b1:b5:96:6e:54:8f:8e:fe:3c:c1:cd:74:
e7:87:e8:2c:5b:79:85:5b:ff:50:c9:3b:d1:d9:fa:11:52:bc:
77:a0:6b:a4:7f:b4:04:e8:56:94:22:23:8c:7c:4c:aa:d1:d0:
55:db:8c:b7:b9:2f:86:a5:3c:83:b1:0c:ff:b3:82:5c:16:8f:
d8:74:6d:58:9f:6e:f4:ca:82:1f:da:77:89:78:8f:66:9c:c7:
7f:c8:ae:73:51:6b:31:ec:7e:5e:c3:78:e6:ee:8c:58:d1:87:
3f:df:74:f5:32:f6:3e:cf:cc:e7:9a:36:2f:b3:1e:ba:4e:6c:
43:d5:35:e2:ce:96:d4:74:84:75:e6:89:7a:bb:be:f7:7f:f2:
7f:eb:12:3b:68:34:6f:4e:3a:ba:12:06:78:0c:a1:b8:50:78:
4d:a7:90:9a:d4:03:4d:76:0d:2c:74:36:af:18:93:dd:22:59:
d2:8c:b2:86:5b:c3:cb:6f:76:47:b6:7b:46:6a:91:a1:2e:96:
14:98:c2:73:c6:ef:84:21:d5:7e:79:09:20:a1:a7:78:94:20:
99:f5:ce:29:74:2c:e8:1f:6c:2f:89:72:e6:f7:9b:08:be:43:
d8:cd:18:d6:d3:40:20:22:46:09:37:dc:2c:88:21:e4:0c:58:
97:8a:20:2b
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MzczOVoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoNDQ4MEJEMUNBMDg5NEVD
NTZDRDFBRDRFMjVDNDQxRDBERTM2MkQzODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL09oiuj5rpRC08qiMi8GmTBGLkc5W0UYDuFHzmiPtHdEjvjHK8v
Ra0dVqgohYKpPYnV1v7jdSeSqfORnyfZ7UDCa2USEc7ogoJIDwQCx1sEWtS6CT+a
aRIGNTZosMCpnPPCpdLccsim+95/hmzMonJEim5p/KV0+Ln/5A3mZfQXsv1fPMS2
9A/9X53sWaQaD4v7Zf/83hENyx4BJqA+OKKhFNpQJEhqfg5mzGgnEoF+lMF/+qYB
CB9A/LlsXl/pL7WnsN8ME6GvsX94QCsf2OFR3hor322FU4nHiakS6LeYpyw54IwF
F6+Gx0Y/Oc8tF/T0b9k0kt8lP/vHswakKI8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBREgL0coIlOxWzRrU4lxEHQ3jYtODAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvUklDOUhLQ0pUc1ZzMGExT0pjUkIwTjQyTFRnLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMohpjANBgkqhkiG9w0BAQsFAAOCAQEA
ieAqLPfesbWWblSPjv48wc1054foLFt5hVv/UMk70dn6EVK8d6BrpH+0BOhWlCIj
jHxMqtHQVduMt7kvhqU8g7EM/7OCXBaP2HRtWJ9u9MqCH9p3iXiPZpzHf8iuc1Fr
Mex+XsN45u6MWNGHP9909TL2Ps/M55o2L7Meuk5sQ9U14s6W1HSEdeaJeru+93/y
f+sSO2g0b046uhIGeAyhuFB4TaeQmtQDTXYNLHQ2rxiT3SJZ0oyyhlvDy292R7Z7
RmqRoS6WFJjCc8bvhCHVfnkJIKGneJQgmfXOKXQs6B9sL4ly5vebCL5D2M0Y1tNA
ICJGCTfcLIgh5AxYl4ogKw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org