Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/lreWAfDgy9ib8Mcwo236kShGy6Q.roa
File:                     lreWAfDgy9ib8Mcwo236kShGy6Q.roa (raw, json)
Hash identifier:          +1MqAbRb4L2j9045humPOi4Zyo3s1pKgpzXbMOsfNGY=
Subject key identifier:   96:B7:96:01:F0:E0:CB:D8:9B:F0:C7:30:A3:6D:FA:91:28:46:CB:A4
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       9A
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/lreWAfDgy9ib8Mcwo236kShGy6Q.roa
Signing time:             Mon 01 Aug 2022 01:28:49 +0000
ROA not before:           Mon 01 Aug 2022 01:28:49 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9370
IP address blocks:        153.121.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:49 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=96B79601F0E0CBD89BF0C730A36DFA912846CBA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bd:a1:64:c7:be:77:e1:39:be:0e:18:58:43:
                    54:83:b7:df:73:d5:ea:bc:4b:7c:dc:74:f5:fc:d3:
                    aa:73:9f:f4:ed:78:c3:f6:45:58:7f:1e:e6:17:2c:
                    3d:53:76:5b:6b:79:a2:fa:2b:69:32:f4:d4:23:07:
                    3c:16:ba:bf:97:28:5d:ad:5d:22:58:6e:2f:43:66:
                    72:57:06:5a:49:7c:a3:f2:28:2b:0a:59:b9:ca:67:
                    fa:9b:c6:44:37:ac:31:90:94:ef:96:58:e9:d4:04:
                    1d:7f:9f:0a:0a:27:73:fa:65:c8:75:e5:01:ce:e1:
                    49:a2:45:9c:c9:cc:01:b5:c2:d9:d5:8d:7c:bb:0b:
                    3b:aa:71:f5:f4:34:70:f3:91:f9:c3:96:1f:cb:3b:
                    1f:57:06:42:e9:bc:f7:63:39:c4:48:4b:34:9f:fd:
                    c1:20:fc:66:78:fc:14:94:a5:4d:6f:4e:c9:2d:21:
                    50:8c:14:d5:98:d1:0f:0a:7e:93:bf:d8:0f:b8:d4:
                    9e:dd:50:83:e1:3b:dd:7a:7a:98:b8:13:92:31:b4:
                    6f:d9:a4:73:80:fa:7a:ca:9f:6c:7e:ec:69:59:7d:
                    15:51:30:78:3c:c7:91:2b:60:c1:97:a6:f9:fe:32:
                    b4:2f:93:91:77:29:11:e5:ef:46:a2:2c:2a:31:f5:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B7:96:01:F0:E0:CB:D8:9B:F0:C7:30:A3:6D:FA:91:28:46:CB:A4
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/lreWAfDgy9ib8Mcwo236kShGy6Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:7d:35:84:25:14:7b:50:18:cc:d4:ac:22:d8:a4:e7:40:c7:
         b5:54:f1:81:91:cb:25:da:66:46:f9:32:a0:19:35:30:be:88:
         d3:1a:3c:47:a2:1d:10:32:99:7a:21:f9:3f:90:da:e7:aa:eb:
         7b:df:56:b5:71:99:db:38:a1:b6:a3:1f:9c:18:1e:51:0d:1f:
         85:51:87:20:7f:06:97:ca:3b:3d:7b:00:1a:f2:a7:49:51:fb:
         19:71:ec:c4:36:ac:3e:89:77:93:59:3c:89:62:97:4f:80:94:
         9f:ac:99:cd:7d:0b:11:59:e1:95:cd:d3:7e:2a:35:5f:7e:d4:
         8a:e3:2c:bf:81:a2:f7:86:a1:be:0d:c3:09:bb:47:83:36:fa:
         fa:5e:65:f4:ff:04:69:54:d2:01:c6:7f:e9:b5:bd:05:1b:48:
         b7:08:b8:d5:e1:d2:90:b2:e0:6f:7d:aa:4f:0e:f2:c7:cb:ae:
         08:b8:30:00:f1:da:6e:4a:42:6a:29:fb:00:b5:8d:f9:e1:f3:
         d9:67:89:5b:a4:83:3c:fa:d7:33:07:94:da:50:1a:7b:36:7f:
         b4:cf:1c:4c:fc:a6:19:38:95:30:63:d0:b4:19:bc:e6:a1:48:
         cd:e4:dd:40:82:8a:1b:f8:17:f5:25:c2:97:e0:62:e8:f4:7e:
         2a:89:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org