Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QBeRVDcxDQf_1kihlLIwoW2gagE.roa
File:                     QBeRVDcxDQf_1kihlLIwoW2gagE.roa (raw, json)
Hash identifier:          Yljykw03q+4xuuIcjWqNUv2Ok/vfLupu7MXOHbInkwk=
Subject key identifier:   40:17:91:54:37:31:0D:07:FF:D6:48:A1:94:B2:30:A1:6D:A0:6A:01
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       3E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QBeRVDcxDQf_1kihlLIwoW2gagE.roa
Signing time:             Tue 30 May 2023 16:04:15 +0000
ROA not before:           Tue 30 May 2023 16:04:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:eb00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4017915437310D07FFD648A194B230A16DA06A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:f8:a5:19:4c:cf:71:16:b1:d1:7a:5d:5e:
                    c5:c9:31:b7:1c:45:fe:af:78:a7:42:96:7e:7f:3f:
                    48:dc:9b:fb:f6:ca:bc:81:d7:60:89:c1:ef:b8:a0:
                    73:82:ad:b2:f8:f0:51:a5:6e:b7:c2:8f:43:d4:40:
                    ae:64:46:dc:b8:18:1f:79:d7:28:b0:94:7c:e9:41:
                    16:c8:99:1c:71:8b:ac:b6:f6:44:65:42:c3:6e:04:
                    2d:f9:9b:b9:92:c2:bc:d9:cc:e7:fa:c1:87:60:68:
                    7d:37:98:17:85:d9:92:5c:db:fc:19:c8:f4:27:4e:
                    7a:40:1f:31:10:76:cc:d0:17:6e:9d:b4:81:3a:f7:
                    b3:45:1e:74:41:28:a5:26:ec:25:a4:1f:87:d7:cc:
                    1f:d0:60:86:1b:71:c5:c0:1d:45:67:cc:c0:f9:51:
                    7e:1c:85:b1:20:e8:80:ff:46:da:aa:74:b1:68:e2:
                    28:b6:78:75:5a:7b:6b:6a:37:5d:16:83:fd:2e:73:
                    c6:e6:4e:ec:c1:7f:e1:1b:d0:a7:45:f1:d9:43:35:
                    43:42:18:b3:b5:d0:1b:a6:58:c1:3d:5a:39:d6:5c:
                    e9:72:fd:b9:fd:ae:dc:39:0c:8f:b1:24:be:c1:9d:
                    8d:7c:6d:3c:0a:73:ff:7e:8d:ab:63:cf:1f:57:34:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:17:91:54:37:31:0D:07:FF:D6:48:A1:94:B2:30:A1:6D:A0:6A:01
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QBeRVDcxDQf_1kihlLIwoW2gagE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:eb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:d9:22:50:61:03:71:15:82:3b:ca:60:d3:32:65:34:5d:f5:
         98:d3:3c:8a:67:54:ee:d2:a2:b0:27:ac:be:be:96:1e:48:b4:
         8d:93:df:09:78:b9:9c:a2:5f:8e:e1:cb:81:74:45:57:08:45:
         76:44:76:5c:f9:14:3d:cd:a8:11:49:7a:61:28:1d:8f:fb:cb:
         11:8e:63:2f:c8:d6:bb:48:29:19:64:96:f0:d2:4e:ae:0c:e6:
         8b:ab:55:fb:86:ff:ef:32:49:64:2c:99:50:1d:1a:1c:cb:66:
         01:95:aa:8c:89:30:03:cd:0d:65:f8:0d:79:38:70:68:0e:54:
         5b:89:d7:25:89:53:63:f3:dc:65:17:c3:ba:ce:06:5b:85:0e:
         46:ed:ac:b4:67:62:25:9a:87:da:34:8b:8e:48:63:e4:35:d7:
         5d:b5:9c:43:b0:f6:87:53:dc:1f:13:76:41:7b:b9:ae:d4:64:
         3a:41:2a:d7:52:76:dd:08:08:b4:e5:2f:e8:a0:e5:7f:af:2e:
         22:55:12:53:36:15:91:ac:8c:0d:4f:82:1e:90:80:d1:25:19:
         d7:78:96:5e:52:86:56:8e:33:44:a2:f8:18:25:1f:50:ce:2c:
         1c:78:9a:75:62:53:a2:6f:b4:79:25:ea:e2:38:e2:10:27:1a:
         a9:70:7e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org