Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/BC5Oi-t8KqcXOJLfU7k7OL94hUY.roa
File:                     BC5Oi-t8KqcXOJLfU7k7OL94hUY.roa (raw, json)
Hash identifier:          bgZaWGC1jyVNaoa9dnZGRDEqnPQamTwmC15TU82SRjc=
Subject key identifier:   04:2E:4E:8B:EB:7C:2A:A7:17:38:92:DF:53:B9:3B:38:BF:78:85:46
Certificate issuer:       /CN=E8CDBC24A6C3C530B99815AE7B5C0DA3EF8A84D5
Certificate serial:       10
Authority key identifier: E8:CD:BC:24:A6:C3:C5:30:B9:98:15:AE:7B:5C:0D:A3:EF:8A:84:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/BC5Oi-t8KqcXOJLfU7k7OL94hUY.roa
Signing time:             Tue 23 Mar 2021 07:44:54 +0000
ROA not before:           Tue 23 Mar 2021 07:44:54 +0000
ROA not after:            Tue 15 Mar 2022 01:30:01 +0000
asID:                     2515
IP address blocks:        192.41.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8CDBC24A6C3C530B99815AE7B5C0DA3EF8A84D5
        Validity
            Not Before: Mar 23 07:44:54 2021 GMT
            Not After : Mar 15 01:30:01 2022 GMT
        Subject: CN=042E4E8BEB7C2AA7173892DF53B93B38BF788546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a1:72:14:f1:3f:25:9a:fe:8a:fa:18:28:af:
                    10:44:48:db:d4:14:a3:4f:a3:f2:6b:80:94:ce:55:
                    46:c2:d9:32:83:b4:46:e7:55:ba:9c:e3:65:3b:c5:
                    51:bf:f7:c3:4b:b2:24:66:e2:f6:97:6c:e6:26:b9:
                    1c:0e:e6:76:e2:80:6a:9e:37:c8:89:0d:d6:53:bd:
                    b7:a6:37:07:98:6d:37:c7:a0:11:d9:f7:b0:b6:0f:
                    ff:27:23:38:c5:2a:73:0c:05:44:1a:c7:6e:15:2e:
                    d8:cf:db:76:10:7b:d4:30:2a:d1:d3:1c:9f:a2:66:
                    8a:85:02:b2:d2:d2:f4:42:60:66:78:51:fe:ae:3f:
                    74:87:b5:da:fa:96:ee:cc:f4:54:b0:55:57:f4:c3:
                    b3:14:90:73:0d:a0:56:22:84:c5:df:83:ba:a2:b9:
                    25:22:57:43:20:d5:11:77:6c:59:88:81:4d:e9:fd:
                    8a:c5:91:ff:b2:2e:d2:15:cf:3c:18:76:22:8e:03:
                    17:30:07:7d:b5:c7:2f:1a:3a:b5:a9:38:c1:f6:4f:
                    24:4d:89:58:da:76:e0:96:d4:f6:a5:c6:44:25:55:
                    ce:49:eb:d7:f1:29:12:7c:23:c9:cc:a2:b8:dd:1f:
                    40:dc:0d:9c:f3:51:dd:7f:fe:2a:54:41:01:6b:46:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2E:4E:8B:EB:7C:2A:A7:17:38:92:DF:53:B9:3B:38:BF:78:85:46
            X509v3 Authority Key Identifier:
                keyid:E8:CD:BC:24:A6:C3:C5:30:B9:98:15:AE:7B:5C:0D:A3:EF:8A:84:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/BC5Oi-t8KqcXOJLfU7k7OL94hUY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c5:19:48:50:0c:a9:e4:6f:db:10:6c:4f:ca:03:76:8d:de:
         22:bf:22:b5:94:ed:a7:ee:23:ae:2f:19:8c:d8:3e:33:82:8b:
         ac:80:cd:ec:b7:79:27:85:1b:02:71:65:87:2e:7c:b7:e6:b6:
         79:52:e5:30:cc:09:ce:23:4d:b2:6e:30:6f:b7:e7:4c:0b:e6:
         f0:89:8d:9a:b3:7e:08:28:76:3d:3f:4d:33:7d:a3:de:05:ad:
         1f:5d:55:5d:44:1c:ea:c7:01:ca:f7:82:1a:b4:32:8d:df:3e:
         cf:ba:45:67:e8:74:0d:fd:d2:5e:f4:81:82:a8:aa:b3:d7:0e:
         c0:98:5d:4c:d0:19:ab:14:95:a3:08:53:9e:97:69:85:b4:a7:
         3a:4a:d3:23:9f:fb:4b:a4:91:98:1d:05:0a:c2:f9:c6:8e:d0:
         a3:d1:5d:72:dd:95:4f:28:39:f9:72:5c:98:8c:50:d1:2e:c9:
         93:fe:79:42:1f:e5:62:e4:27:8c:5e:81:b6:05:d9:93:30:74:
         ac:d5:a2:fd:70:86:3b:6c:5e:1d:14:80:3d:43:ba:91:db:1a:
         04:bb:79:af:5a:49:2e:70:9c:a4:f8:13:93:f3:38:a1:1b:ec:
         8f:78:8f:a9:54:85:19:df:5c:ad:65:e6:ae:73:aa:96:b1:64:
         55:95:b8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org