Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2DhhHyjq1OQHuHmmMf4HHcTvcd8.roa
File:                     2DhhHyjq1OQHuHmmMf4HHcTvcd8.roa (raw, json)
Hash identifier:          cyDOwjDvTmLQm81VUmWWFj20jZY1sFiypcoaZFfs1lE=
Subject key identifier:   D8:38:61:1F:28:EA:D4:E4:07:B8:79:A6:31:FE:07:1D:C4:EF:71:DF
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       DF
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2DhhHyjq1OQHuHmmMf4HHcTvcd8.roa
Signing time:             Wed 01 Sep 2021 01:30:17 +0000
ROA not before:           Wed 01 Sep 2021 01:30:17 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.39.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:30:17 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=D838611F28EAD4E407B879A631FE071DC4EF71DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:84:b1:3a:f1:1f:e0:13:db:3f:69:ab:62:c6:
                    42:00:5b:83:69:3e:3a:df:15:79:bd:df:03:ad:35:
                    0c:a4:53:44:70:f9:3f:69:99:04:56:cd:b9:93:77:
                    15:44:91:c4:38:de:9a:34:31:b5:b7:2a:07:c5:69:
                    c9:c5:84:9d:b5:f9:b5:ee:7b:c4:07:22:48:6c:68:
                    b0:74:52:b1:15:14:96:cc:f4:bc:83:cc:c4:18:f2:
                    77:bd:c6:b9:08:9b:02:5a:40:72:10:7f:f6:87:3c:
                    fa:6f:08:2b:cc:4d:b8:07:d8:44:2c:de:a0:7b:2a:
                    f7:dc:1b:71:f9:ac:70:ca:40:9e:c7:3b:c1:7a:0d:
                    ff:cf:71:9f:2f:ef:ba:c7:26:c2:28:ce:bc:a6:b4:
                    76:1c:96:0d:0d:99:76:56:5c:48:f1:1f:96:22:49:
                    c2:20:fd:42:f2:19:f6:0b:92:17:5f:2e:aa:64:ec:
                    a3:f7:74:4b:fe:0c:56:19:80:95:58:a3:5d:46:23:
                    e4:8e:75:f8:e9:81:fc:6d:7f:9c:4b:26:b2:34:98:
                    2c:0a:42:8d:8c:06:20:c2:c7:07:e1:a9:2f:f2:fc:
                    a7:b8:cd:88:ed:57:84:cf:d8:a0:43:31:ed:80:2e:
                    0e:90:b2:55:c6:09:0e:45:b3:b6:6d:ae:35:b9:98:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:38:61:1F:28:EA:D4:E4:07:B8:79:A6:31:FE:07:1D:C4:EF:71:DF
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2DhhHyjq1OQHuHmmMf4HHcTvcd8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:92:d0:cf:a9:a3:70:45:de:37:aa:05:40:6e:0e:a9:ed:0e:
         7a:a2:aa:14:22:95:61:42:22:d8:ec:c6:cd:11:75:1b:83:d4:
         b0:27:46:8b:e3:92:e4:c3:db:b5:2a:7a:a7:8f:cf:22:5a:46:
         77:22:d0:68:6f:38:b9:84:bd:06:93:98:ea:46:75:d9:0b:6f:
         14:74:28:1a:b9:1f:a7:0e:ef:a3:9a:34:7f:3d:d8:1c:4a:b6:
         d4:cd:df:16:e0:2a:71:ca:a7:7a:dd:c3:9c:b1:e0:6c:c3:cb:
         c2:b2:f7:d0:f2:3a:54:9c:26:db:ee:fc:69:23:d1:3f:c2:bf:
         93:75:6f:b7:41:b7:d8:17:43:d7:3c:13:19:a6:7e:75:0d:be:
         d8:7b:ff:f5:37:21:10:4a:61:e7:25:1c:47:b7:99:38:1b:f2:
         8d:c2:f7:4a:1e:18:cf:6c:c6:9f:23:c6:23:fd:bd:66:10:e8:
         44:00:dd:4c:3f:e2:76:78:e4:30:80:0c:6d:dc:77:01:05:85:
         c8:ee:e7:56:26:bc:7b:f0:40:1c:6a:cf:96:e0:1b:40:01:0a:
         d1:71:c7:6f:b2:5d:54:d2:8b:1d:f9:2f:f3:68:37:8b:67:0c:
         ce:d4:0d:45:7f:6a:31:62:48:33:ff:3c:a7:9a:0d:45:55:93:
         fc:a7:3d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org