Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/6N_OoBnuV00HiF0Q_CzLfKy7WGU.roa
File:                     6N_OoBnuV00HiF0Q_CzLfKy7WGU.roa (raw, json)
Hash identifier:          ++8oglQTOgMBUftN09WTrMYh7a2UBEwXuKVSDUr6ec8=
Subject key identifier:   E8:DF:CE:A0:19:EE:57:4D:07:88:5D:10:FC:2C:CB:7C:AC:BB:58:65
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       60
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/6N_OoBnuV00HiF0Q_CzLfKy7WGU.roa
Signing time:             Tue 25 May 2021 02:32:00 +0000
ROA not before:           Tue 25 May 2021 02:32:00 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     18126
IP address blocks:        14.132.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May 25 02:32:00 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=E8DFCEA019EE574D07885D10FC2CCB7CACBB5865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:42:55:45:4c:79:9b:3c:77:0f:f9:11:32:
                    e7:c6:cf:eb:1f:79:2b:ee:dc:c4:84:09:66:ed:66:
                    a7:3c:af:6f:50:73:e8:2c:f9:48:b1:5b:19:02:be:
                    8c:f6:d9:eb:7c:4a:8c:c4:47:9f:02:96:d2:d5:c7:
                    7c:36:f6:a3:18:e2:f2:20:17:f1:ca:67:d4:fe:49:
                    8b:26:f9:fd:ee:7f:93:7d:bf:60:0a:c2:20:e1:67:
                    b5:cb:2a:66:b0:eb:0f:ee:48:d5:cc:c3:ac:4f:c2:
                    c0:a7:8c:fa:40:8e:c0:ef:ab:53:76:cf:1c:ac:e5:
                    69:b8:e9:28:dd:ea:45:a4:d2:52:3f:51:22:e4:ad:
                    03:ef:fb:2d:9c:69:a7:70:77:69:d8:5c:21:47:7d:
                    57:18:f6:15:9b:f6:85:d4:81:6a:ac:fb:76:46:5b:
                    fe:ff:4e:fc:ec:23:87:2f:89:85:77:f0:71:8e:a6:
                    fd:70:59:a3:d3:b1:66:4d:f5:dd:5b:aa:02:62:52:
                    f8:11:dd:d9:6d:70:fc:df:6b:46:6a:74:81:38:57:
                    86:34:e9:b5:08:a2:6a:d8:19:ac:34:1a:cf:e8:52:
                    81:f4:a3:78:d7:5d:2d:c4:99:17:ff:dc:fc:56:78:
                    7b:29:ad:7a:ae:70:f9:8c:f3:02:ae:54:64:cf:14:
                    a1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DF:CE:A0:19:EE:57:4D:07:88:5D:10:FC:2C:CB:7C:AC:BB:58:65
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/6N_OoBnuV00HiF0Q_CzLfKy7WGU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.132.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         61:f4:2e:cc:43:59:14:f5:1b:a5:99:a0:66:54:39:a2:a2:20:
         22:8b:79:3c:be:9a:45:d0:b1:b7:ef:e0:b4:0f:dd:8a:fe:09:
         b6:84:c3:7c:ba:fc:b4:99:4a:a3:28:22:af:57:4c:db:c0:fb:
         5f:b7:57:10:28:88:43:45:12:5b:e9:18:c6:7b:1e:e2:62:3d:
         6e:50:59:3c:80:8d:24:7f:4c:be:31:ef:cb:da:a5:11:a5:26:
         c9:73:b5:07:9f:03:43:3c:f6:a2:03:eb:09:3c:d1:37:36:fc:
         7b:61:1e:f0:c3:b1:e7:73:40:bb:12:4c:f7:0d:89:af:4c:06:
         13:02:c4:b1:8e:c9:37:17:29:96:de:7e:58:ca:a9:84:cb:a0:
         cf:6e:bd:39:81:7a:a1:c9:3c:46:bb:0d:b5:1c:6b:7a:dd:11:
         c4:31:81:ff:4a:75:64:cf:27:bc:ea:53:2e:74:c4:3c:bb:16:
         9c:3a:7a:93:e7:c3:c9:f4:1d:61:c6:fa:72:c9:75:68:08:55:
         b0:16:3e:a5:43:8b:62:27:ff:e1:85:a4:e7:49:8d:c1:f3:37:
         99:e9:98:28:b3:9c:3d:4b:73:69:79:c4:72:ea:87:12:aa:9b:
         6e:05:9e:27:8d:f0:ae:7e:af:f8:be:72:b1:c1:35:32:17:a0:
         62:55:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org