Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/3SNcaGwAHkT6lngJWzKVW43gEtY.roa
File:                     3SNcaGwAHkT6lngJWzKVW43gEtY.roa (raw, json)
Hash identifier:          S9Gc6EudJsi8b0PrEvti7LPmSZAV9gsOCUm3sPx2Ndw=
Subject key identifier:   DD:23:5C:68:6C:00:1E:44:FA:96:78:09:5B:32:95:5B:8D:E0:12:D6
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       62
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3SNcaGwAHkT6lngJWzKVW43gEtY.roa
Signing time:             Sat 08 May 2021 04:05:36 +0000
ROA not before:           Sat 08 May 2021 04:05:36 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        210.132.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:36 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=DD235C686C001E44FA9678095B32955B8DE012D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:d1:27:b7:99:18:cb:c9:be:b8:45:e0:d3:
                    cb:2e:da:8b:d7:94:a7:8d:07:f7:80:15:35:f8:a7:
                    52:39:24:a3:77:65:44:3e:dd:a0:a9:41:b6:d9:5a:
                    9a:8a:12:7e:01:e3:d3:ad:5f:5e:e2:ee:77:b4:96:
                    ca:f7:86:10:b7:fc:2f:ae:78:40:97:34:6f:16:bf:
                    ee:a7:3b:05:5e:3a:5a:a4:f1:0e:55:47:c3:82:ba:
                    58:d7:be:5b:00:5e:15:e0:0b:23:40:b1:f1:58:a1:
                    06:e0:48:2b:c2:c4:60:9c:5c:91:bb:8b:7e:36:ac:
                    d5:fe:ea:01:5e:7e:0e:a8:26:3e:e3:78:36:0e:1f:
                    e0:b8:63:b4:92:c7:23:0b:75:23:68:f9:35:1a:1d:
                    38:a8:6d:a3:40:d5:0e:e3:df:f6:31:4f:84:1c:be:
                    f9:2c:a1:ae:29:90:fb:07:e4:0f:64:0b:3f:3b:af:
                    49:2e:36:e2:37:85:7c:99:3a:77:d3:7d:d4:25:79:
                    d3:9c:53:a6:65:07:42:99:4d:fc:8e:62:f6:60:41:
                    41:dd:fa:9a:54:46:9a:9e:15:d4:36:dc:10:dc:a2:
                    bc:cb:76:24:b7:68:29:c1:3e:67:ce:fc:e4:08:9a:
                    54:4d:9b:2b:fb:45:22:ae:f2:eb:06:2e:d0:4d:c0:
                    83:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:23:5C:68:6C:00:1E:44:FA:96:78:09:5B:32:95:5B:8D:E0:12:D6
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3SNcaGwAHkT6lngJWzKVW43gEtY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7d:71:74:b8:81:c2:b6:bd:95:37:00:c2:90:68:28:fa:4b:eb:
         f4:13:6b:13:75:32:dd:75:1e:be:04:72:7b:40:1b:e8:d9:26:
         2f:27:6a:d9:5a:c0:aa:ef:ee:ab:ca:be:4d:30:ac:58:3c:5a:
         88:47:43:f7:18:02:44:f4:c8:22:3d:c9:a0:4b:3f:fe:4d:d3:
         61:bd:0d:26:74:bf:3d:a2:3d:d5:66:64:c3:0e:f1:b6:27:0e:
         f7:41:3b:cc:7d:af:7d:e6:f1:76:cf:87:75:f8:17:a2:7a:14:
         b3:b1:80:d5:36:65:5d:ce:0f:96:e9:2e:81:20:f0:5d:24:71:
         d9:14:08:b3:ea:09:6b:df:2f:dc:ee:1c:c2:da:23:5c:e0:7b:
         45:64:0b:5d:00:64:25:43:33:b2:17:de:9e:aa:3f:4d:d8:33:
         87:1b:50:65:9a:6f:11:2a:4e:f1:91:66:a5:07:38:6f:72:ad:
         7a:3a:80:4a:92:84:e9:82:1a:6c:d4:da:f4:16:f3:15:90:7b:
         b6:e7:c7:7c:d2:ac:be:ef:da:55:d8:c3:ff:47:2e:da:a4:5c:
         7b:40:db:59:66:00:ae:8f:4e:81:b5:3a:10:9a:6d:e7:54:42:
         02:9b:e9:27:e2:cb:2a:ae:ef:00:06:64:ac:8a:f9:60:15:6e:
         b5:70:40:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org