Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/0aOok1_qES2aC3Kx3vJW21i-hUk.roa
File:                     0aOok1_qES2aC3Kx3vJW21i-hUk.roa (raw, json)
Hash identifier:          UNW7PHSaR0pNEoXXZtEdpiA3gfe0eysHgpHgbG5H+7c=
Subject key identifier:   D1:A3:A8:93:5F:EA:11:2D:9A:0B:72:B1:DE:F2:56:DB:58:BE:85:49
Certificate issuer:       /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Certificate serial:       1A
Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/0aOok1_qES2aC3Kx3vJW21i-hUk.roa
Signing time:             Tue 25 May 2021 02:36:50 +0000
ROA not before:           Tue 25 May 2021 02:36:50 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     7687
IP address blocks:        160.246.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
        Validity
            Not Before: May 25 02:36:50 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=D1A3A8935FEA112D9A0B72B1DEF256DB58BE8549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:db:80:c7:1c:bb:ae:16:3f:c0:cf:05:48:
                    1a:93:f9:4c:04:d1:71:2d:16:c9:99:44:fd:2c:b1:
                    0d:1a:f6:d2:b4:c6:f4:f9:4b:46:f6:40:8b:75:38:
                    44:ed:09:60:dc:7d:92:df:66:6c:f4:01:dc:6d:e7:
                    a5:73:f0:74:a3:bd:b0:80:26:5d:9a:b9:d5:ee:c8:
                    77:e9:27:56:19:c6:77:5f:3f:e6:ec:bb:c7:32:d0:
                    e4:8f:74:44:e0:a3:31:46:83:f3:4c:67:63:6d:81:
                    12:f0:cf:d5:d6:26:8a:f9:18:05:b2:81:ab:83:96:
                    71:5e:b3:99:72:00:ae:00:07:bd:7f:9c:63:11:40:
                    c1:9d:c7:9c:b1:42:4b:3f:5b:1b:80:af:e2:8e:11:
                    ae:d4:18:8b:6d:87:10:7b:1c:68:53:1c:c0:bf:f2:
                    b6:88:db:a4:c8:d7:44:8e:29:78:5f:5d:7b:b6:99:
                    2f:22:03:4f:e8:a8:9f:4c:ae:89:ec:51:10:5e:f7:
                    74:07:9d:f0:4b:ce:b5:c6:cb:2d:75:ae:28:1a:fd:
                    9b:e8:b2:81:03:ff:0a:c2:0f:4a:58:f1:ed:c5:ba:
                    08:53:de:ac:e7:0e:82:de:cd:20:a7:68:e4:80:3c:
                    8d:ee:de:fe:ac:e2:9b:5a:32:90:a7:10:02:5b:d2:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A3:A8:93:5F:EA:11:2D:9A:0B:72:B1:DE:F2:56:DB:58:BE:85:49
            X509v3 Authority Key Identifier:
                keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/0aOok1_qES2aC3Kx3vJW21i-hUk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6c:0d:40:b0:02:71:cd:3b:14:10:a4:b4:22:19:19:fb:9d:ea:
         7f:ee:f7:03:28:47:3e:46:3c:89:12:3a:5e:8d:28:9b:34:0c:
         4a:b4:85:48:99:94:17:b3:a0:8e:c1:77:e5:46:03:af:69:8a:
         fd:67:06:5b:80:bf:a0:1b:8e:be:f9:9b:1d:44:ec:a0:78:2b:
         54:a9:ca:15:1d:c6:98:38:ff:46:e6:5b:2a:7f:fc:ff:76:ef:
         33:8f:ba:2e:5d:24:25:da:c6:98:d7:05:23:f3:05:28:a6:52:
         11:20:6d:cb:a0:36:39:c5:19:5f:d4:32:a4:87:df:5b:20:b8:
         5e:62:8a:0b:47:ef:7f:42:5c:7a:eb:1b:39:e5:73:57:8e:aa:
         49:1a:31:42:dc:cd:55:61:d6:f4:ca:33:c4:e1:2c:4f:05:31:
         8a:88:7b:72:3a:86:87:9f:39:34:a2:d6:c2:9e:3f:cc:b4:06:
         6b:3d:15:be:59:8f:f3:7e:26:15:7f:7d:4e:aa:da:5a:5f:ee:
         e4:62:b2:21:3b:a8:88:4e:ad:23:f4:bd:02:b3:0e:34:22:63:
         b0:87:49:16:24:90:6c:ee:47:94:cb:d1:24:8f:11:12:1d:b0:
         61:3c:1c:47:b8:01:11:60:68:c2:d7:82:64:87:cb:f0:5c:f5:
         f4:ce:bf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org