Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eeeUG4vc7R-raODPtbMILp6mJvw.roa
File:                     eeeUG4vc7R-raODPtbMILp6mJvw.roa (raw, json)
Hash identifier:          LGCi2J+aOMAAPOE+gjsaH3xl8sr7AjtTFvNMCu5iqrI=
Subject key identifier:   79:E7:94:1B:8B:DC:ED:1F:AB:68:E0:CF:B5:B3:08:2E:9E:A6:26:FC
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       011E
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eeeUG4vc7R-raODPtbMILp6mJvw.roa
Signing time:             Sat 01 Jan 2022 01:31:26 +0000
ROA not before:           Sat 01 Jan 2022 01:31:26 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     9371
IP address blocks:        219.94.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:31:26 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=79E7941B8BDCED1FAB68E0CFB5B3082E9EA626FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:98:56:e7:63:cc:3a:4a:b6:6b:e2:33:e2:
                    f1:6d:36:7d:ae:6f:27:ae:93:5e:bd:75:ad:57:87:
                    3a:df:9a:c4:5d:dc:44:bb:b6:86:11:24:d9:e7:70:
                    37:f6:5f:96:24:c2:4c:dd:73:4c:d7:c0:c9:0e:fe:
                    3f:0a:a5:b3:02:87:c2:e2:22:50:56:d8:27:95:4c:
                    79:38:6f:d8:12:3f:6d:6c:2b:b9:0f:4e:3f:2e:e3:
                    f1:0f:21:a1:1e:b6:84:f0:e1:c2:c7:e4:9f:92:5a:
                    9c:49:69:fa:1e:e9:38:64:09:db:4d:06:9e:c7:4a:
                    3f:fd:6f:ef:c1:7d:b4:e6:f8:45:09:14:42:d6:42:
                    8c:02:08:d1:62:17:14:49:3c:07:1d:3e:18:30:cc:
                    39:1f:eb:2d:c3:a8:70:ed:20:6b:47:89:85:be:84:
                    da:7f:bd:6b:c9:cf:b2:4f:93:e0:eb:48:bf:aa:19:
                    0c:de:99:d0:9f:c0:83:d3:f1:7a:eb:9f:85:cb:0a:
                    52:a1:47:33:4c:c0:70:f6:43:6e:85:4a:4b:8e:60:
                    be:7e:59:e8:9a:99:bd:ad:9e:bc:39:20:1a:0a:17:
                    bc:fc:63:a3:91:ff:16:ca:f0:d5:bf:b8:09:32:93:
                    2d:54:01:48:a4:69:bb:91:56:93:89:9e:10:a0:58:
                    ab:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E7:94:1B:8B:DC:ED:1F:AB:68:E0:CF:B5:B3:08:2E:9E:A6:26:FC
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eeeUG4vc7R-raODPtbMILp6mJvw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.94.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         66:a8:34:4f:89:58:00:f3:4f:8b:21:1e:a4:e7:31:d1:ea:3d:
         26:cd:42:cc:d9:59:97:83:59:dc:20:73:43:a7:15:b0:8c:68:
         f0:ea:87:9a:7e:bd:de:f8:73:d4:3f:11:9c:ea:96:51:b4:95:
         7e:1b:64:6f:f8:dd:01:9f:b5:94:ec:63:c9:2a:d9:80:be:c6:
         ed:c5:76:71:f1:e4:28:03:bc:5c:2c:b4:fb:7a:38:1e:23:21:
         d4:e6:09:e9:7d:21:e9:64:7a:62:06:ee:53:1c:42:54:67:d2:
         da:56:c3:80:fd:8c:41:b7:3c:d7:5c:6e:52:a2:b0:f9:9d:15:
         36:06:ce:f7:47:bc:1b:50:70:d5:72:11:6c:d3:09:32:86:21:
         c2:db:0e:9e:3a:8c:84:5f:84:45:78:a4:69:89:8d:65:dd:33:
         46:4f:b8:57:fc:64:22:c5:43:2c:9b:7d:25:9d:b6:fa:e6:f5:
         e5:f0:4b:13:f7:11:4a:fc:cd:e7:d7:19:d1:aa:f6:3b:2e:f0:
         32:9e:55:0d:a1:fe:02:3b:be:09:1d:71:d9:18:02:4d:ae:83:
         fa:63:3b:dc:21:d8:3d:d1:ed:99:76:45:f0:78:c5:3a:f4:29:
         04:88:b6:71:bb:45:05:be:37:34:b9:2f:f9:63:4b:84:dd:7c:
         d7:7d:40:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org