Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Is73gcpGjI054DXzWOOZoIMuudg.roa
File:                     Is73gcpGjI054DXzWOOZoIMuudg.roa (raw, json)
Hash identifier:          akFmrXz7JyWfk4Qm/aN7YyfqrjZNliZgZ3GeYXWXbrM=
Subject key identifier:   22:CE:F7:81:CA:46:8C:8D:39:E0:35:F3:58:E3:99:A0:83:2E:B9:D8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0196
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Is73gcpGjI054DXzWOOZoIMuudg.roa
Signing time:             Tue 30 May 2023 17:34:31 +0000
ROA not before:           Tue 30 May 2023 17:34:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:70:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=22CEF781CA468C8D39E035F358E399A0832EB9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:af:a5:59:82:de:03:a9:da:a0:df:b3:fb:77:
                    23:bf:c3:3a:02:be:d4:73:e0:73:6b:90:80:4b:d4:
                    c4:9e:9f:64:64:9e:a0:76:87:19:b3:58:44:32:c3:
                    da:b2:89:f8:db:c2:8a:6c:c1:53:d1:5f:c8:9c:b1:
                    7b:0d:d8:12:bb:05:ce:3c:1b:c7:e8:a7:85:71:13:
                    93:d0:cb:6c:62:ad:a1:c2:40:b8:e0:11:1e:97:18:
                    52:b0:f7:28:f5:4a:b9:ce:b7:7d:70:ca:3f:36:c5:
                    77:8a:bd:e0:ed:95:17:8e:6a:3f:54:2f:7a:31:d4:
                    97:e2:3c:35:23:f1:37:3a:d5:27:73:d6:dd:8d:04:
                    f7:a7:63:dc:a1:97:9f:71:f6:a2:9d:7a:28:dd:3e:
                    97:17:cd:d6:e6:58:85:3f:98:22:a4:a4:57:3a:73:
                    92:38:ed:14:6f:9d:82:57:3c:5d:55:6f:6c:c9:8e:
                    eb:21:6e:7a:e3:ef:fb:41:19:59:b1:33:fe:4e:dd:
                    a8:ee:1d:0d:21:1e:6d:e7:b3:c1:2b:73:f2:c8:ab:
                    3b:a7:2b:53:aa:87:e3:e1:c9:b7:45:10:50:64:a2:
                    2e:4f:84:ef:e5:a5:ac:4c:47:8c:2a:f6:1f:f6:6f:
                    9a:7d:0b:a3:9a:a6:8c:14:4a:ea:94:76:78:dd:8a:
                    9e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CE:F7:81:CA:46:8C:8D:39:E0:35:F3:58:E3:99:A0:83:2E:B9:D8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Is73gcpGjI054DXzWOOZoIMuudg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:70:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:9f:24:2c:d2:4c:36:54:fa:02:4d:d0:d7:e3:34:74:db:0d:
         cc:a4:55:47:86:c2:29:26:96:78:b5:59:5b:9c:46:8c:65:71:
         20:b9:0f:5e:00:6c:0b:e9:e7:66:c8:c1:48:54:e9:90:c7:35:
         dd:db:5e:74:cd:3f:fb:c1:98:38:e1:0f:a9:88:ba:0e:a0:41:
         51:75:f1:0d:81:43:14:47:74:c8:a6:ad:58:0a:b2:94:ee:45:
         f6:07:b0:38:53:d7:e9:75:72:01:8c:05:3a:b2:b4:b2:d4:0d:
         76:54:d9:60:3a:53:5d:60:a7:00:c5:7e:ee:99:d4:c6:d0:85:
         44:78:c2:79:a9:95:3a:5c:0b:be:59:9b:c4:3c:86:35:8f:b1:
         7b:1a:73:f2:c8:5a:a1:5d:37:ee:11:6b:84:f1:68:c7:c8:19:
         66:33:81:68:54:3b:25:c4:c9:c7:31:0e:af:06:48:34:43:b7:
         10:c5:97:18:38:92:a2:11:8f:68:2a:ac:23:b1:cf:da:6a:4b:
         13:31:c7:5c:44:ed:ef:44:11:60:5c:2b:a5:2e:7e:a5:6c:fb:
         79:3f:f0:cf:bc:61:1f:9a:45:33:cd:50:40:cc:d8:23:3b:43:
         a7:b3:d4:30:df:93:27:a6:2b:fa:b3:9b:62:71:32:91:3a:86:
         d7:fc:cf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org