Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/cwRbOirWdTSA7oHnOokiBPG-mQQ.roa
File: cwRbOirWdTSA7oHnOokiBPG-mQQ.roa (raw, json)
Hash identifier: sg16aCJ7X3hkhikuVCRLJnputVEIflvAC5DsFl0ij7Q=
Subject key identifier: 73:04:5B:3A:2A:D6:75:34:80:EE:81:E7:3A:89:22:04:F1:BE:99:04
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 20
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/cwRbOirWdTSA7oHnOokiBPG-mQQ.roa
Signing time: Wed 20 Apr 2022 09:12:23 +0000
ROA not before: Wed 20 Apr 2022 09:12:23 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 210.231.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:12:23 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=73045B3A2AD6753480EE81E73A892204F1BE9904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:8a:0a:ca:fb:19:f4:82:ee:0b:d0:ab:f2:
77:7f:46:3f:4b:b2:d0:b2:95:bb:e2:56:e4:2a:5e:
9c:d8:18:47:25:6d:1d:a8:67:70:f0:ef:78:78:dd:
24:5d:96:93:67:86:13:5f:e5:2f:b7:67:1b:13:e0:
2f:8b:44:8c:28:f7:39:cb:90:c4:2a:e8:df:2a:21:
9b:68:d2:01:92:94:d5:69:34:f9:bf:0a:3b:97:15:
03:c6:d9:61:99:dd:a0:3a:25:90:85:de:a9:cb:36:
5f:e7:1f:78:ad:45:83:3e:59:a7:a7:2b:91:ad:58:
8f:1e:99:4d:93:fc:fc:e4:9a:9b:f5:9a:29:64:5b:
0d:cf:ae:3b:10:53:94:98:79:4e:20:b7:4d:77:35:
6b:1d:e8:a1:bc:14:86:8f:0b:3b:9b:0a:63:56:4f:
d6:4b:76:5a:66:79:fa:b7:72:4d:89:b8:e3:83:f0:
4d:e0:a9:e6:6a:40:34:73:e0:7f:6a:26:5f:3e:b5:
98:5c:da:b8:fd:f0:bc:10:59:38:77:8f:5a:dd:d3:
f3:c9:12:69:6f:b4:76:9f:1b:54:ce:12:b2:78:c3:
f6:17:99:47:72:26:53:c0:df:0a:eb:f2:94:2a:6b:
38:8f:92:a7:09:65:8c:89:70:73:ce:5d:a6:f9:59:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:04:5B:3A:2A:D6:75:34:80:EE:81:E7:3A:89:22:04:F1:BE:99:04
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/cwRbOirWdTSA7oHnOokiBPG-mQQ.roa
sbgp-ipAddrBlock: critical
IPv4:
210.231.0.0/17
Signature Algorithm: sha256WithRSAEncryption
8d:3d:92:e6:97:c0:b8:ce:8b:e9:22:15:1d:e7:1d:18:b0:d5:
f0:7a:dd:da:79:a2:62:de:97:4f:80:62:75:03:cd:89:36:e2:
31:5a:93:21:50:11:c6:64:d9:a5:6a:51:6c:6d:97:1e:81:93:
88:ed:12:4b:ce:82:04:cc:90:43:65:95:66:0b:22:6d:52:51:
f2:73:ac:f9:03:c6:ff:83:1e:03:a6:22:c3:3b:9c:a8:dd:47:
24:68:15:a9:65:c8:2f:c6:4d:d5:d1:b5:0f:61:e5:ba:88:b0:
57:2e:ba:08:d0:bd:50:0b:68:9b:dd:39:42:5e:e0:bb:a3:3e:
55:76:50:af:3d:bd:5c:c1:cd:81:c3:e4:3b:57:c2:a8:aa:0b:
08:bc:ef:1c:ae:b0:91:89:5c:03:e6:3c:a7:90:4d:62:00:17:
6f:b9:d7:62:ee:d2:12:d3:ba:49:1f:57:45:1e:0b:de:ca:dd:
05:0b:ef:b8:6f:62:3f:d9:b6:6e:45:cf:25:56:d4:54:43:63:
e5:34:b7:d3:f1:98:40:67:82:ce:b7:32:59:2a:78:b2:2e:97:
71:9b:95:94:83:f3:17:9e:f8:7d:a7:ee:cc:4f:55:76:16:e0:
75:41:cb:4d:9a:f6:b6:9e:ed:e9:2f:99:0d:49:02:96:49:77:
3d:2b:7d:82
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MTIyM1oXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoNzMwNDVCM0EyQUQ2NzUz
NDgwRUU4MUU3M0E4OTIyMDRGMUJFOTkwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALFkigrK+xn0gu4L0Kvyd39GP0uy0LKVu+JW5CpenNgYRyVtHahn
cPDveHjdJF2Wk2eGE1/lL7dnGxPgL4tEjCj3OcuQxCro3yohm2jSAZKU1Wk0+b8K
O5cVA8bZYZndoDolkIXeqcs2X+cfeK1Fgz5Zp6crka1Yjx6ZTZP8/OSam/WaKWRb
Dc+uOxBTlJh5TiC3TXc1ax3oobwUho8LO5sKY1ZP1kt2WmZ5+rdyTYm444PwTeCp
5mpANHPgf2omXz61mFzauP3wvBBZOHePWt3T88kSaW+0dp8bVM4SsnjD9heZR3Im
U8DfCuvylCprOI+SpwlljIlwc85dpvlZWGsCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRzBFs6KtZ1NIDugec6iSIE8b6ZBDAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvY3dSYk9pcldkVFNBN29Ibk9va2lCUEctbVFRLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9LnADANBgkqhkiG9w0BAQsFAAOCAQEA
jT2S5pfAuM6L6SIVHecdGLDV8Hrd2nmiYt6XT4BidQPNiTbiMVqTIVARxmTZpWpR
bG2XHoGTiO0SS86CBMyQQ2WVZgsibVJR8nOs+QPG/4MeA6YiwzucqN1HJGgVqWXI
L8ZN1dG1D2HluoiwVy66CNC9UAtom905Ql7gu6M+VXZQrz29XMHNgcPkO1fCqKoL
CLzvHK6wkYlcA+Y8p5BNYgAXb7nXYu7SEtO6SR9XRR4L3srdBQvvuG9iP9m2bkXP
JVbUVENj5TS30/GYQGeCzrcyWSp4si6XcZuVlIPzF574fafuzE9VdhbgdUHLTZr2
tp7t6S+ZDUkClkl3PSt9gg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org