Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/7sSADjwKz9ZFGxIOh93TMYgxf-Y.roa
File:                     7sSADjwKz9ZFGxIOh93TMYgxf-Y.roa (raw, json)
Hash identifier:          eclzBhxE07txLPqa2ZKX7I5rYmbcfaO36R7o8L/AjXI=
Subject key identifier:   EE:C4:80:0E:3C:0A:CF:D6:45:1B:12:0E:87:DD:D3:31:88:31:7F:E6
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       10
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/7sSADjwKz9ZFGxIOh93TMYgxf-Y.roa
Signing time:             Tue 16 Mar 2021 04:50:32 +0000
ROA not before:           Tue 16 Mar 2021 04:50:32 +0000
ROA not after:            Tue 15 Mar 2022 08:34:35 +0000
asID:                     9351
IP address blocks:        203.133.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar 16 04:50:32 2021 GMT
            Not After : Mar 15 08:34:35 2022 GMT
        Subject: CN=EEC4800E3C0ACFD6451B120E87DDD33188317FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:a2:da:f2:de:81:62:75:70:6f:50:d0:35:
                    cb:0d:e4:f9:32:aa:d0:8b:32:9e:81:ba:6c:7b:8c:
                    93:8a:cc:cd:06:6c:ec:52:1c:2e:dd:1f:92:fd:bd:
                    57:1b:07:40:69:14:82:d3:55:98:88:d8:75:91:e1:
                    e7:b0:ad:8c:b4:fc:77:f5:b6:05:15:88:32:2a:2b:
                    71:40:12:f8:5f:50:42:1e:0b:8b:aa:f8:e8:1b:73:
                    4d:97:1d:65:ae:ab:7e:c5:e3:ea:1a:49:d2:31:03:
                    9a:33:2a:56:d4:8e:48:8b:71:1e:70:fb:5e:5f:2e:
                    fc:bc:2b:4d:94:c8:cb:5e:c7:82:ae:11:9c:4c:db:
                    2d:c4:0c:ac:ec:c2:50:4f:a4:26:bf:eb:d8:d0:5d:
                    34:95:cc:f8:12:82:f3:7d:c7:07:56:a6:0d:3a:81:
                    1f:6e:22:40:d7:97:5d:0b:19:3e:84:5e:25:3b:4d:
                    62:07:84:d1:a3:9d:90:cb:3c:49:3a:9c:a2:3e:b5:
                    ec:3b:54:70:46:2e:39:10:f7:fc:24:aa:99:ac:7c:
                    2d:ad:79:8a:c2:a7:f1:e0:be:3c:6f:2f:a6:3b:04:
                    2c:e2:83:16:28:1f:5d:e5:be:6c:eb:f2:e2:b7:95:
                    0a:d3:2b:05:f8:f6:51:ec:d3:6d:0e:9c:d6:b6:c4:
                    68:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C4:80:0E:3C:0A:CF:D6:45:1B:12:0E:87:DD:D3:31:88:31:7F:E6
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/7sSADjwKz9ZFGxIOh93TMYgxf-Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.133.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:5b:40:96:7d:75:b3:b0:fe:66:f7:85:44:df:ed:82:91:5b:
         ce:7e:d1:98:d1:96:7c:f9:4d:c7:ca:bc:e6:78:a7:27:b1:41:
         38:62:78:97:df:74:42:89:5b:11:34:f8:0f:b9:92:84:33:2d:
         97:d1:4b:5b:0a:ad:02:06:36:32:ae:d8:17:53:4a:4a:05:45:
         9f:15:43:98:46:24:48:c2:5c:0c:1f:2f:03:07:36:32:92:dc:
         59:e5:cd:30:5f:b9:2b:b3:0f:06:bd:d8:00:e1:4a:ee:dd:6a:
         30:70:35:f0:fe:66:0c:f7:5f:02:8d:dc:10:d4:d5:5a:91:49:
         c6:a8:dc:99:36:14:80:05:40:52:14:cd:de:f9:a8:29:37:cc:
         7b:76:dd:1a:79:96:30:81:69:41:ae:d3:04:af:41:b2:26:d8:
         1a:39:a2:40:76:e1:e6:d1:45:8a:82:58:31:3b:47:87:e1:6b:
         a7:86:d0:4f:69:8c:b4:d0:b1:44:a8:05:70:64:65:f6:af:40:
         12:9e:f7:0b:15:ea:1b:27:9e:30:7f:61:fd:d0:78:e1:85:b8:
         91:ae:90:04:45:a2:17:d4:b1:ca:be:e5:ed:c9:16:5c:23:45:
         23:ed:b5:3e:af:1b:61:f7:18:e4:b6:b2:ee:0a:a6:d9:ec:9b:
         62:1a:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org