Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/UUwv9z0jPStFBKnesVgIZzlK0MI.roa
File:                     UUwv9z0jPStFBKnesVgIZzlK0MI.roa (raw, json)
Hash identifier:          OWkvKXTpxAY0H4+dfuRANjSXMr2PSUaV/q5xtflNAHQ=
Subject key identifier:   51:4C:2F:F7:3D:23:3D:2B:45:04:A9:DE:B1:58:08:67:39:4A:D0:C2
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       97
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UUwv9z0jPStFBKnesVgIZzlK0MI.roa
Signing time:             Sat 05 Jun 2021 03:47:30 +0000
ROA not before:           Sat 05 Jun 2021 03:47:30 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     4713
IP address blocks:        114.160.0.0/11 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun  5 03:47:30 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=514C2FF73D233D2B4504A9DEB1580867394AD0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d6:3c:13:d6:2d:e1:94:d4:3a:22:b3:74:a8:
                    02:fa:29:dc:f4:43:71:9f:a2:15:98:18:56:b8:00:
                    09:f2:3c:8c:dd:12:c7:61:d8:82:ee:bf:b1:f0:ab:
                    2b:6e:76:c4:ac:fd:a1:d0:8f:7c:1c:0b:98:80:8c:
                    7c:7b:49:fd:63:57:9b:f4:1a:b5:6d:81:05:99:3b:
                    d5:c0:50:5a:6c:52:ed:54:04:ad:1b:19:b1:38:40:
                    7a:e6:85:de:d5:6a:2d:47:b0:1b:6e:e1:2b:5e:d7:
                    9b:33:1b:fd:78:f2:39:ae:4d:7f:a3:44:b5:68:67:
                    d7:b0:88:fd:af:de:05:da:20:75:92:3a:23:96:71:
                    01:69:41:ab:dd:55:5f:a9:be:d8:5b:73:f6:65:df:
                    53:af:01:8f:1e:5f:0f:45:2d:8a:a8:65:4b:2e:11:
                    f1:fd:b8:38:90:c2:6f:09:28:e2:4c:23:9e:de:dc:
                    68:a1:16:e4:13:65:d6:ca:e8:d7:6e:35:3a:6b:3a:
                    d3:ce:11:3c:75:ab:8e:24:18:58:83:5c:67:78:b4:
                    70:a6:b7:54:93:51:5a:97:a7:ef:e2:aa:4c:cf:46:
                    b7:5b:48:83:5e:eb:a5:f2:d1:0b:b3:0f:10:c5:46:
                    0e:22:2f:5f:fa:26:15:35:c1:0a:e4:f9:c1:27:c5:
                    c8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4C:2F:F7:3D:23:3D:2B:45:04:A9:DE:B1:58:08:67:39:4A:D0:C2
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UUwv9z0jPStFBKnesVgIZzlK0MI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.160.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         7b:be:b9:09:bf:af:20:b2:0e:b8:39:55:b9:0b:3f:a4:ab:d5:
         e4:bf:3b:48:20:a8:d1:10:01:f7:27:fd:bd:36:81:b0:e5:ca:
         d1:b6:7a:6f:9c:5e:49:e3:c5:84:4f:96:a6:cf:aa:b1:ed:41:
         c8:95:7a:00:4f:30:cc:38:57:dc:41:d3:70:64:64:ce:5d:70:
         76:35:7e:7f:d3:4d:15:45:d5:32:d2:4b:5c:c2:4e:16:7a:27:
         00:75:da:51:34:e5:a0:d2:43:64:e9:5e:09:d1:4b:b4:c9:22:
         62:d0:36:9e:f3:82:7f:38:25:30:a6:14:d7:a6:17:56:a4:6d:
         80:e5:d3:4e:87:56:52:9f:c1:23:19:be:6f:ce:be:75:53:64:
         d2:77:90:69:83:3f:cf:69:8e:32:b3:22:2e:d4:31:c4:97:dd:
         34:a0:ee:ea:5f:d0:f3:6c:d3:0a:d1:e1:37:01:a3:7a:1f:52:
         92:fa:9a:ea:99:55:2a:e6:73:06:b9:7c:22:43:e4:1d:d1:16:
         10:6a:a5:2a:fb:9d:2c:fb:01:76:b3:be:43:87:3f:d7:f2:c0:
         b1:93:98:66:e1:3b:0b:dc:cb:4f:ca:d4:ed:8e:74:bb:81:2c:
         07:31:97:c4:31:df:0d:c4:fb:ec:4b:8a:e5:06:c0:2a:8c:2f:
         c3:9f:c9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org