Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/33u8vjkVub3siFzbQPcYurIo4iA.roa
File:                     33u8vjkVub3siFzbQPcYurIo4iA.roa (raw, json)
Hash identifier:          odItGyaGQ85r26rWB2lXsz0DrdTfQU2KCjo5jHLT6aA=
Subject key identifier:   DF:7B:BC:BE:39:15:B9:BD:EC:88:5C:DB:40:F7:18:BA:B2:28:E2:20
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       86
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/33u8vjkVub3siFzbQPcYurIo4iA.roa
Signing time:             Tue 30 May 2023 16:06:27 +0000
ROA not before:           Tue 30 May 2023 16:06:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DF7BBCBE3915B9BDEC885CDB40F718BAB228E220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:60:08:bc:9a:00:69:d7:1b:6f:3d:b3:9f:e0:
                    d2:e0:2d:40:78:fb:5e:f3:ca:14:1a:7f:6c:33:76:
                    fd:f0:c2:17:87:ef:f1:66:7f:7a:6b:28:84:9d:c3:
                    54:81:a7:00:1c:01:e0:aa:03:c9:06:2c:0a:7c:24:
                    bd:8e:4a:d9:22:8c:2b:46:4b:66:15:48:d7:7b:15:
                    e8:84:20:63:55:63:03:7c:cf:1d:10:e7:74:e4:47:
                    83:09:64:b3:45:79:f6:dc:26:4d:72:3b:1f:f8:e7:
                    c1:0f:35:a2:04:4d:66:83:44:1a:d8:d0:6b:73:bf:
                    95:a0:97:d4:f9:7f:9d:ba:b3:0c:e5:23:a8:6c:11:
                    81:e6:27:5c:d4:da:79:0d:4a:25:27:52:6b:f1:21:
                    6f:3c:16:50:0b:32:d6:9f:5e:06:1e:88:95:24:b4:
                    e7:2b:90:1e:95:09:8c:0e:8e:28:70:9e:57:8c:34:
                    d3:02:a1:b6:5a:df:a7:dd:96:8a:df:4c:31:d7:59:
                    86:76:08:dd:13:2e:24:1d:7c:81:2a:b8:64:3a:fc:
                    0d:30:fc:e5:d8:7f:f0:7a:a9:54:5c:2f:ff:ff:92:
                    f3:d9:5c:fe:6a:24:f0:b1:72:15:d8:69:0b:db:ba:
                    de:3b:42:25:8c:14:27:11:18:9c:62:90:be:33:82:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7B:BC:BE:39:15:B9:BD:EC:88:5C:DB:40:F7:18:BA:B2:28:E2:20
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/33u8vjkVub3siFzbQPcYurIo4iA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:ba:16:a1:7c:1c:dc:ef:4f:65:68:bd:5c:af:fe:b3:08:0e:
         e2:8b:d9:d9:da:f1:56:27:f5:5b:c8:80:1f:6e:1c:4c:fb:30:
         77:36:32:de:78:c4:21:48:8f:53:af:a8:8f:11:f4:3d:75:be:
         32:35:53:8c:f4:87:fb:5b:07:9b:9f:bb:60:f1:b1:16:66:4d:
         8f:6f:82:c3:25:c9:25:f1:0d:9d:c4:8a:6b:78:85:11:6e:8d:
         80:ad:bd:b5:e4:1c:56:42:e7:ca:2f:b7:58:c5:3e:2b:93:54:
         eb:b4:08:25:4e:7c:96:22:97:2c:27:79:8a:15:e8:26:f1:3e:
         ad:c0:61:3a:25:43:a9:b5:42:34:d5:e1:f3:0c:95:c3:c7:ce:
         38:9e:b7:b6:d4:ca:4d:2a:44:4f:f4:63:1f:74:7b:0a:fd:76:
         df:f4:fe:69:27:7e:4a:dd:a2:79:77:a4:00:40:06:8e:53:a1:
         f6:0d:5c:b3:32:5d:6d:8c:7c:b9:d1:00:31:1c:2c:7b:58:57:
         17:be:7e:53:07:a7:f4:cd:cc:d6:a7:c6:2f:47:17:a1:fb:37:
         f2:a1:40:ad:ec:31:db:f8:a1:7c:d5:7f:dd:59:5c:7e:3f:27:
         03:0e:8f:de:69:6b:43:d6:ff:6a:06:37:1e:62:7f:1c:25:7a:
         f8:a7:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org