Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30293/ewItLItfUmbcwD6QoYf9P4l1w-0.roa
File:                     ewItLItfUmbcwD6QoYf9P4l1w-0.roa (raw, json)
Hash identifier:          KeMn33qtq6Q3ZK5vz96Kaju1SyDjM2bvkVPvbeYuNyA=
Subject key identifier:   7B:02:2D:2C:8B:5F:52:66:DC:C0:3E:90:A1:87:FD:3F:89:75:C3:ED
Certificate issuer:       /CN=4ED0E8EA7DB29EAACFBAA3F2EE80A4AE9B5F57CE
Certificate serial:       31
Authority key identifier: 4E:D0:E8:EA:7D:B2:9E:AA:CF:BA:A3:F2:EE:80:A4:AE:9B:5F:57:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TtDo6n2ynqrPuqPy7oCkrptfV84.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/ewItLItfUmbcwD6QoYf9P4l1w-0.roa
Signing time:             Thu 13 Apr 2023 09:53:54 +0000
ROA not before:           Thu 13 Apr 2023 09:53:54 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     38631
IP address blocks:        2400:dcc0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ED0E8EA7DB29EAACFBAA3F2EE80A4AE9B5F57CE
        Validity
            Not Before: Apr 13 09:53:54 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=7B022D2C8B5F5266DCC03E90A187FD3F8975C3ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a2:e7:83:a1:23:2e:94:6a:52:7f:b3:82:73:
                    80:92:ee:bb:87:72:78:e0:3a:45:df:01:ec:a6:4b:
                    c6:41:5b:d2:e2:c9:12:1f:fb:7d:f2:a8:b1:57:42:
                    89:00:e9:70:cc:8a:bb:67:da:5b:18:ca:5f:e5:39:
                    57:c1:e1:7a:c7:34:5f:bc:d6:b7:6d:0f:44:ea:74:
                    28:36:4e:2c:42:36:8c:04:02:de:03:cb:b9:46:a3:
                    ed:85:fa:5f:b2:7b:fb:22:de:da:44:99:9e:f6:32:
                    cf:83:97:6e:80:70:de:59:fb:2c:59:42:e3:ec:9c:
                    44:37:1b:2c:1a:95:9a:fe:a2:16:b2:00:8b:dd:de:
                    71:4e:82:9d:c4:9e:1d:7a:75:98:ab:1e:7d:b6:36:
                    08:41:87:08:c6:f1:43:ef:c9:4a:2a:bf:11:a3:f1:
                    c0:b1:84:56:f5:14:fa:a4:8f:10:0a:b3:9f:f7:a7:
                    54:ab:c9:cb:d0:fa:1a:8b:26:ad:d0:60:93:a8:fe:
                    02:ae:db:46:ae:38:15:4e:36:ff:5c:07:d7:08:b0:
                    63:b0:ba:67:19:d6:e7:3b:de:21:54:e6:ea:f1:42:
                    ea:cf:a2:5d:b6:5f:c0:6a:f6:7b:ba:d9:b9:68:61:
                    56:b1:bf:85:95:df:be:21:df:6a:f9:c1:a3:ee:db:
                    fd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:02:2D:2C:8B:5F:52:66:DC:C0:3E:90:A1:87:FD:3F:89:75:C3:ED
            X509v3 Authority Key Identifier:
                keyid:4E:D0:E8:EA:7D:B2:9E:AA:CF:BA:A3:F2:EE:80:A4:AE:9B:5F:57:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TtDo6n2ynqrPuqPy7oCkrptfV84.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/ewItLItfUmbcwD6QoYf9P4l1w-0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:dcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:84:1c:be:20:26:cc:24:9d:2d:d7:90:f8:d6:bb:7b:f1:
         63:4a:4b:40:05:1f:0c:a2:0e:36:f9:67:31:74:2c:d6:d2:55:
         ce:44:9f:23:e0:73:51:85:73:e3:b3:1c:d7:24:c0:6e:64:02:
         68:5e:fe:ea:74:1b:7e:93:f0:7b:b1:be:99:3f:03:16:3d:75:
         2a:ed:7e:40:11:d5:66:88:d5:cd:43:b1:ea:61:d7:bc:bc:2a:
         c1:e3:30:80:63:01:dc:39:d5:39:fc:fc:97:04:1d:ba:9a:7b:
         53:00:c5:55:b1:87:f3:c2:15:63:51:4f:8a:38:7d:3a:87:47:
         a9:b2:39:32:2a:9a:a8:50:10:c0:ba:e6:7c:cb:38:6e:78:d0:
         7f:a9:be:31:a0:ab:3c:e8:d3:20:d5:34:81:d2:d1:c9:c6:22:
         c1:00:f9:97:c6:2d:d5:72:d0:01:77:6f:85:b7:6b:51:ac:5a:
         2f:bb:05:33:2a:84:bc:0f:04:4c:7e:70:1b:fb:ef:4f:79:21:
         6c:ad:e6:d4:b4:90:92:5b:72:3d:5c:b5:df:d6:b6:6c:c7:0d:
         93:36:44:62:1e:05:b4:2a:d1:83:00:99:d2:9d:7b:29:0c:6c:
         a2:99:54:25:78:ce:b0:16:b3:c1:72:fc:74:b0:7d:98:49:d1:
         a0:2f:6d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org