Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/tNpe-VVYvz5y9k4VkncYMI2SchY.roa
File:                     tNpe-VVYvz5y9k4VkncYMI2SchY.roa (raw, json)
Hash identifier:          Jx4gK+x2PI6Q/ZXfRwG28O7p9KOnGw9pqa/FtGa5dgY=
Subject key identifier:   B4:DA:5E:F9:55:58:BF:3E:72:F6:4E:15:92:77:18:30:8D:92:72:16
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       21
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/tNpe-VVYvz5y9k4VkncYMI2SchY.roa
Signing time:             Wed 18 Aug 2021 07:54:12 +0000
ROA not before:           Wed 18 Aug 2021 07:54:12 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     7684
IP address blocks:        153.120.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Aug 18 07:54:12 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=B4DA5EF95558BF3E72F64E15927718308D927216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:a0:89:6d:07:d6:89:45:5d:40:51:ac:54:
                    c4:e7:d7:b8:a3:e2:21:cc:75:98:6a:5d:c8:7e:54:
                    af:66:51:e1:74:9b:65:08:1e:e0:77:43:f2:88:6c:
                    18:0b:4c:da:30:47:26:bd:79:88:30:fd:c8:e3:55:
                    5b:e4:eb:1b:c4:cf:9b:a2:28:65:77:3a:26:43:95:
                    6f:a8:7d:d3:98:ad:ce:2c:21:92:b5:6e:ec:86:8e:
                    71:05:5a:e2:c4:ec:f8:ee:a8:97:7b:fd:ad:81:fd:
                    3a:e3:bc:dd:9b:a8:dd:97:63:b3:f3:87:8d:92:c0:
                    2f:62:5d:30:8f:84:50:27:9d:6b:c6:bb:ea:f0:e0:
                    89:ed:a2:6d:cc:85:4e:b2:fc:fe:ef:1b:d5:62:f4:
                    d9:bc:68:e5:da:65:ea:e8:41:e6:cd:1a:77:91:8e:
                    26:a7:48:ae:c3:0d:ae:c6:d5:bd:74:75:44:8a:dd:
                    6a:ae:a2:cc:4d:4a:0e:3f:6a:9f:2a:e6:5b:6c:e7:
                    52:c4:26:4d:9d:14:0f:5a:59:b0:97:a1:a3:0e:d2:
                    ed:e3:b3:af:f3:88:12:cc:db:7f:53:df:13:03:f7:
                    8b:17:df:f9:c2:a2:a6:9a:1b:25:bf:05:93:c7:ab:
                    7d:74:c8:a4:c3:3f:69:71:d8:47:fd:9d:e5:d9:2b:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DA:5E:F9:55:58:BF:3E:72:F6:4E:15:92:77:18:30:8D:92:72:16
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/tNpe-VVYvz5y9k4VkncYMI2SchY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.120.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         55:e3:1d:07:d3:b9:44:bd:5a:d9:31:b3:02:fd:91:74:2f:7f:
         0e:dc:d3:09:30:23:65:1b:8c:79:7b:f6:33:9c:65:38:7d:98:
         e7:14:e1:3a:49:49:55:e5:8f:57:52:3e:c7:f6:31:2e:00:d6:
         b3:cd:56:d3:53:c2:06:db:b6:e6:ed:d3:f9:2d:34:fd:42:aa:
         f5:83:7b:03:98:dd:99:d8:2e:68:47:ee:74:77:61:d2:79:36:
         d3:aa:6f:9e:4c:c6:c4:ec:44:75:c4:80:ca:74:ff:93:11:6d:
         f2:f9:9e:1b:ef:6c:46:ed:df:39:57:fa:b4:58:6f:c9:91:7b:
         b4:64:f5:4e:12:a8:6f:81:4d:1c:69:c7:6c:15:c2:62:cd:94:
         f0:9f:e7:0f:e4:71:8c:bb:7f:f3:9e:5b:9f:d1:68:fe:89:62:
         6c:aa:95:b9:a5:0c:a3:0c:26:15:c4:19:db:0d:e4:d3:ea:4b:
         6c:a0:92:13:ad:9a:71:58:23:19:a0:1f:2f:bd:a8:cc:e7:bb:
         f6:72:37:eb:bc:98:6a:69:f8:29:8a:7c:98:d8:c1:7c:f2:d5:
         cc:32:e3:7d:46:d4:78:f7:e9:fc:f0:86:c5:87:6d:d5:2f:2b:
         1d:6c:88:be:ab:bf:45:ce:a5:ef:dd:f5:d4:c2:37:6a:c7:d4:
         8b:d1:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org