Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OloWo7b0w6p6BkHuxuzO0mZiVWU.roa
File:                     OloWo7b0w6p6BkHuxuzO0mZiVWU.roa (raw, json)
Hash identifier:          IUJLj0l8evbloxWnOIhp0O2mzuX+7JRjkY2NSuPHCOk=
Subject key identifier:   3A:5A:16:A3:B6:F4:C3:AA:7A:06:41:EE:C6:EC:CE:D2:66:62:55:65
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       97
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OloWo7b0w6p6BkHuxuzO0mZiVWU.roa
Signing time:             Tue 07 Jun 2022 10:19:14 +0000
ROA not before:           Tue 07 Jun 2022 10:19:14 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        210.198.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:19:14 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=3A5A16A3B6F4C3AA7A0641EEC6ECCED266625565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:a4:23:f4:4d:f0:08:72:8f:97:66:ba:44:
                    df:a7:bd:b9:f6:8e:e6:6a:ba:17:fb:ac:c9:9b:76:
                    aa:f5:92:c0:72:32:66:39:fa:7b:ef:b3:d2:38:bc:
                    92:97:5c:90:36:c7:e6:fa:a3:fb:f9:81:2f:75:15:
                    fd:cf:da:b6:da:d0:bc:12:fd:22:ca:b2:c2:b8:54:
                    39:c6:8d:2d:d8:c6:ed:cd:3e:62:9f:12:32:29:c6:
                    1b:6c:84:b8:69:aa:71:d4:98:3b:86:5e:2b:d4:88:
                    cc:e1:81:ef:53:37:7f:3d:01:36:c5:1e:e1:a0:d1:
                    85:25:99:6a:af:c8:3d:d7:69:f2:34:88:4d:eb:41:
                    ef:09:b7:04:be:7f:f4:6c:04:d8:6b:0d:40:b5:3b:
                    f5:5f:95:b6:18:19:7c:40:84:9a:8f:b9:3a:4c:e6:
                    c1:7c:ff:54:03:46:85:4b:90:d9:e6:fd:7a:67:3c:
                    c2:23:7a:15:18:6d:36:f0:54:b2:d8:3b:f8:3b:f2:
                    c2:46:af:ac:d7:24:08:09:c3:fe:8b:24:27:3b:e9:
                    15:48:e5:c4:70:b0:57:c2:ae:15:5f:e1:5a:e8:a1:
                    7e:21:82:54:7c:37:b1:5d:20:75:6f:e1:77:b8:3f:
                    bd:34:54:03:7a:e6:4b:35:9c:22:55:80:b4:8d:ab:
                    2a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5A:16:A3:B6:F4:C3:AA:7A:06:41:EE:C6:EC:CE:D2:66:62:55:65
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OloWo7b0w6p6BkHuxuzO0mZiVWU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:23:6f:72:e0:9c:3a:48:da:d8:d7:91:a4:d2:99:11:f0:
         f9:9e:44:93:b6:57:4d:64:e3:65:3a:c2:d8:89:b5:97:ec:8d:
         02:df:d4:88:93:e0:d8:07:8a:d6:9a:42:86:92:cf:59:0c:ae:
         fb:8d:b1:da:c8:ff:cb:17:b3:a8:72:5e:74:d3:8e:e9:c8:13:
         8e:f5:21:7f:ac:98:39:cb:b3:1b:cb:2d:cf:0c:e2:a3:4e:3b:
         75:55:2b:23:a1:ac:fb:0d:83:03:79:f2:80:2b:a9:4a:eb:fd:
         d3:0a:ca:01:1a:37:f0:84:d9:97:68:e7:0c:07:f9:e1:22:2a:
         f1:05:57:ec:80:16:4c:2e:2e:76:3e:a6:a7:76:3b:ca:12:f9:
         a7:03:14:f0:a4:ab:43:3e:c2:33:7d:5d:f9:19:93:10:ae:58:
         cd:db:e0:cf:ec:96:54:b0:b6:42:27:a8:49:9d:c3:80:90:f6:
         ae:e3:de:eb:fc:2b:48:aa:5a:1d:aa:28:c3:81:6c:c1:db:0c:
         c7:ad:d3:97:e1:d1:97:51:6c:c6:b2:6a:02:d8:72:1a:d5:96:
         7e:e4:e3:ae:02:6e:80:f0:81:0d:f5:26:9c:38:b4:cc:7b:b1:
         bf:2f:5c:84:ff:25:3c:ef:79:e3:bd:c8:54:51:b3:91:03:76:
         0e:8b:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org