Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30073/UVKkiKBRMtm6sQIMBXRM2A0-AoA.roa
File:                     UVKkiKBRMtm6sQIMBXRM2A0-AoA.roa (raw, json)
Hash identifier:          nUMKK2yZwbkvHF55bxM7AXbWk9S92SBArJfl/c7eHC8=
Subject key identifier:   51:52:A4:88:A0:51:32:D9:BA:B1:02:0C:05:74:4C:D8:0D:3E:02:80
Certificate issuer:       /CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
Certificate serial:       2C
Authority key identifier: B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/UVKkiKBRMtm6sQIMBXRM2A0-AoA.roa
Signing time:             Fri 05 Aug 2022 06:05:08 +0000
ROA not before:           Fri 05 Aug 2022 06:05:08 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        2001:380::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
        Validity
            Not Before: Aug  5 06:05:08 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=5152A488A05132D9BAB1020C05744CD80D3E0280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:c5:be:07:ff:2a:23:66:3e:54:76:13:02:
                    01:63:ca:44:45:08:2a:1b:e7:73:b9:bd:fd:96:4e:
                    e1:37:32:5f:22:71:75:14:ca:84:92:0d:b8:6a:45:
                    0f:1c:e2:fd:1b:35:1e:d6:21:00:5d:ae:23:4f:e0:
                    4e:10:fa:e6:79:84:69:c3:8b:b5:40:12:1d:d8:fd:
                    0d:62:24:f4:f5:1c:df:e3:d6:a8:cd:69:51:dc:bb:
                    1f:91:1b:5d:89:c5:7e:16:fc:93:c0:8c:49:74:5c:
                    d2:1d:1b:3b:c2:0b:3c:e3:de:bd:be:87:97:8a:c1:
                    9d:df:6a:27:95:f4:ac:89:3f:b1:84:68:20:c6:c6:
                    bd:93:0e:19:7c:b5:d0:8f:78:96:a2:e3:88:9e:31:
                    11:ca:93:85:7c:88:16:20:70:38:e6:27:c3:b1:93:
                    b8:64:1c:4b:a7:16:ba:d1:a3:90:26:61:cc:8f:af:
                    9b:de:5a:6a:45:4e:03:e3:32:72:25:96:de:74:6f:
                    99:57:48:8b:d0:86:21:3a:74:e8:94:db:24:42:21:
                    11:b6:e2:55:2b:9c:17:00:f1:a8:ba:f7:e4:42:fc:
                    2e:6f:6a:de:a0:e4:57:81:ec:2b:69:25:f3:df:4c:
                    c9:a1:5c:b1:85:27:69:3b:09:7f:15:c1:ad:33:b1:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:52:A4:88:A0:51:32:D9:BA:B1:02:0C:05:74:4C:D8:0D:3E:02:80
            X509v3 Authority Key Identifier:
                keyid:B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/UVKkiKBRMtm6sQIMBXRM2A0-AoA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:380::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:70:fe:e8:e9:49:9c:a2:64:f8:1e:6d:9c:5a:0e:87:58:34:
         26:05:ba:3d:bf:6c:00:17:53:15:31:c6:44:1b:2d:3a:a7:ed:
         09:9e:97:c7:1f:ab:34:ac:7f:a3:2e:ce:a1:a8:dc:33:70:1d:
         7b:7f:23:9a:9c:ea:57:00:66:72:ed:18:f4:4d:fd:ef:c2:59:
         c6:41:cb:64:35:ff:37:f3:e6:de:c6:ff:1c:dc:5b:44:9a:87:
         0e:31:81:a2:1a:d3:08:f9:12:0d:97:d8:64:71:c2:a2:b3:91:
         37:8f:62:6f:00:0f:5c:71:3e:4f:94:21:fc:14:b0:a7:94:05:
         ec:5e:41:c9:41:f8:f1:28:8f:3e:90:3b:4f:bd:a9:32:4c:6e:
         2e:22:ef:82:21:52:db:2e:de:d3:68:dc:f1:48:a5:4c:84:62:
         eb:c3:01:2d:87:af:a0:13:f2:8f:c1:1b:c4:5a:06:d2:ca:e4:
         2e:8a:c0:ea:76:e8:f9:28:97:d6:e1:3c:9e:d4:83:8f:16:f2:
         d3:57:5a:af:9f:6d:ff:14:a1:89:fd:0c:d6:a8:0e:cf:2e:49:
         9b:e1:4e:36:e9:3e:7b:7e:42:28:6e:3f:cc:cd:13:17:c0:9c:
         a2:39:da:61:2c:2e:9c:3e:08:db:3b:a8:6a:bc:54:81:7b:0b:
         54:78:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org