Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1188/tigC-q50kwakwkdCSi9RKEhaqb4.roa
File:                     tigC-q50kwakwkdCSi9RKEhaqb4.roa (raw, json)
Hash identifier:          ZajccitcqLgaWTGxbzamTcmn7eNstsbbnflNNW0cP7Q=
Subject key identifier:   B6:28:02:FA:AE:74:93:06:A4:C2:47:42:4A:2F:51:28:48:5A:A9:BE
Certificate issuer:       /CN=8188C01C8AF4C7886FC19750779AF58E5E1333E4
Certificate serial:       02
Authority key identifier: 81:88:C0:1C:8A:F4:C7:88:6F:C1:97:50:77:9A:F5:8E:5E:13:33:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/tigC-q50kwakwkdCSi9RKEhaqb4.roa
Signing time:             Tue 01 Nov 2022 07:20:21 +0000
ROA not before:           Tue 01 Nov 2022 07:20:21 +0000
ROA not after:            Wed 01 Nov 2023 07:15:19 +0000
asID:                     0
IP address blocks:        133.252.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8188C01C8AF4C7886FC19750779AF58E5E1333E4
        Validity
            Not Before: Nov  1 07:20:21 2022 GMT
            Not After : Nov  1 07:15:19 2023 GMT
        Subject: CN=B62802FAAE749306A4C247424A2F5128485AA9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:66:51:9e:a0:bb:d2:7f:85:9f:70:52:65:c3:
                    35:7d:e6:bb:0a:5f:b1:a9:4b:13:c4:92:32:78:13:
                    32:bd:45:b3:b9:fa:e6:6f:e8:30:60:08:80:2d:ba:
                    bc:8f:c2:d4:e1:bc:46:7c:2d:05:c8:36:b4:ae:d0:
                    af:35:5d:03:3f:63:f4:e0:73:16:ce:0e:bf:9a:ab:
                    57:a8:3c:91:4b:88:0a:82:65:6a:be:6d:fa:db:0e:
                    45:9f:a6:a4:2e:21:19:86:11:05:4d:51:3c:3d:8e:
                    d9:fc:0b:16:a5:cf:31:20:0d:3d:d3:2d:20:a4:24:
                    03:40:ac:b2:a1:23:20:9d:2a:87:d5:8a:8f:18:6b:
                    c5:f5:ae:8d:1d:30:49:36:4c:48:6a:d8:55:f4:7a:
                    dd:5e:b6:04:49:e2:1b:2f:f9:be:42:c8:60:6f:db:
                    bd:9d:63:0d:c3:8e:86:11:19:a4:fa:6c:68:98:ad:
                    a2:e2:6e:a0:88:a8:16:b5:93:15:51:c3:8e:dd:4d:
                    70:ba:50:98:e2:5f:f7:4d:54:5d:10:c3:1d:66:35:
                    a5:aa:30:d0:ed:62:dd:35:63:c9:c7:4c:36:49:73:
                    15:7f:4a:c2:a8:37:6d:da:50:51:27:8d:5a:fd:aa:
                    10:70:2b:cb:a9:8c:ca:a2:ea:30:00:3c:11:28:66:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:28:02:FA:AE:74:93:06:A4:C2:47:42:4A:2F:51:28:48:5A:A9:BE
            X509v3 Authority Key Identifier:
                keyid:81:88:C0:1C:8A:F4:C7:88:6F:C1:97:50:77:9A:F5:8E:5E:13:33:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/tigC-q50kwakwkdCSi9RKEhaqb4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:c6:29:91:d6:ae:85:3e:7e:86:d4:3c:91:32:e7:c1:56:36:
         21:c4:37:27:ac:8c:cd:78:f5:d0:c5:f6:ab:78:98:f8:6c:b0:
         dd:03:d9:b6:28:32:ac:72:67:52:6b:1f:ce:f8:70:a1:7d:ec:
         0f:f3:79:f6:27:59:72:95:57:69:6e:a8:17:ae:ed:57:5f:8d:
         a4:01:fa:02:ae:51:7a:11:de:c0:79:13:c6:4b:fc:84:4c:2a:
         38:20:27:12:66:06:6d:51:b2:55:85:e1:9f:d4:41:df:02:d7:
         7c:52:c6:de:4e:2d:57:fd:5a:5f:e6:d8:98:05:0d:57:5d:1e:
         0d:d0:f3:86:a8:84:91:f3:7c:bd:65:c4:25:09:c0:6b:d3:18:
         f0:10:79:1d:49:bb:39:1d:86:86:87:9c:70:d1:76:7c:8a:82:
         4e:f8:7c:ff:65:7f:48:84:15:3a:84:14:ea:7e:11:54:ca:58:
         60:02:12:4f:ea:35:70:74:47:b6:18:68:1a:53:eb:73:63:a1:
         04:32:a6:4a:2e:5f:bc:01:1d:31:5d:cb:ea:82:22:67:31:3f:
         65:ec:12:4d:87:8b:4d:4b:38:48:af:be:ba:24:95:0d:75:f1:
         01:e4:e1:47:9c:e8:ea:89:9f:39:90:81:8f:d4:14:60:0f:34:
         c5:28:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org