Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/vlKT73u0zmjlPymezxSMDv_SHlk.roa
File:                     vlKT73u0zmjlPymezxSMDv_SHlk.roa (raw, json)
Hash identifier:          tWYT6AbvAeOLXG1tXeKKQcuGFHkE2ykdWDdkJhRoIiM=
Subject key identifier:   BE:52:93:EF:7B:B4:CE:68:E5:3F:29:9E:CF:14:8C:0E:FF:D2:1E:59
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       2F
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/vlKT73u0zmjlPymezxSMDv_SHlk.roa
Signing time:             Tue 25 May 2021 02:36:48 +0000
ROA not before:           Tue 25 May 2021 02:36:48 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     131078
IP address blocks:        202.255.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: May 25 02:36:48 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=BE5293EF7BB4CE68E53F299ECF148C0EFFD21E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:3d:7e:a7:25:65:d8:48:58:1a:03:fa:54:
                    dc:24:a2:3f:d3:ff:78:a7:8f:b4:e3:8f:ab:4c:9d:
                    40:69:7c:b8:cb:19:af:ac:ae:1c:42:12:2d:38:71:
                    b7:85:e8:e3:e5:45:6c:d7:8f:4c:a8:3e:55:47:cc:
                    84:24:65:06:b5:37:40:96:9d:b3:96:c7:1e:87:ed:
                    85:7b:87:30:24:25:cf:b3:16:2a:7d:0e:60:e9:dd:
                    44:55:81:a3:a1:75:68:2d:8a:1b:8d:ef:1b:9b:d5:
                    9c:f2:72:ec:a5:dd:40:d6:63:c8:0a:c9:df:e8:b4:
                    d4:50:3f:2a:64:08:c9:c1:3f:a4:65:ce:27:e0:54:
                    19:8d:8c:86:96:b4:3f:14:e4:53:c8:79:9c:06:88:
                    92:bd:5c:f1:73:e9:dc:bd:b9:44:50:ec:6b:c8:e3:
                    cc:e7:71:a4:99:23:f0:80:24:6f:dc:25:97:c8:3e:
                    0b:26:26:2f:52:37:ea:2c:c9:99:d0:62:a7:48:0f:
                    a1:ea:d3:0e:04:9e:f5:df:d6:04:ce:a0:3b:3f:17:
                    56:29:67:33:99:15:6b:68:6a:d9:9e:db:c9:0c:06:
                    30:7d:cf:cd:6a:b5:75:ab:b0:ac:da:ef:a1:04:19:
                    89:69:10:47:61:59:83:a7:1f:b7:3a:eb:53:c6:62:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:52:93:EF:7B:B4:CE:68:E5:3F:29:9E:CF:14:8C:0E:FF:D2:1E:59
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/vlKT73u0zmjlPymezxSMDv_SHlk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:ba:1c:30:74:f0:fe:80:2a:4a:1b:8e:e1:c0:e7:8c:03:f3:
         bf:02:94:bd:c5:bb:b0:41:ae:73:ce:71:95:d6:fc:08:6e:1d:
         86:78:c8:eb:b5:dc:cd:87:63:91:a2:68:f2:d9:bf:26:c3:aa:
         52:56:e7:25:0d:03:75:8e:ad:05:33:d4:52:aa:de:2d:d7:af:
         38:a3:f7:ee:04:48:79:82:74:c8:cd:0b:44:c9:0c:00:00:55:
         bc:1f:7d:21:2c:18:98:22:08:e0:70:dd:5c:0e:75:a2:d3:a1:
         4d:77:72:12:60:87:1d:d5:65:7e:17:f2:35:80:92:d6:fc:18:
         87:6d:ec:b0:ee:6a:10:68:18:e4:9f:35:77:9c:4c:56:69:fc:
         c8:b3:b2:3c:31:05:2e:0c:4d:58:50:1e:6b:cf:81:87:a6:68:
         04:9d:e0:76:3a:00:1e:d0:2b:be:3b:a8:db:53:77:84:49:6c:
         7b:bf:78:7c:dc:a4:42:22:43:e4:71:d5:60:2b:3e:d2:70:c0:
         ea:43:d8:75:71:cb:cd:6a:fd:42:18:5e:20:8a:f4:0d:d2:59:
         37:2d:c4:ee:b8:d7:47:b4:ab:64:66:dd:ed:1f:c9:0f:e3:98:
         1d:78:69:f7:2d:c7:36:c2:ff:38:e3:70:c1:76:25:f8:eb:eb:
         7c:29:e3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org