Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/Y4SIraSUYZ7eJuMdQ1-pjWsTlUI.roa
File: Y4SIraSUYZ7eJuMdQ1-pjWsTlUI.roa (raw, json)
Hash identifier: /rLTEkif9eFfZlkqHIPAiKvimyyC/IOuAbJjkCt/ZX0=
Subject key identifier: 63:84:88:AD:A4:94:61:9E:DE:26:E3:1D:43:5F:A9:8D:6B:13:95:42
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 2A
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/Y4SIraSUYZ7eJuMdQ1-pjWsTlUI.roa
Signing time: Wed 20 Apr 2022 09:17:22 +0000
ROA not before: Wed 20 Apr 2022 09:17:22 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 210.156.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:17:22 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=638488ADA494619EDE26E31D435FA98D6B139542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:d7:2e:06:16:c1:d2:76:77:a9:39:66:2a:
3e:4e:d3:51:a5:67:9e:80:3c:d0:65:94:e1:51:6b:
4f:2d:97:b4:62:dd:54:5e:aa:68:0b:57:4b:61:e3:
36:49:be:6e:2c:aa:ae:cc:19:db:50:6a:2a:bb:a4:
f1:7e:ce:01:b1:e5:ce:cd:84:ca:08:ab:32:dc:db:
f3:41:73:5b:16:8c:17:f6:d1:67:bd:81:d7:16:ab:
9d:32:4e:3f:50:56:98:c2:44:dd:9a:d5:73:3f:b6:
8b:c0:b6:74:86:b9:bb:10:86:d2:5d:4a:0f:94:2f:
12:f5:17:63:6b:c1:4c:e3:95:22:c8:de:9f:96:df:
73:9a:7d:35:ef:7b:34:28:31:f4:04:81:dd:5a:c8:
ee:6e:7b:8a:e7:e0:fd:2e:a5:c4:d4:c7:c7:d6:66:
4e:46:7b:b7:bb:41:64:04:a2:37:df:cb:0e:d8:af:
af:4b:46:9f:69:07:03:7f:72:72:8e:1a:fb:c6:b6:
da:9f:4e:a4:9a:44:df:eb:f6:6e:14:c1:2f:e7:aa:
31:4b:57:15:49:11:de:8f:ac:74:0a:e0:bf:9f:fc:
44:04:f3:93:20:cf:00:7f:f2:ab:67:40:ab:51:b3:
1c:74:09:99:d4:e9:41:35:45:6f:18:8f:8c:94:75:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:88:AD:A4:94:61:9E:DE:26:E3:1D:43:5F:A9:8D:6B:13:95:42
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/Y4SIraSUYZ7eJuMdQ1-pjWsTlUI.roa
sbgp-ipAddrBlock: critical
IPv4:
210.156.100.0/22
Signature Algorithm: sha256WithRSAEncryption
75:9c:03:be:9f:f4:74:bc:57:d3:75:de:52:72:fe:fa:0e:cf:
eb:57:b6:7b:34:1a:dc:8e:fb:1f:be:99:90:e1:1a:e3:f5:99:
47:10:5a:e6:4c:4e:01:84:b1:ef:a2:3a:98:0d:1f:c8:a7:6a:
dc:8d:6c:1b:bd:c7:03:61:c8:7a:f7:5f:c9:28:97:84:61:be:
a4:97:ef:dd:bf:61:50:37:33:bb:56:52:c1:bf:da:7f:54:04:
e8:6f:b3:98:1f:03:c1:64:34:7e:c0:68:79:18:bc:46:7a:0a:
fb:d9:ee:68:3d:64:03:e4:77:4f:e2:0e:df:21:e7:6b:48:6d:
cc:87:30:75:e6:0f:bf:5c:74:d6:2e:29:ab:aa:41:66:65:e7:
d4:50:fa:9c:ec:d2:1b:5a:f2:58:a4:1e:58:35:15:f2:56:60:
b8:8f:ee:df:cc:8f:29:5f:bc:8c:f2:26:14:20:a4:56:ee:55:
39:b5:eb:a3:03:8d:2a:5d:ef:5d:77:b2:b0:01:f9:b3:6b:20:
7c:43:ab:36:86:b0:05:c7:67:df:19:dd:3f:cd:dd:0e:f9:f0:
e8:73:8e:2b:96:1a:ac:d6:32:56:49:45:cd:7a:60:82:4e:04:
08:c2:65:69:ed:77:e9:1e:82:67:d1:b4:68:ec:a6:60:df:0b:
61:93:d8:d8
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MTcyMloXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoNjM4NDg4QURBNDk0NjE5
RURFMjZFMzFENDM1RkE5OEQ2QjEzOTU0MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN3b1y4GFsHSdnepOWYqPk7TUaVnnoA80GWU4VFrTy2XtGLdVF6q
aAtXS2HjNkm+biyqrswZ21BqKruk8X7OAbHlzs2EygirMtzb80FzWxaMF/bRZ72B
1xarnTJOP1BWmMJE3ZrVcz+2i8C2dIa5uxCG0l1KD5QvEvUXY2vBTOOVIsjen5bf
c5p9Ne97NCgx9ASB3VrI7m57iufg/S6lxNTHx9ZmTkZ7t7tBZASiN9/LDtivr0tG
n2kHA39yco4a+8a22p9OpJpE3+v2bhTBL+eqMUtXFUkR3o+sdArgv5/8RATzkyDP
AH/yq2dAq1GzHHQJmdTpQTVFbxiPjJR1nZMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRjhIitpJRhnt4m4x1DX6mNaxOVQjAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvWTRTSXJhU1VZWjdlSnVNZFExLXBqV3NUbFVJLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtKcZDANBgkqhkiG9w0BAQsFAAOCAQEA
dZwDvp/0dLxX03XeUnL++g7P61e2ezQa3I77H76ZkOEa4/WZRxBa5kxOAYSx76I6
mA0fyKdq3I1sG73HA2HIevdfySiXhGG+pJfv3b9hUDczu1ZSwb/af1QE6G+zmB8D
wWQ0fsBoeRi8RnoK+9nuaD1kA+R3T+IO3yHna0htzIcwdeYPv1x01i4pq6pBZmXn
1FD6nOzSG1ryWKQeWDUV8lZguI/u38yPKV+8jPImFCCkVu5VObXrowONKl3vXXey
sAH5s2sgfEOrNoawBcdn3xndP83dDvnw6HOOK5YarNYyVklFzXpggk4ECMJlae13
6R6CZ9G0aOymYN8LYZPY2A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org