Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/74ORAfQ-H9VX-QeFGdGM3675b0s.roa
File:                     74ORAfQ-H9VX-QeFGdGM3675b0s.roa (raw, json)
Hash identifier:          OOS+GmgEFG3XjZP3L0Jk8Mz+UkOH/iExcdwCHd7H6Wo=
Subject key identifier:   EF:83:91:01:F4:3E:1F:D5:57:F9:07:85:19:D1:8C:DF:AE:F9:6F:4B
Certificate issuer:       /CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Certificate serial:       22
Authority key identifier: EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/74ORAfQ-H9VX-QeFGdGM3675b0s.roa
Signing time:             Sat 08 May 2021 08:30:55 +0000
ROA not before:           Sat 08 May 2021 08:30:55 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     0
IP address blocks:        2001:7fa:7::/48 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
        Validity
            Not Before: May  8 08:30:55 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=EF839101F43E1FD557F9078519D18CDFAEF96F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:74:bc:11:1e:c4:e7:dc:fb:9b:75:c0:47:70:
                    d2:a0:b3:f1:a2:77:8e:e4:bc:24:43:92:63:56:61:
                    a5:11:02:f6:27:3c:a1:f8:70:a6:7f:26:9c:af:01:
                    cf:ae:33:25:13:22:8d:2c:11:db:b5:08:7e:2a:ac:
                    b1:08:bd:02:16:f1:12:71:87:b5:79:6e:5b:b7:b7:
                    c1:e5:86:ea:0f:12:30:02:c4:c9:ae:e9:54:58:09:
                    c6:89:1a:50:0c:db:ce:ce:bc:44:e6:94:b9:35:45:
                    fd:ee:1a:75:dc:7b:50:7b:48:04:f2:77:15:bf:b8:
                    19:a9:d7:fe:a2:38:94:26:eb:9d:08:73:6f:de:fb:
                    05:49:b8:3b:92:00:50:d1:c7:1d:2f:9e:4d:4c:46:
                    86:d3:42:b1:ed:79:86:c2:c5:71:0f:d8:8b:09:77:
                    e0:c3:77:a0:8d:0f:86:60:d1:2f:8b:11:05:12:7c:
                    e6:4d:5e:01:6e:af:af:49:3f:ec:1a:67:8d:36:d5:
                    43:32:fc:60:e8:ee:5e:2c:87:22:87:b8:e2:c9:d3:
                    47:82:7c:b6:d4:17:aa:82:da:76:cc:59:76:e5:5b:
                    0d:ad:21:a4:e9:33:aa:22:53:56:58:60:7f:94:ae:
                    ad:eb:1d:0b:ff:d5:81:ff:50:06:e2:c2:a5:81:c2:
                    1f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:83:91:01:F4:3E:1F:D5:57:F9:07:85:19:D1:8C:DF:AE:F9:6F:4B
            X509v3 Authority Key Identifier:
                keyid:EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/74ORAfQ-H9VX-QeFGdGM3675b0s.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7fa:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:e9:91:08:33:23:fa:43:4c:2e:d2:64:23:ee:7a:00:8c:84:
         5d:18:fe:60:b9:9b:fa:93:fb:52:ae:c6:ef:78:95:3d:5a:ae:
         6e:1b:41:30:a8:12:de:1a:8e:c1:e5:70:fa:75:0b:81:65:44:
         b1:c4:43:c7:c3:12:28:a1:bc:26:9d:3d:64:8e:43:60:fc:24:
         9b:5c:c2:b2:3f:a3:71:85:88:c3:91:cb:d9:16:b7:c7:16:ba:
         59:1b:c3:c1:65:a7:71:b4:1f:13:8c:a8:77:c6:a2:25:91:16:
         cb:ce:12:59:bc:20:bb:61:2d:22:c8:97:0d:df:9d:39:84:f1:
         d7:b6:f9:0c:89:e2:70:69:a2:a0:2b:ee:87:10:8e:06:ee:14:
         22:ab:9b:9b:6a:f9:6a:cf:e7:e3:82:50:ff:38:b4:0a:21:d6:
         9e:f5:13:62:22:12:cb:bc:8d:18:ac:78:41:5c:ab:14:b8:5d:
         a6:4f:91:d0:f1:c0:c6:55:86:2a:12:b8:72:61:50:4f:ce:0d:
         4d:4e:30:43:4f:09:ec:13:b8:06:ed:78:01:71:e1:1a:1e:ab:
         37:f6:15:d7:ab:09:da:08:b7:58:2e:4c:6a:2c:33:9e:dc:1a:
         4c:e5:c0:67:1a:2c:fa:e2:c3:df:f7:f6:5e:5f:75:a8:67:a2:
         4e:3d:09:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org