Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/dOSbPTkDPMWzqTTn17ZnZEjCHrg.roa
File:                     dOSbPTkDPMWzqTTn17ZnZEjCHrg.roa (raw, json)
Hash identifier:          mXabI7u399Iq4ei4hD4XvsoJof9kbUeGJVAeHQXyS9M=
Subject key identifier:   74:E4:9B:3D:39:03:3C:C5:B3:A9:34:E7:D7:B6:67:64:48:C2:1E:B8
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       1B
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/dOSbPTkDPMWzqTTn17ZnZEjCHrg.roa
Signing time:             Wed 18 Aug 2021 07:54:09 +0000
ROA not before:           Wed 18 Aug 2021 07:54:09 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     7684
IP address blocks:        153.126.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Aug 18 07:54:09 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=74E49B3D39033CC5B3A934E7D7B6676448C21EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:ed:66:b5:fc:6b:d0:84:f6:68:ca:44:49:
                    e0:cf:0a:3e:a9:b2:71:22:ec:35:04:a5:d4:09:99:
                    31:b3:cb:77:5b:99:5f:90:a6:5c:55:27:bc:e7:d5:
                    1a:84:30:03:d5:27:2f:77:32:48:28:b6:d9:33:5c:
                    11:d9:fb:a1:6b:d6:f5:f5:2f:b0:81:f5:f8:3e:70:
                    9a:70:8a:dc:ff:59:c5:59:25:f4:f7:b6:a7:35:5d:
                    2f:51:30:39:43:bb:f3:12:05:ea:fd:b6:19:d1:00:
                    d2:3a:d7:f1:1f:ac:2f:a0:a0:45:dc:58:cb:34:01:
                    40:47:64:6d:44:49:2b:b1:12:4e:b2:fb:8d:76:03:
                    67:37:3c:56:04:02:be:cd:35:23:49:59:ae:69:dc:
                    b7:3c:f8:18:6b:3d:ef:4f:79:d7:44:c6:0f:2f:b9:
                    a1:04:52:4d:fe:0e:51:9d:6e:0c:15:c4:29:30:ce:
                    a9:90:de:b8:5c:15:ec:42:2b:67:91:4e:9b:da:a6:
                    48:44:ca:a8:83:f2:82:ea:d8:e4:6f:9d:99:6a:16:
                    37:d7:95:15:10:95:ba:cf:a3:a3:78:cc:cd:55:75:
                    c9:b8:19:5f:e5:65:4d:5a:c5:a2:a5:75:8e:80:45:
                    35:4b:5c:db:b8:5d:d9:fb:62:3c:3f:f5:3b:b2:67:
                    6f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E4:9B:3D:39:03:3C:C5:B3:A9:34:E7:D7:B6:67:64:48:C2:1E:B8
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/dOSbPTkDPMWzqTTn17ZnZEjCHrg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.126.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a2:b8:77:e1:42:20:57:67:02:72:87:97:7a:eb:33:9a:cd:0d:
         f9:8d:e0:97:2d:b3:c0:01:01:cc:3c:5b:de:5a:8a:9b:d0:4c:
         74:6a:4f:ab:90:cc:f4:e6:d7:13:6a:a9:bb:0b:7a:30:9d:5e:
         52:a9:7f:8a:af:61:36:42:a4:d8:96:66:c8:23:33:f2:7e:87:
         01:0a:65:a2:4e:67:4c:a8:f9:b4:5d:0d:e4:4d:d9:58:88:d4:
         ec:40:30:a7:da:d8:be:02:9f:ed:0f:59:1e:d9:9c:50:1e:05:
         03:ec:eb:84:b6:01:51:58:a2:0b:6c:fb:ae:35:15:f4:7e:77:
         fc:07:18:f1:e0:21:1c:d4:d1:32:18:41:a5:79:b9:9c:75:ae:
         b0:4d:b3:11:5e:99:93:70:73:18:51:b4:4b:06:5d:88:c4:2e:
         35:fc:6d:8b:5f:1e:c9:f6:d5:6c:c8:46:3b:49:04:67:18:e7:
         d1:fb:01:a6:c4:25:9e:77:3a:96:8e:6f:c8:f2:2c:05:df:33:
         cf:52:1a:fd:bd:e8:d0:1d:2d:94:78:61:9c:ce:1b:98:9e:c5:
         7c:ad:2b:77:14:a0:ef:28:b4:3f:3d:59:1a:ab:68:ca:9d:46:
         3f:54:29:54:27:48:f5:f6:c5:f0:bd:08:8c:03:a0:c1:00:49:
         b4:d7:5b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org