Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/xbigQLg5AKtZj_W038Y5PJe7JFw.roa
File:                     xbigQLg5AKtZj_W038Y5PJe7JFw.roa (raw, json)
Hash identifier:          GrffByPzuhuZk96AHm7LsYn2mbyDE9tvdQc1R2zWL7A=
Subject key identifier:   C5:B8:A0:40:B8:39:00:AB:59:8F:F5:B4:DF:C6:39:3C:97:BB:24:5C
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       D7
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/xbigQLg5AKtZj_W038Y5PJe7JFw.roa
Signing time:             Tue 01 Nov 2022 07:28:31 +0000
ROA not before:           Tue 01 Nov 2022 07:28:31 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2497
IP address blocks:        133.238.8.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 07:28:31 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=C5B8A040B83900AB598FF5B4DFC6393C97BB245C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:3a:24:c0:b9:25:49:dd:80:52:df:f3:45:
                    a2:b9:da:71:6f:68:85:b8:0a:1b:c3:1e:57:7f:08:
                    b7:01:83:5a:8f:ed:0a:9d:d3:41:7d:57:c7:9e:ca:
                    fe:55:c6:6e:3b:fd:f4:dd:b3:f6:ef:be:8c:d4:98:
                    dd:d9:68:2a:a8:bb:ed:5d:94:5e:3a:64:4f:ad:8b:
                    d7:08:30:81:01:d1:37:91:cc:9c:b0:29:88:cc:b7:
                    99:45:e0:a6:3c:e8:29:7c:bb:c2:48:0a:16:44:8c:
                    a7:ab:a1:7d:ce:31:5d:22:09:63:16:2b:df:a4:c4:
                    d2:19:29:1c:0c:13:be:a6:42:d1:85:40:5f:52:12:
                    8d:73:b7:7d:82:d2:26:e9:4a:f5:d6:63:96:4c:e3:
                    a8:6d:65:91:e8:b9:cc:86:9b:06:1f:aa:a9:27:97:
                    88:72:10:ed:00:b8:a7:97:cd:aa:15:a8:fb:08:9b:
                    18:02:d8:10:05:11:da:fc:df:4e:46:14:8b:20:46:
                    83:b4:31:68:61:13:04:ae:53:aa:2b:64:bf:38:15:
                    a4:6e:18:7d:f6:5d:53:9d:b7:d8:d6:11:77:b9:1a:
                    ce:b0:2f:e8:8a:e2:4b:d0:7f:aa:6d:5d:77:99:a8:
                    dd:cc:15:59:29:e7:72:d4:c4:7c:1d:52:bc:9d:35:
                    46:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B8:A0:40:B8:39:00:AB:59:8F:F5:B4:DF:C6:39:3C:97:BB:24:5C
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/xbigQLg5AKtZj_W038Y5PJe7JFw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.238.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:ce:98:7e:ab:e0:a0:91:61:73:09:23:9e:02:b5:41:ca:
         94:b9:83:22:fe:0a:ba:2e:85:3c:d2:96:89:a5:be:8e:b3:89:
         32:19:55:2a:67:17:29:e0:e9:dd:ea:1c:82:a4:f7:6d:e3:05:
         be:d5:ad:c5:12:04:34:e4:71:cf:a0:e9:b4:3c:bb:eb:77:d2:
         51:7c:e9:5d:b4:48:48:1d:c7:8c:e9:15:ae:fd:33:40:30:a3:
         85:f4:f1:6a:6f:dd:6c:9d:83:7e:1b:1e:03:5f:af:0e:3e:2b:
         d3:c3:35:8d:a0:03:06:12:fd:f4:cb:7b:65:2d:48:21:be:6c:
         85:42:92:0b:74:47:d9:d1:41:21:5a:f7:1d:65:7d:c3:2d:f0:
         ef:0d:86:a7:11:47:7a:10:0d:9b:43:55:c6:a3:ee:13:3c:df:
         1f:1c:3e:61:f0:c3:e6:59:96:43:28:3f:e6:c1:77:4d:e1:65:
         08:b0:2a:71:46:2f:7f:94:4f:b3:ac:68:80:c8:be:ca:8d:21:
         e7:1f:6a:dc:6a:4a:40:7f:10:00:97:21:69:37:54:a7:f4:e6:
         a8:b6:1f:f4:05:5a:1a:90:29:08:35:ba:b7:0b:44:48:d9:9f:
         5a:ec:ad:8d:81:28:c1:97:7b:b4:2e:3a:35:28:aa:47:36:d8:
         4a:2c:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org