Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/tDa66VbkuytBw1wVrSYe-GZ-sEI.roa
File:                     tDa66VbkuytBw1wVrSYe-GZ-sEI.roa (raw, json)
Hash identifier:          uHM9fJBpxUcyYnHo3IsCuh+acLjmGqcGctRacg1vW6s=
Subject key identifier:   B4:36:BA:E9:56:E4:BB:2B:41:C3:5C:15:AD:26:1E:F8:66:7E:B0:42
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       9F
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/tDa66VbkuytBw1wVrSYe-GZ-sEI.roa
Signing time:             Mon 01 Aug 2022 01:28:50 +0000
ROA not before:           Mon 01 Aug 2022 01:28:50 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9370
IP address blocks:        27.134.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:50 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=B436BAE956E4BB2B41C35C15AD261EF8667EB042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:46:0d:aa:43:58:84:28:78:76:f7:81:f7:
                    b6:65:06:38:85:8b:e6:ad:74:64:2b:b9:41:28:d1:
                    63:eb:38:36:c2:9a:88:e3:72:f8:f4:19:4f:3f:71:
                    da:77:d3:a4:6f:c1:7c:cc:74:b1:83:8d:70:bc:bc:
                    d3:ab:66:9c:cc:95:96:f5:ea:b4:33:8d:1b:93:84:
                    c0:1e:4e:7a:f5:1d:75:c5:0c:b9:8e:eb:7d:e2:c8:
                    71:d4:71:5d:27:da:78:7e:b1:41:5e:99:5e:8f:0e:
                    96:71:01:ef:9b:30:e1:75:00:6f:12:49:19:90:71:
                    13:04:0a:43:88:a0:c3:b9:3b:52:a1:26:8e:f2:8b:
                    a2:ba:90:86:1c:fd:80:2d:ea:1a:57:47:5a:c1:e9:
                    51:76:9e:28:04:25:5f:b4:d9:af:ce:ae:0e:55:df:
                    aa:22:a7:12:6a:37:56:62:f1:61:e5:b3:cd:4b:5f:
                    b4:c6:89:e9:20:ff:93:2c:f7:3c:45:7d:a2:26:38:
                    c4:78:eb:62:2a:78:70:04:f4:c4:89:da:09:b1:1f:
                    0e:1a:87:15:86:14:25:c5:88:71:ea:83:17:18:2e:
                    98:68:fc:13:71:78:6e:4c:20:e2:84:d8:42:1e:41:
                    65:b4:49:6b:b8:9e:36:74:37:39:ac:96:8a:da:dd:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:36:BA:E9:56:E4:BB:2B:41:C3:5C:15:AD:26:1E:F8:66:7E:B0:42
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/tDa66VbkuytBw1wVrSYe-GZ-sEI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:18:cb:30:9b:b2:4e:c6:1b:5b:e3:05:a5:ae:7c:5a:15:85:
         ba:69:7c:db:92:bc:72:14:3c:8a:c2:2d:e2:c3:b7:5b:9b:65:
         7d:11:a1:4c:6b:c6:30:d3:61:a1:cf:95:b6:1c:8c:be:71:be:
         8f:4b:aa:83:6a:b2:06:a8:2f:0b:0b:66:21:dc:4d:77:4f:68:
         1b:d1:19:ba:0b:d7:46:b1:3e:de:fd:e3:ef:62:e2:33:73:29:
         5c:6c:d7:28:28:47:78:e7:fa:2a:60:c0:8d:ea:7e:df:78:3c:
         f0:5f:7a:5b:cf:06:15:09:61:d0:67:13:4e:83:28:ce:a8:5d:
         79:3d:a2:91:e4:5c:e1:40:ac:f0:1e:f9:d9:ca:e1:bf:d1:f7:
         67:f5:f5:69:ad:7f:f2:62:67:f0:88:00:a7:29:0e:bf:30:54:
         ec:9a:02:83:c6:c9:3d:6a:05:e8:50:4c:c8:ec:10:11:6a:c7:
         af:14:9d:21:12:b5:f2:5c:d5:24:47:1b:84:be:30:01:9e:5d:
         1e:f5:03:17:6f:1a:a7:b6:94:ae:c3:f9:0d:0c:d8:90:5c:ab:
         8c:eb:8f:cb:b3:65:ab:1f:2f:a5:5b:54:c5:e3:3a:1f:93:d2:
         35:de:8c:76:13:99:6a:82:10:33:1a:d0:71:c4:6b:ef:ef:22:
         55:59:8d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org