Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/7lzaYREGwvtb5b6rRaGIlhikBlc.roa
File:                     7lzaYREGwvtb5b6rRaGIlhikBlc.roa (raw, json)
Hash identifier:          vRbXBiNpOmjO05tqIVgUvT1OXu5Qu1IMFtoUgKwyEyQ=
Subject key identifier:   EE:5C:DA:61:11:06:C2:FB:5B:E5:BE:AB:45:A1:88:96:18:A4:06:57
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0100
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7lzaYREGwvtb5b6rRaGIlhikBlc.roa
Signing time:             Fri 10 Jun 2022 03:00:27 +0000
ROA not before:           Fri 10 Jun 2022 03:00:27 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        60.32.0.0/12 maxlen: 12

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:00:27 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=EE5CDA611106C2FB5BE5BEAB45A1889618A40657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:1a:12:60:14:82:de:3a:cd:a1:76:d0:e5:
                    3b:eb:46:b6:dc:fb:a6:66:bb:53:87:33:12:4a:05:
                    b9:a2:50:5a:e0:3a:97:6e:7c:e2:5d:45:69:06:d9:
                    07:08:df:c4:f9:95:b9:a4:77:a3:75:9b:f0:eb:1f:
                    24:6b:0d:69:07:6b:11:d9:37:f2:47:ca:4b:4a:b0:
                    2e:6d:f8:4d:96:63:46:e5:cb:aa:f0:f5:18:aa:21:
                    55:3a:3e:6b:55:59:51:a5:0a:0b:16:85:60:ca:97:
                    a5:53:fe:3e:2e:59:c0:cd:08:8a:e6:a4:35:94:62:
                    53:13:4a:21:cd:98:61:ba:99:a4:ed:32:04:31:49:
                    b2:3f:e3:09:dd:3c:4e:ad:14:d6:8a:4a:71:1a:a5:
                    ef:e3:b6:04:24:be:ee:03:47:30:12:77:4c:bc:23:
                    32:f9:1e:ab:2f:86:e2:5d:67:5c:45:0a:67:98:0c:
                    3a:02:a8:46:50:01:df:c6:f2:aa:0e:98:09:77:3a:
                    b7:e3:c6:95:9f:b4:15:70:40:2c:f0:d4:d0:46:7d:
                    3a:9d:83:ee:e1:6f:4b:59:73:a3:87:d4:eb:f8:f2:
                    d0:83:80:35:cd:86:67:f6:20:15:cd:db:8d:26:e8:
                    0d:62:0c:fc:ce:d7:2a:77:cf:96:f4:d6:c5:b7:6e:
                    72:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5C:DA:61:11:06:C2:FB:5B:E5:BE:AB:45:A1:88:96:18:A4:06:57
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7lzaYREGwvtb5b6rRaGIlhikBlc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.32.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         0b:fe:1f:9d:7e:98:2e:7a:55:58:27:a1:c0:50:a7:9a:2c:50:
         ce:6b:61:8c:d8:c1:1a:14:9f:c9:1b:74:b8:71:83:d6:b1:c5:
         58:38:57:ba:bf:ca:a9:a6:d1:a9:a5:d6:43:b1:e0:6b:93:59:
         96:ce:61:3d:a1:71:1b:59:e4:77:c0:58:da:99:9e:4e:83:bd:
         cf:b5:d6:b2:77:74:12:8d:8c:ef:b0:47:03:3a:c5:c8:ba:c6:
         2d:da:42:7a:f1:8d:d0:ce:76:27:2e:bf:dd:6b:e9:7a:71:0f:
         1f:af:59:50:36:89:cd:0f:f5:2f:f3:df:b1:0a:9b:2c:f8:52:
         30:74:bb:51:8e:b8:8a:f9:fc:71:0f:b8:bc:76:73:77:ff:12:
         fb:20:cb:e2:2e:64:85:7d:63:be:e9:7b:80:d2:c0:d0:46:92:
         ad:80:26:dc:0d:92:9f:c1:bf:97:b1:6a:98:b9:1c:bf:ce:f8:
         35:d0:8c:5f:03:2e:8f:07:28:53:3e:70:18:59:bd:5a:14:04:
         9c:3e:23:a2:3b:4f:b8:81:4d:a2:63:d1:40:18:d8:82:21:06:
         0d:d1:49:1e:7b:ca:05:02:b7:cd:f0:cd:a6:75:92:2e:d4:54:
         7b:f3:bf:39:41:8d:19:fb:39:9f:71:40:97:52:ac:6f:c2:d8:
         59:7e:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org