Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/-SREaj_Hli9dM0137PvmdvsCEXI.roa
File:                     -SREaj_Hli9dM0137PvmdvsCEXI.roa (raw, json)
Hash identifier:          9YoRLK3Fdg7S8yW1v5uoJGwlw5r7DxiiuoC6lNXBFCs=
Subject key identifier:   F9:24:44:6A:3F:C7:96:2F:5D:33:4D:77:EC:FB:E6:76:FB:02:11:72
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       94
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-SREaj_Hli9dM0137PvmdvsCEXI.roa
Signing time:             Tue 07 Jun 2022 10:17:26 +0000
ROA not before:           Tue 07 Jun 2022 10:17:26 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        175.133.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:17:26 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=F924446A3FC7962F5D334D77ECFBE676FB021172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:c9:aa:cd:57:c2:50:cd:94:88:66:f6:89:
                    40:fa:97:4b:32:25:b5:0a:5b:d0:19:18:0a:a7:05:
                    10:a0:37:61:28:33:07:dd:58:cc:de:c9:23:29:6a:
                    2c:92:28:25:af:8d:df:89:01:b4:5c:ed:9d:ea:c4:
                    b9:bc:f1:10:e0:62:28:37:c8:e4:47:5c:cf:75:5b:
                    05:40:9f:59:de:c1:d7:50:6c:f7:2c:56:8b:e6:01:
                    56:e6:1d:9e:e6:8d:92:c6:d3:47:f9:8e:52:20:17:
                    1b:5b:18:4d:50:b1:a1:91:6c:09:24:e3:3f:e4:d6:
                    47:1b:75:26:f0:95:80:a4:f8:ec:90:01:46:82:06:
                    35:21:29:28:81:f9:fa:33:29:3a:57:86:f8:c4:a9:
                    1e:51:92:80:9b:8d:5a:bd:dc:00:24:98:75:b0:31:
                    b7:16:e6:25:81:68:49:70:d5:b5:ac:cd:cd:c1:c4:
                    19:7a:6f:6f:cb:e1:4c:09:72:8b:97:31:3f:e6:09:
                    50:31:8b:86:5b:7c:eb:3b:b7:e1:c5:22:dd:01:a9:
                    a2:68:17:f0:c5:22:92:67:9c:23:53:e0:a0:60:b7:
                    c9:c6:0a:92:89:14:7e:71:03:53:d7:64:86:f1:6a:
                    80:c8:42:aa:39:d4:e2:42:2d:2a:e9:6b:f4:6d:df:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:24:44:6A:3F:C7:96:2F:5D:33:4D:77:EC:FB:E6:76:FB:02:11:72
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-SREaj_Hli9dM0137PvmdvsCEXI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.133.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:6c:33:c2:63:15:b5:65:30:55:b7:40:d6:5a:d8:0e:4a:59:
         73:df:b6:80:b0:e9:44:71:92:5d:4c:9d:ce:82:fb:b7:bd:72:
         57:c1:77:5c:52:5a:29:18:13:21:71:36:8c:57:2b:02:7f:9e:
         12:55:53:f8:33:c5:8f:4c:f4:5c:3a:f0:51:57:a6:83:20:04:
         03:1d:30:90:86:5c:35:b4:fe:19:2e:5e:74:04:c0:22:0c:85:
         9d:ec:a1:ae:ea:11:7a:58:25:47:06:e8:be:8b:e9:0c:b8:c2:
         5d:d2:5d:88:83:98:03:ad:72:a6:09:a2:99:06:fa:4e:bf:5e:
         fe:a7:90:0f:c3:28:7b:29:36:0d:7a:ad:a5:8d:03:f0:7e:62:
         7d:1c:f7:a4:28:e3:cf:de:1e:eb:9c:8d:cd:e9:2a:35:69:f5:
         ea:51:2c:f0:98:fd:fa:85:a6:3d:44:52:5d:4e:ab:d0:35:7c:
         7a:4e:2d:f7:6f:9d:fd:fa:fa:69:72:75:9d:f1:7f:07:ae:22:
         1e:dc:76:29:f4:12:c7:a1:37:ec:ab:4f:f8:5d:d9:6e:6f:50:
         d8:41:81:8c:c3:c4:f1:1d:37:66:f6:08:15:51:7d:ed:d6:51:
         fd:76:d1:8c:6f:16:43:ca:33:1c:45:a5:da:5e:fb:98:f3:81:
         01:c9:02:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org