Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30102/egojYE1Wb5rpzFWtmymhAIqP32c.roa
File:                     egojYE1Wb5rpzFWtmymhAIqP32c.roa (raw, json)
Hash identifier:          DYBF0+OVoX183QmELtoSP1/wbhnfOk2yWzOjayr8owA=
Subject key identifier:   7A:0A:23:60:4D:56:6F:9A:E9:CC:55:AD:9B:29:A1:00:8A:8F:DF:67
Certificate issuer:       /CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Certificate serial:       11
Authority key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/egojYE1Wb5rpzFWtmymhAIqP32c.roa
Signing time:             Mon 26 Sep 2022 01:13:53 +0000
ROA not before:           Mon 26 Sep 2022 01:13:53 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        2400:3800::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
        Validity
            Not Before: Sep 26 01:13:53 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=7A0A23604D566F9AE9CC55AD9B29A1008A8FDF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:26:11:18:fa:d9:27:46:ac:63:76:d9:4c:58:
                    14:12:00:36:21:10:cf:be:5a:b8:ae:75:45:5c:18:
                    83:c1:5d:fa:bc:10:ec:b7:ba:63:3a:89:5d:9a:03:
                    29:2d:52:dd:4b:84:61:33:0b:12:30:59:0b:40:45:
                    3b:9a:6a:93:e6:52:82:40:28:c4:a1:6c:d8:ec:77:
                    f9:65:af:a0:67:0d:06:f7:27:93:14:9a:7d:d8:2b:
                    49:fe:a9:27:5a:8b:a9:d0:f0:fe:65:3f:6f:ed:0f:
                    13:d1:df:e4:00:0c:45:46:be:6d:23:82:d9:92:b1:
                    0d:bc:06:5b:9d:dc:f3:b3:af:d8:3e:c3:75:a2:18:
                    28:f8:f5:b0:a9:c8:df:d6:f0:d4:e8:be:ec:dd:b5:
                    ed:9f:49:5e:05:fc:b7:9b:62:63:4f:b2:9c:e1:3d:
                    54:68:2a:31:84:60:f6:6f:c1:c2:52:fa:8a:49:fe:
                    8a:c3:cc:65:29:3d:d5:44:a4:a6:f9:42:8e:00:f9:
                    c7:17:e7:45:5b:43:4a:66:d5:01:f8:ed:85:a9:3b:
                    cf:b8:f1:ef:43:a5:21:c2:59:f7:6d:af:a7:59:ca:
                    20:69:c4:ec:48:98:c8:62:f3:37:9e:5e:dc:6e:c6:
                    e0:6e:25:18:3d:a4:ca:bf:3a:23:a5:51:c5:07:6f:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0A:23:60:4D:56:6F:9A:E9:CC:55:AD:9B:29:A1:00:8A:8F:DF:67
            X509v3 Authority Key Identifier:
                keyid:39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/egojYE1Wb5rpzFWtmymhAIqP32c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3800::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:a0:b6:92:83:15:7c:c1:3e:4c:52:9b:3a:42:ed:72:8e:3d:
         99:d1:73:59:1d:38:fb:91:95:73:dc:e0:ae:74:70:70:81:82:
         42:93:19:50:98:89:8b:0b:b6:62:73:09:32:35:5c:59:40:e2:
         03:ba:c5:c2:0d:b5:cb:8e:75:fd:79:f0:16:55:dd:ed:51:b3:
         eb:75:dd:3d:9e:26:5e:b2:10:55:12:97:c0:31:60:39:98:cd:
         69:9e:94:9c:79:b5:6b:b5:e4:55:40:d1:8e:bb:dc:b0:b1:02:
         31:27:3e:cf:9a:3e:d0:0e:a7:06:d9:32:11:ce:9d:14:39:25:
         3b:1e:56:00:9d:35:4d:92:21:55:6b:06:75:50:5c:a8:b1:fc:
         a9:d7:08:cf:f0:79:1e:db:0e:28:2f:76:f7:40:4a:a0:7d:35:
         f5:c3:22:ba:b2:ca:9d:77:2e:e5:6b:71:72:63:18:6b:9a:4c:
         5f:4a:dd:fc:5a:96:6f:b1:0e:f0:6b:66:87:04:c8:4f:0b:14:
         2d:70:de:cb:79:0d:9b:0c:ea:e5:52:a7:2f:e9:c7:92:1a:13:
         a1:c0:d4:18:c2:14:f7:65:f6:60:30:2e:f8:7b:de:44:7d:f9:
         05:35:cd:33:30:a8:a4:a2:9a:ba:e8:6d:5b:a2:41:9e:62:47:
         82:54:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org