Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/waCku2-mdT_6mNYkcgQGu1uI5oE.roa
File:                     waCku2-mdT_6mNYkcgQGu1uI5oE.roa (raw, json)
Hash identifier:          xOrk+N68ij/EXwz6nDhST+90nPun1iBDTLCQJWS7tJY=
Subject key identifier:   C1:A0:A4:BB:6F:A6:75:3F:FA:98:D6:24:72:04:06:BB:5B:88:E6:81
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       24
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/waCku2-mdT_6mNYkcgQGu1uI5oE.roa
Signing time:             Sat 01 Jan 2022 01:31:40 +0000
ROA not before:           Sat 01 Jan 2022 01:31:40 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     7514
IP address blocks:        218.216.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  1 01:31:40 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=C1A0A4BB6FA6753FFA98D624720406BB5B88E681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:cd:e6:c6:6b:c1:fd:9e:d3:af:1b:95:d1:
                    3e:83:9e:e0:a5:52:58:47:f0:45:9e:71:bd:ef:13:
                    4b:a3:bc:1c:e4:7a:9f:79:42:b5:7e:4c:39:dc:e1:
                    07:d8:3e:1c:86:00:8c:2f:25:8d:4d:9f:09:32:6b:
                    34:00:3f:1d:20:fd:0d:75:08:71:27:ce:9a:41:ec:
                    17:b9:6b:ac:e0:6a:f4:7e:87:3a:0b:56:f1:72:13:
                    88:66:2e:11:3e:83:dd:50:aa:60:04:01:be:f6:ad:
                    c4:5b:57:2c:f0:98:02:51:4d:d7:15:33:46:49:bf:
                    10:9a:64:d5:4c:48:93:2c:bb:85:dd:13:70:cd:51:
                    23:c4:ab:5b:e3:65:29:12:9f:58:46:58:ba:22:b7:
                    f9:da:ad:b9:8d:e6:92:95:d6:d6:fc:7a:46:5e:74:
                    f3:ab:9b:eb:c3:d2:e2:d9:f5:44:2e:42:39:2e:32:
                    95:1f:b2:06:9b:be:2a:b3:f3:da:36:c4:f4:f8:ef:
                    f8:2a:87:68:87:e0:c3:d3:13:b0:47:67:e1:e2:bb:
                    25:ef:f2:0a:1a:2a:4f:32:0c:bf:cd:07:ad:79:19:
                    31:5a:fb:7a:0f:ce:28:c1:bd:ed:28:d1:1f:b1:98:
                    03:cb:7d:d5:52:ce:60:66:d9:35:1c:eb:2d:89:29:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A0:A4:BB:6F:A6:75:3F:FA:98:D6:24:72:04:06:BB:5B:88:E6:81
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/waCku2-mdT_6mNYkcgQGu1uI5oE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:c9:83:f7:43:97:8f:4b:90:ce:1b:db:9f:21:9f:38:b5:6c:
         93:99:d4:9c:dd:49:df:d4:f9:36:4f:a2:7d:05:73:7f:31:d6:
         60:ec:ad:a4:42:89:1d:ca:97:41:45:35:d0:39:ec:6d:f3:7d:
         4e:7d:95:16:65:93:ec:da:c0:5c:cd:2d:68:dc:82:57:a5:1b:
         dc:3d:89:b7:e6:87:b6:42:45:04:15:ec:d5:74:14:7e:10:93:
         10:5b:a9:96:6d:39:0c:85:f5:d7:fd:10:c0:1a:51:15:e7:90:
         ca:cf:92:b0:f3:50:f1:6f:0b:28:39:60:b4:d0:cc:73:cd:95:
         60:bc:86:2e:a4:5b:fd:85:b5:6b:17:36:fb:df:fb:92:c1:6c:
         aa:dc:d4:7e:21:c1:cd:02:58:6d:62:0d:28:21:c7:26:b5:09:
         2c:c2:dd:e3:b0:9a:58:f2:7f:45:43:d1:14:cd:27:61:7e:ea:
         29:88:62:6b:a5:50:f7:26:3c:fa:7e:6f:09:b8:bf:92:20:e8:
         ce:d7:fa:b7:a8:90:5c:67:3e:7a:33:c3:81:9c:71:15:fd:ac:
         94:fa:1f:6d:31:c0:1a:23:97:d3:e7:5c:b8:09:6a:50:b7:3f:
         c7:5d:56:ff:22:3a:10:92:c7:15:8c:ec:37:53:5c:16:dd:e9:
         07:25:e7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org