Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/13eexOmHKwfp4GMeSq5ROLAebb0.roa
File:                     13eexOmHKwfp4GMeSq5ROLAebb0.roa (raw, json)
Hash identifier:          U/YhrPbtVToT2o58/bppBBEB+SKdUntXhmlcwpgkK9U=
Subject key identifier:   D7:77:9E:C4:E9:87:2B:07:E9:E0:63:1E:4A:AE:51:38:B0:1E:6D:BD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       77
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/13eexOmHKwfp4GMeSq5ROLAebb0.roa
Signing time:             Tue 30 May 2023 16:06:22 +0000
ROA not before:           Tue 30 May 2023 16:06:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D7779EC4E9872B07E9E0631E4AAE5138B01E6DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:57:ce:f5:61:6a:e0:2d:e2:22:b6:4f:65:
                    1c:53:92:2b:8d:02:3a:20:74:c9:b9:3c:ba:15:8c:
                    90:77:bb:7b:7a:f2:12:af:aa:28:35:ab:84:f7:93:
                    44:4a:f5:48:84:1d:6f:fc:e1:ea:83:82:8b:c1:84:
                    49:f9:d9:69:c0:36:9a:f8:f3:5a:a7:9e:c3:9c:47:
                    35:2a:1c:60:37:53:f9:5d:9e:be:07:11:45:45:79:
                    4d:fd:f5:68:cf:84:a0:e9:4a:37:70:13:3d:1d:b6:
                    8c:e9:a0:be:eb:09:42:b0:3c:15:a2:5d:36:28:fc:
                    fb:70:89:6f:74:31:a6:e9:9a:f6:82:ad:ba:44:54:
                    aa:8a:7a:17:e3:9e:29:97:f5:b7:46:91:1c:71:6e:
                    17:3d:52:29:73:da:16:3b:67:c4:c4:28:cf:dd:a7:
                    14:31:c6:49:fd:8d:f2:24:be:2e:e8:b2:6a:77:74:
                    45:40:86:5a:e9:d3:d9:6b:1b:25:8b:be:96:fc:64:
                    e9:67:60:27:94:df:8e:e0:dd:38:03:f5:3a:88:4d:
                    77:05:b0:99:c7:9f:03:b0:08:ea:5f:53:72:8c:fa:
                    d0:e9:c0:da:df:33:ee:bd:d8:73:37:83:a3:20:59:
                    4b:f5:01:c8:96:81:12:ed:f7:de:59:b2:3b:ad:be:
                    cb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:77:9E:C4:E9:87:2B:07:E9:E0:63:1E:4A:AE:51:38:B0:1E:6D:BD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/13eexOmHKwfp4GMeSq5ROLAebb0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4600::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:d5:7a:e3:23:53:50:ee:5c:b0:50:84:67:d2:4f:65:b8:9d:
         6e:e4:6b:18:90:0b:a6:d4:6a:c7:c3:af:66:37:40:0d:69:15:
         9a:7a:a6:4d:f1:6f:c4:62:06:08:ea:18:8c:67:16:ed:6f:8b:
         b6:be:3a:ad:0a:44:63:d1:28:bd:55:a3:be:fa:89:be:1f:2c:
         7c:b7:bc:82:64:38:d6:bc:dd:d7:22:dd:45:5b:54:08:54:91:
         05:74:73:4f:30:b7:44:f1:eb:75:9e:d0:0a:7e:07:82:4c:eb:
         aa:91:31:da:e0:20:f0:39:d5:60:65:e6:98:9d:64:2d:5f:e3:
         5c:e3:51:e6:f6:79:87:8e:d6:27:05:8c:49:e4:1c:3b:ae:a8:
         e3:04:f9:e0:d1:b6:36:bc:e7:45:cd:77:c7:54:32:0d:80:4b:
         30:f2:0b:d2:c6:65:28:d8:2d:b1:76:76:c8:fd:a0:59:b2:39:
         c7:fa:b4:f4:b8:2a:f8:14:26:ac:7d:65:91:da:b2:4b:ef:cf:
         15:cb:34:1a:cd:ee:cf:c9:ce:50:99:eb:60:9f:0c:0e:92:e7:
         b0:71:9e:0c:2c:71:00:c5:c4:c0:5d:c2:b9:18:70:f8:37:82:
         48:e1:c6:7b:63:f7:ec:43:82:92:22:1d:2b:ff:03:96:3e:ea:
         59:3b:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org