Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/RGfAVu7dXE-LGDVU2hZ5ca_Vy44.roa
File:                     RGfAVu7dXE-LGDVU2hZ5ca_Vy44.roa (raw, json)
Hash identifier:          Hrhbh2wIB+EQs38n4sXd2iv2MO/sANKCEYLtmcv0NpQ=
Subject key identifier:   44:67:C0:56:EE:DD:5C:4F:8B:18:35:54:DA:16:79:71:AF:D5:CB:8E
Certificate issuer:       /CN=85FE0FA704460AA4FAEF8FA8CA609F00C4CDE008
Certificate serial:       02
Authority key identifier: 85:FE:0F:A7:04:46:0A:A4:FA:EF:8F:A8:CA:60:9F:00:C4:CD:E0:08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/RGfAVu7dXE-LGDVU2hZ5ca_Vy44.roa
Signing time:             Tue 01 Nov 2022 04:36:13 +0000
ROA not before:           Tue 01 Nov 2022 04:36:13 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2518
IP address blocks:        133.208.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85FE0FA704460AA4FAEF8FA8CA609F00C4CDE008
        Validity
            Not Before: Nov  1 04:36:13 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=4467C056EEDD5C4F8B183554DA167971AFD5CB8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:0c:f5:19:74:12:61:2a:9d:85:cc:24:51:
                    c2:d3:27:17:64:25:f2:a8:60:6e:80:c4:8b:c8:6a:
                    ed:5a:0a:b1:ff:3a:ad:ed:cb:1b:88:ad:0f:f1:d1:
                    8c:6a:c1:74:41:5e:b4:28:4b:45:67:03:3e:83:e0:
                    77:af:62:30:9a:09:85:bb:04:07:74:8c:3a:f7:59:
                    f2:07:95:8f:bc:8c:18:d2:85:c2:12:62:80:9d:99:
                    4f:ac:5f:39:60:50:11:ec:ec:a2:4a:7b:31:2d:61:
                    5a:ed:aa:5d:84:b4:b9:45:30:fb:ea:0b:bc:aa:9d:
                    da:df:1f:f7:d9:27:b1:f0:19:f0:6b:e6:80:45:1f:
                    3b:88:33:8c:b0:65:96:cd:80:d4:ac:cc:ce:96:92:
                    ee:69:c6:39:b5:ad:3e:0c:73:70:5a:85:dd:42:82:
                    70:92:0e:a7:81:87:52:66:c1:70:ca:17:c5:ec:39:
                    89:f4:2b:c1:5e:ba:b7:c0:50:87:3e:93:86:70:11:
                    0f:c1:99:b0:7d:bd:3d:18:2e:f9:69:98:8d:79:be:
                    cc:8e:bc:06:7e:67:e6:c7:b8:70:88:fc:95:7c:05:
                    77:fc:e8:0d:37:c7:2e:25:b3:0a:4f:b4:49:61:14:
                    31:7d:64:a2:fa:fd:d9:19:5d:ef:3b:2c:5b:19:ba:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:67:C0:56:EE:DD:5C:4F:8B:18:35:54:DA:16:79:71:AF:D5:CB:8E
            X509v3 Authority Key Identifier:
                keyid:85:FE:0F:A7:04:46:0A:A4:FA:EF:8F:A8:CA:60:9F:00:C4:CD:E0:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/RGfAVu7dXE-LGDVU2hZ5ca_Vy44.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.208.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         25:c8:63:c8:cf:71:5c:db:26:13:f4:c0:84:0b:9d:bc:cd:49:
         30:27:42:37:4f:8b:1c:71:81:7a:87:8d:5c:5f:a7:18:7e:cb:
         21:ee:0a:9b:b5:18:0f:70:90:ad:4f:d7:b9:0c:74:93:3f:8d:
         89:85:4b:4f:38:dd:1f:8d:06:c9:61:a3:7e:29:74:89:b2:b2:
         ee:d1:3f:7a:c2:e5:3a:8f:c8:c1:43:02:ab:a7:72:95:dd:3d:
         5d:76:22:26:c4:46:0a:36:d0:b5:d1:7c:88:0d:60:cb:04:fd:
         9e:c1:db:a9:b0:1f:6a:66:17:b9:77:70:28:d7:58:53:66:71:
         eb:ab:48:9b:12:3c:f3:3f:50:a9:1e:28:83:1b:2b:77:93:6c:
         b8:66:be:38:ce:1e:b4:1d:14:58:58:ed:cb:89:49:dd:69:19:
         aa:13:7b:d5:b7:65:c9:b4:3c:f0:6f:57:cd:b7:8a:d4:b5:b5:
         5e:c8:d8:e0:ec:02:10:e5:64:a0:dc:47:b3:5a:12:2c:2a:07:
         62:66:07:3f:57:94:70:20:54:42:87:d8:4b:be:97:1d:7a:24:
         e1:fe:37:b0:d0:10:c5:61:29:ba:91:c2:21:a5:8f:e4:e6:b0:
         67:53:16:56:11:5b:7d:b1:61:d4:f3:c0:b8:01:91:b4:1a:1c:
         2f:de:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org