Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/kz71vLNGcpGOKetTdk4m2vwglwU.roa
File:                     kz71vLNGcpGOKetTdk4m2vwglwU.roa (raw, json)
Hash identifier:          nyIu4Z34ltn0WsrofiicK0vxtKzaARj2ir2eFB6leB8=
Subject key identifier:   93:3E:F5:BC:B3:46:72:91:8E:29:EB:53:76:4E:26:DA:FC:20:97:05
Certificate issuer:       /CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD
Certificate serial:       10
Authority key identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/kz71vLNGcpGOKetTdk4m2vwglwU.roa
Signing time:             Sat 02 Oct 2021 08:41:56 +0000
ROA not before:           Sat 02 Oct 2021 08:41:56 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     24296
IP address blocks:        154.34.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD
        Validity
            Not Before: Oct  2 08:41:56 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=933EF5BCB34672918E29EB53764E26DAFC209705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f5:44:cc:3f:f7:49:06:19:31:5b:1a:1d:e0:
                    03:5e:80:9a:b1:3f:56:e7:45:53:25:10:f9:fe:86:
                    c9:f5:9b:70:af:ee:34:27:79:70:13:d9:f3:c9:83:
                    31:fa:a8:74:1f:79:4d:6d:7f:ba:3b:14:f3:42:d4:
                    60:bf:94:3b:0d:b8:df:11:88:2e:6b:50:8d:90:1f:
                    4f:7d:4b:53:15:0b:10:0f:5f:86:58:51:b1:01:42:
                    ff:52:81:66:5a:b0:e4:56:13:48:10:83:5a:98:f5:
                    83:f2:e1:d6:1a:2c:10:50:c7:c2:e9:84:d5:79:19:
                    95:74:80:5b:0d:77:d9:34:d2:9a:7e:87:4f:ff:9f:
                    9f:6a:06:1f:d2:ca:c8:4c:be:98:ef:81:ec:e3:a5:
                    70:0f:2c:82:0e:b8:32:e9:8e:fc:ec:f9:98:31:69:
                    1a:27:30:47:14:fa:da:d3:0e:7f:22:88:96:15:f3:
                    98:44:c6:ae:75:4d:28:3c:78:4b:22:30:c5:0f:3c:
                    ec:ce:1d:f4:60:c2:e2:4d:19:6e:e4:3c:72:24:2d:
                    e9:16:41:82:19:6e:bb:20:e3:17:69:9e:fe:29:2a:
                    33:1a:20:b6:1b:b4:4e:7c:c7:8f:1a:80:56:05:f6:
                    77:17:2e:27:ee:d3:0b:8c:65:9b:47:6e:4a:4c:66:
                    68:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3E:F5:BC:B3:46:72:91:8E:29:EB:53:76:4E:26:DA:FC:20:97:05
            X509v3 Authority Key Identifier:
                keyid:85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/kz71vLNGcpGOKetTdk4m2vwglwU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.34.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         68:e5:0d:70:9b:f1:f7:da:c2:0c:01:ac:fc:bf:f6:59:6c:e5:
         09:41:8d:97:db:ec:4a:03:a3:fd:32:60:aa:f8:bd:6b:17:5c:
         3c:1e:ba:94:3c:bc:a1:94:66:bd:5b:9b:d2:fa:f7:67:48:55:
         e1:23:be:ec:81:cd:22:a2:9a:a2:6c:c7:bd:7b:61:6e:f2:2d:
         f2:6d:58:31:8f:cb:9a:7c:fb:50:0b:a5:99:f9:88:8b:51:91:
         1f:49:ee:2d:76:2a:f8:53:dd:3a:0d:db:5b:e2:10:87:9f:42:
         27:c2:18:c0:36:12:f6:15:55:7b:c3:05:30:e3:0f:65:e7:66:
         58:01:ec:c9:a8:a1:9c:33:01:3e:ea:2e:6d:25:09:52:24:cc:
         c8:f0:e9:1b:5f:58:61:73:3b:39:73:45:f8:59:ae:95:45:29:
         cd:b0:9a:a6:e8:48:05:21:13:f3:01:47:97:3f:b0:a9:7d:c8:
         a3:22:b2:c6:bf:2c:b6:0b:1e:8f:15:5e:13:ef:9a:db:78:aa:
         70:c5:94:39:28:ca:87:de:61:c2:fb:de:bb:02:78:b6:fa:4b:
         4b:c2:81:eb:da:cf:b7:e5:d0:00:3b:52:df:1a:6a:be:c6:8a:
         c5:8a:2a:9d:a3:cd:89:4a:b0:7a:b3:f3:95:f0:13:0d:1c:47:
         21:91:17:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org