Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2787/oO9GaO3k996nARhs4me5U146ggo.roa
File:                     oO9GaO3k996nARhs4me5U146ggo.roa (raw, json)
Hash identifier:          2pF0sYgk1XduGvHX+5QR6b4hDqzEOCbb7YmZh6IaSls=
Subject key identifier:   A0:EF:46:68:ED:E4:F7:DE:A7:01:18:6C:E2:67:B9:53:5E:3A:82:0A
Certificate issuer:       /CN=FBD12BD05282FF382B4B1DAF0B460E85FE44FE65
Certificate serial:       1A
Authority key identifier: FB:D1:2B:D0:52:82:FF:38:2B:4B:1D:AF:0B:46:0E:85:FE:44:FE:65
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/oO9GaO3k996nARhs4me5U146ggo.roa
Signing time:             Tue 25 May 2021 02:36:59 +0000
ROA not before:           Tue 25 May 2021 02:36:59 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     59128
IP address blocks:        192.50.220.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD12BD05282FF382B4B1DAF0B460E85FE44FE65
        Validity
            Not Before: May 25 02:36:59 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=A0EF4668EDE4F7DEA701186CE267B9535E3A820A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:c8:42:b4:36:a9:70:bf:04:75:52:06:e9:
                    41:10:2f:2e:78:2c:aa:7b:f6:b4:7c:be:64:3f:b4:
                    cb:46:c4:2e:cb:a1:65:f5:d2:39:06:62:35:41:b1:
                    31:1a:72:87:d3:08:38:7a:f4:0f:08:ae:f7:f4:0c:
                    34:6b:b9:5e:01:49:27:b9:ee:0c:dc:58:b0:d1:ba:
                    85:ee:8a:8b:8b:ce:87:47:23:13:a5:50:57:64:d3:
                    8c:68:26:2a:b0:fd:a8:07:74:0e:82:4e:6b:74:20:
                    9c:0b:25:b9:ab:0f:cb:a6:0e:57:36:02:6a:a7:c8:
                    6b:cd:01:42:6a:45:a1:b1:7e:10:c8:25:75:7e:18:
                    8c:40:f0:4e:93:8b:4f:a2:af:69:47:36:47:84:39:
                    6f:5a:96:f6:73:47:5e:5c:b9:61:cc:1c:04:0c:f7:
                    70:78:e3:80:30:7c:ef:7d:b1:09:72:2d:d6:97:52:
                    49:8a:96:43:53:85:e4:b8:83:fe:e9:df:b1:57:1e:
                    da:58:a8:4b:d4:fa:fb:3f:55:16:03:3b:26:dd:82:
                    2b:21:80:5d:f3:c8:29:aa:e4:45:32:4d:33:3f:8e:
                    7b:e4:f8:a8:82:ae:2b:12:8a:ae:7c:fb:c1:a9:27:
                    aa:85:b4:a1:84:98:69:d9:44:10:94:bf:ef:9c:40:
                    15:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EF:46:68:ED:E4:F7:DE:A7:01:18:6C:E2:67:B9:53:5E:3A:82:0A
            X509v3 Authority Key Identifier:
                keyid:FB:D1:2B:D0:52:82:FF:38:2B:4B:1D:AF:0B:46:0E:85:FE:44:FE:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/-9Er0FKC_zgrSx2vC0YOhf5E_mU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/oO9GaO3k996nARhs4me5U146ggo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:62:6a:5c:0f:ad:06:f8:56:76:7d:73:75:2a:20:dc:37:8e:
         28:5b:90:1d:eb:f1:80:54:8a:b0:8c:a8:5a:d2:38:e2:99:25:
         54:ae:6a:4c:c0:03:07:fc:fe:a2:07:8b:f7:1c:cf:13:bc:83:
         25:86:52:47:9d:a6:01:16:52:bc:7c:bc:0c:ab:7a:16:d1:39:
         61:af:38:16:d0:74:3d:12:88:42:27:1e:51:62:05:93:f0:1d:
         e6:e5:a4:bc:83:ec:72:56:06:2a:30:2f:90:18:82:ee:b2:54:
         5f:0f:22:ee:c9:05:05:65:1b:26:29:55:fb:f1:9a:31:61:cf:
         34:2c:6b:b5:af:70:1e:0c:2c:73:d5:d4:d1:fe:43:0d:b3:93:
         4d:90:1e:ba:f0:94:57:9d:ca:4f:a9:88:0c:76:5d:f5:2a:7f:
         ae:ba:39:05:43:c3:90:b4:8b:62:1b:b9:de:60:2c:7d:9a:e7:
         ae:0a:ee:c4:79:72:ff:5f:84:bf:37:e6:d8:6d:1b:f4:b1:92:
         81:9f:cd:2e:30:08:f3:6c:ff:00:93:d0:5e:fb:a7:fe:c7:62:
         af:02:25:e8:41:f6:c7:66:8d:93:c3:65:e2:f1:2e:85:b7:53:
         19:31:4b:58:78:8d:bf:08:a8:47:1e:a2:4b:58:d8:91:84:85:
         11:b1:b6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org