Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/uIEuy6q85r1zyGfP9Jfx_YX4LEE.roa
File: uIEuy6q85r1zyGfP9Jfx_YX4LEE.roa (raw, json)
Hash identifier: ILeJpY/d+rLENiZLPU8xc3qT7nv3DpOWKGQM2fWi66g=
Subject key identifier: B8:81:2E:CB:AA:BC:E6:BD:73:C8:67:CF:F4:97:F1:FD:85:F8:2C:41
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 19
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/uIEuy6q85r1zyGfP9Jfx_YX4LEE.roa
Signing time: Wed 20 Apr 2022 09:12:21 +0000
ROA not before: Wed 20 Apr 2022 09:12:21 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 211.3.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:12:21 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=B8812ECBAABCE6BD73C867CFF497F1FD85F82C41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:ab:38:11:84:a4:d9:5f:df:5a:1e:ab:9d:
e7:04:da:02:72:1c:a1:3a:49:e5:77:8b:15:5a:3e:
5e:03:a9:d5:97:f8:4f:ea:08:a7:50:aa:bf:a2:a3:
4e:8e:fe:77:f4:b8:bc:93:08:44:99:f5:5c:a2:8a:
85:95:1b:b1:78:20:6f:64:a5:2a:a1:1b:3f:f8:47:
50:0f:7c:36:76:ff:e7:90:28:43:74:13:08:ce:1e:
eb:d5:be:f7:35:d4:89:59:64:57:76:69:0c:7f:30:
aa:ae:4f:60:d1:92:28:1b:b8:51:a5:20:51:4a:fa:
c0:3b:7d:7e:9f:b3:1d:b8:54:10:c8:18:58:c8:54:
33:23:dc:e2:79:6b:2d:69:d0:4a:80:90:10:eb:ea:
da:6e:4f:22:72:ba:c5:2b:f9:2f:f7:95:f4:b4:4c:
de:02:99:62:af:ee:3f:31:ba:12:05:fd:7f:48:95:
8c:94:b3:31:64:e5:9f:c1:a8:43:ed:b6:de:3b:9b:
da:cf:5e:a2:f6:27:e0:fc:da:c3:ef:84:fd:07:8b:
19:4c:ca:ba:0f:2a:e4:0a:47:e8:8f:3c:6c:f0:1b:
a7:20:5a:86:d5:f5:01:00:55:fe:e3:a5:8b:43:00:
d6:c7:de:2d:81:f2:10:49:aa:e9:6e:e9:8d:fb:38:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:81:2E:CB:AA:BC:E6:BD:73:C8:67:CF:F4:97:F1:FD:85:F8:2C:41
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/uIEuy6q85r1zyGfP9Jfx_YX4LEE.roa
sbgp-ipAddrBlock: critical
IPv4:
211.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:a7:2b:00:c1:67:92:14:06:6b:a7:9d:69:b0:64:9f:12:99:
21:d3:95:59:0d:8c:53:56:06:28:54:96:a9:c2:85:d1:f6:d5:
a0:7d:29:7a:02:e3:f2:b3:60:4f:58:16:88:ac:4d:70:d8:90:
4d:f9:9c:65:49:50:d7:fd:ff:3c:6b:ce:4d:db:08:4b:96:d5:
70:74:9e:a1:59:3a:07:3f:72:5f:c5:ad:25:48:03:b3:90:45:
9b:e0:d8:ad:2a:42:1c:17:98:6c:6e:f3:6d:7c:e0:4e:e6:39:
b3:97:1b:c7:cd:0e:d1:f5:f9:88:be:61:e2:78:24:6d:27:29:
9b:33:2e:cd:ae:10:4a:52:cd:3d:52:a6:21:b2:70:42:77:6f:
c2:02:33:e5:38:d8:8d:2c:54:cb:2f:ba:17:cc:0e:3f:92:76:
93:25:3c:6a:d4:1a:e3:c5:4d:49:ec:c4:62:b6:db:4c:f5:08:
b0:cb:72:18:d4:3a:40:40:e6:36:f8:5b:66:1d:8d:e1:c3:20:
51:85:59:b4:99:91:2a:ff:17:ed:0d:8b:11:e8:81:4c:fc:a7:
81:00:3f:33:ac:c3:4b:a1:f5:c3:33:ef:af:11:5d:a3:3a:ae:
08:19:85:f6:5c:b9:dd:e7:07:d9:f9:d8:c7:d1:d5:56:f9:02:
2c:c4:45:13
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MTIyMVoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQjg4MTJFQ0JBQUJDRTZC
RDczQzg2N0NGRjQ5N0YxRkQ4NUY4MkM0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKZuqzgRhKTZX99aHqud5wTaAnIcoTpJ5XeLFVo+XgOp1Zf4T+oI
p1Cqv6KjTo7+d/S4vJMIRJn1XKKKhZUbsXggb2SlKqEbP/hHUA98Nnb/55AoQ3QT
CM4e69W+9zXUiVlkV3ZpDH8wqq5PYNGSKBu4UaUgUUr6wDt9fp+zHbhUEMgYWMhU
MyPc4nlrLWnQSoCQEOvq2m5PInK6xSv5L/eV9LRM3gKZYq/uPzG6EgX9f0iVjJSz
MWTln8GoQ+223jub2s9eovYn4Pzaw++E/QeLGUzKug8q5ApH6I88bPAbpyBahtX1
AQBV/uOli0MA1sfeLYHyEEmq6W7pjfs4FakCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBS4gS7LqrzmvXPIZ8/0l/H9hfgsQTAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvdUlFdXk2cTg1cjF6eUdmUDlKZnhfWVg0TEVFLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANMDMA0GCSqGSIb3DQEBCwUAA4IBAQCN
pysAwWeSFAZrp51psGSfEpkh05VZDYxTVgYoVJapwoXR9tWgfSl6AuPys2BPWBaI
rE1w2JBN+ZxlSVDX/f88a85N2whLltVwdJ6hWToHP3Jfxa0lSAOzkEWb4NitKkIc
F5hsbvNtfOBO5jmzlxvHzQ7R9fmIvmHieCRtJymbMy7NrhBKUs09UqYhsnBCd2/C
AjPlONiNLFTLL7oXzA4/knaTJTxq1BrjxU1J7MRitttM9Qiwy3IY1DpAQOY2+Ftm
HY3hwyBRhVm0mZEq/xftDYsR6IFM/KeBAD8zrMNLofXDM++vEV2jOq4IGYX2XLnd
5wfZ+djH0dVW+QIsxEUT
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org