Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/t6ZeVzh-lpDmCRPszSk92N3ogoM.roa
File:                     t6ZeVzh-lpDmCRPszSk92N3ogoM.roa (raw, json)
Hash identifier:          z5SIMfPEUyrZ9pq1cAszjPeG6ma4f3+VSEsryz90D+o=
Subject key identifier:   B7:A6:5E:57:38:7E:96:90:E6:09:13:EC:CD:29:3D:D8:DD:E8:82:83
Certificate issuer:       /CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
Certificate serial:       11
Authority key identifier: 00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/t6ZeVzh-lpDmCRPszSk92N3ogoM.roa
Signing time:             Wed 23 Feb 2022 04:56:41 +0000
ROA not before:           Wed 23 Feb 2022 04:56:41 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     55396
IP address blocks:        192.50.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
        Validity
            Not Before: Feb 23 04:56:41 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=B7A65E57387E9690E60913ECCD293DD8DDE88283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:3b:b3:91:21:99:d7:7c:3e:cf:68:34:63:
                    dd:b3:85:e5:65:ae:71:b8:9d:3e:1a:ec:34:a8:f7:
                    98:a0:aa:8d:2f:41:68:65:0c:59:1d:06:44:ca:91:
                    a9:b9:bd:3f:2d:bb:1d:2e:57:8c:d1:54:2b:84:29:
                    85:cb:d8:14:b6:da:b0:90:e4:94:eb:af:89:d2:da:
                    42:0e:c1:37:74:3a:0c:75:b6:5f:5e:fd:06:48:36:
                    59:6f:32:7b:8b:d2:bf:e6:cb:8c:2b:89:9a:4f:f4:
                    5c:ce:37:2f:e4:25:ad:b8:ba:31:4b:33:39:8a:bb:
                    86:f4:ca:ba:f9:e0:0d:81:e0:8a:fb:95:9a:0c:38:
                    40:19:41:47:34:d6:15:80:b1:a3:80:fe:bb:87:da:
                    ee:b5:e1:6d:d9:c6:fd:82:81:25:1f:6f:69:c3:73:
                    9d:69:2f:9c:07:7c:b3:c9:79:da:b6:4a:30:d0:54:
                    74:18:dd:73:fb:19:81:38:e3:1d:a2:d7:f3:f6:91:
                    c9:53:24:5c:af:00:f3:89:51:71:4d:a4:26:f2:53:
                    cc:e3:ea:f5:48:ba:43:9a:a8:9a:b9:f3:41:54:49:
                    96:69:48:ad:e7:97:b5:09:8e:79:f2:33:1a:a7:29:
                    4b:42:a8:8a:35:99:34:28:71:bc:61:b2:6f:29:23:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A6:5E:57:38:7E:96:90:E6:09:13:EC:CD:29:3D:D8:DD:E8:82:83
            X509v3 Authority Key Identifier:
                keyid:00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/t6ZeVzh-lpDmCRPszSk92N3ogoM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:77:a4:3d:b0:90:e0:37:6a:e0:66:22:ff:c1:c3:7b:90:fa:
         30:da:90:16:08:da:f6:d5:7b:5e:65:0b:48:41:32:6e:66:b6:
         40:4f:f8:8a:ab:81:6f:93:6f:f2:e7:55:e3:fd:fd:6d:b8:da:
         39:46:cb:04:9b:c0:3a:c2:de:4e:f5:6c:a2:9b:17:d7:b0:29:
         f7:f6:24:be:f7:a2:10:72:3b:1c:82:9e:69:d0:b3:4c:99:a1:
         8a:2b:ec:72:64:2a:b3:ac:e9:a0:04:7d:bb:26:42:d1:7d:7c:
         c9:b4:ae:69:ee:13:ce:f9:23:37:ab:ec:94:a6:b8:41:53:99:
         33:64:f8:f4:2d:63:01:4f:53:24:11:97:6b:89:e0:a2:b1:76:
         51:68:cb:ab:f3:82:0f:fe:42:ef:7e:4a:47:8f:9b:cb:43:97:
         9e:f9:3b:80:78:16:70:a7:09:2b:40:97:72:d7:0b:ac:74:52:
         5d:74:e4:dd:42:33:bc:4d:f3:5b:59:5c:1c:21:49:ee:4c:04:
         13:42:30:4a:8c:dd:10:28:10:d6:1a:43:40:35:df:06:a9:96:
         0c:89:15:fc:dc:59:56:62:f1:19:e2:84:b5:7b:e9:c3:ef:b4:
         5d:90:4d:9f:d0:7a:fc:4c:72:16:f9:6a:26:01:0b:40:ef:00:
         d2:8e:aa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org