Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/1bSTt8pMlzQd4qc1mmw384M0KDQ.roa
File:                     1bSTt8pMlzQd4qc1mmw384M0KDQ.roa (raw, json)
Hash identifier:          +K47aLB43SLdM6d13iHKNKIYyX92OoNdMalx/U6cVb8=
Subject key identifier:   D5:B4:93:B7:CA:4C:97:34:1D:E2:A7:35:9A:6C:37:F3:83:34:28:34
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       24
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/1bSTt8pMlzQd4qc1mmw384M0KDQ.roa
Signing time:             Tue 25 May 2021 02:31:49 +0000
ROA not before:           Tue 25 May 2021 02:31:49 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     55391
IP address blocks:        217.178.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: May 25 02:31:49 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=D5B493B7CA4C97341DE2A7359A6C37F383342834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:8f:47:c7:3c:98:69:54:51:2a:a6:89:cf:
                    c4:fc:0e:02:a3:1e:bd:c5:d4:cf:6a:d2:cd:84:92:
                    e6:62:79:b7:99:a7:91:b3:1a:74:71:67:81:65:cf:
                    8e:77:c9:3e:ad:d1:91:72:f5:b4:20:56:6a:cb:28:
                    3c:b7:68:a5:c8:13:3b:63:fb:47:09:6a:d5:b1:0c:
                    48:d4:25:a0:87:c5:d0:7e:1f:6a:4b:24:f4:4d:21:
                    36:f2:60:f8:ca:c7:c5:1b:e6:63:76:9a:16:88:7a:
                    b2:d4:04:4f:b2:0b:21:b1:3e:d4:e4:f4:f4:15:93:
                    20:36:20:44:5e:cd:03:10:ff:0a:aa:87:e5:aa:b3:
                    50:3f:f8:eb:de:83:7b:e2:d4:34:e4:ed:87:e7:80:
                    36:21:cf:f9:54:ab:0b:34:c9:08:d8:70:ea:0e:c3:
                    a3:c7:c6:e3:62:e8:1d:c6:3d:53:06:06:43:e2:a2:
                    0d:ec:9c:51:00:de:b3:06:5f:06:83:6d:95:58:43:
                    51:6d:38:4b:26:ce:9f:ce:56:c8:65:2a:6e:3f:d7:
                    c0:6c:c7:2e:68:aa:15:68:59:8d:e9:9b:d2:9d:f7:
                    69:03:dd:8d:8f:45:58:6b:4a:97:2b:85:c9:4a:db:
                    4c:01:08:69:bf:3a:1f:41:71:b9:03:30:c8:0b:60:
                    fc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B4:93:B7:CA:4C:97:34:1D:E2:A7:35:9A:6C:37:F3:83:34:28:34
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/1bSTt8pMlzQd4qc1mmw384M0KDQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:ab:cd:f2:44:14:1a:8c:78:89:5a:93:ef:71:dc:45:b9:07:
         93:d0:2f:49:ce:c1:2e:b6:3d:2d:b6:dc:8c:84:b4:c4:51:67:
         4f:fb:aa:52:e6:86:c7:8c:f3:ec:8b:77:4e:10:c8:13:ce:80:
         c3:a6:02:1e:d4:a3:50:04:3e:fc:b9:3a:52:55:60:90:7a:94:
         28:51:b8:4f:2f:39:d6:fe:58:93:a1:95:14:2e:33:fd:4b:12:
         be:80:e3:36:81:d3:77:f2:61:c1:fd:09:05:ac:8b:50:3e:70:
         eb:6f:e8:ab:fa:51:c8:19:b4:45:b5:da:34:16:ac:8d:6c:43:
         db:11:a7:a3:4e:21:62:27:d5:a0:eb:1e:57:d7:d2:3b:42:b1:
         65:f2:6d:e2:ed:c9:46:a7:2e:bc:75:fc:e8:8c:f4:16:2c:4d:
         96:ed:b5:31:2b:06:44:fe:aa:e7:3e:be:a5:2e:bd:1a:92:39:
         00:b5:20:9c:e3:ee:51:ac:32:9b:80:24:1d:b1:0d:72:91:ea:
         77:87:9a:5d:ed:40:b4:ec:20:c4:fa:58:dd:4e:78:af:27:e2:
         99:3f:b8:ea:93:3b:84:b0:e3:7c:13:15:e1:ae:1c:fc:e8:49:
         4b:7d:0c:20:31:54:65:be:49:26:3d:54:af:8d:ae:2c:40:49:
         eb:f2:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org