Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RdOGcLHf67JDmE_Gas64_wTxz_M.roa
File:                     RdOGcLHf67JDmE_Gas64_wTxz_M.roa (raw, json)
Hash identifier:          k8vgm/e9srs3OmWKE4x034HxQeDRshjkpg5ZdtQp75M=
Subject key identifier:   45:D3:86:70:B1:DF:EB:B2:43:98:4F:C6:6A:CE:B8:FF:04:F1:CF:F3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       EA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RdOGcLHf67JDmE_Gas64_wTxz_M.roa
Signing time:             Tue 30 May 2023 16:12:24 +0000
ROA not before:           Tue 30 May 2023 16:12:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=45D38670B1DFEBB243984FC66ACEB8FF04F1CFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:c1:64:9c:6d:69:bc:ec:d7:c6:cd:01:fc:
                    c6:91:ab:a6:0a:15:6a:e9:df:dd:54:fa:7c:91:d4:
                    42:31:79:26:8b:5a:2d:6d:84:ec:48:8f:c8:bc:c0:
                    25:0a:9a:34:85:ec:1b:91:2e:64:94:be:db:c0:d9:
                    c3:aa:06:3a:e3:0a:ab:8a:5a:b1:f8:e4:3b:78:4e:
                    2c:c9:c3:76:37:d8:2f:17:7a:91:6d:7e:67:a2:ee:
                    41:44:7a:e3:c9:d8:53:e0:62:88:44:13:3d:89:42:
                    5e:39:7c:50:ae:b7:9f:90:dd:4c:58:32:58:de:e4:
                    ab:ba:35:66:7a:40:e9:b6:94:d9:8a:54:83:81:19:
                    f0:7a:dc:78:96:3b:b9:fc:bb:f2:a5:cf:8c:78:a5:
                    87:42:f6:34:11:eb:1f:75:5e:08:ef:02:9e:ce:a5:
                    92:41:0b:1f:07:a5:aa:03:ec:c7:35:d9:2a:21:1b:
                    60:89:8f:38:b3:d9:b6:74:f9:67:80:db:48:16:bb:
                    02:5b:df:87:2e:59:bb:54:e8:8a:04:8e:7b:c8:15:
                    0f:7e:c8:f9:c4:f1:3c:21:08:5c:56:71:89:58:ac:
                    49:d7:de:a4:5f:6c:ab:44:13:75:39:7e:d7:68:84:
                    b0:42:6e:f7:a7:a8:2d:e2:b7:55:02:5b:9a:04:22:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D3:86:70:B1:DF:EB:B2:43:98:4F:C6:6A:CE:B8:FF:04:F1:CF:F3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RdOGcLHf67JDmE_Gas64_wTxz_M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a700::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:e1:9b:6a:fa:e5:84:94:39:c7:40:5a:c5:4b:c4:63:c3:da:
         6f:ba:1d:8c:26:c9:d6:90:ea:6e:8a:fc:c1:cb:a4:3c:74:8e:
         0e:36:9e:47:1a:0f:0b:60:4c:f7:0f:87:83:ac:d9:c3:67:73:
         b7:5c:07:05:7e:44:fb:d7:99:bf:cd:52:d7:fe:b3:1c:97:de:
         75:b0:46:64:34:fe:78:20:3d:3c:c6:1a:fc:2f:7a:fd:c5:9b:
         3c:36:5e:9d:ce:54:f6:62:ac:71:64:97:75:1d:1d:ae:de:bc:
         26:24:eb:3b:e7:e5:79:55:85:fd:0d:a7:32:6c:53:f9:7b:b2:
         d4:19:6c:5e:63:b9:dd:9d:fb:f4:75:51:e9:79:cf:7b:bf:16:
         3e:f7:70:79:83:8f:31:4d:c7:8c:67:ea:3c:56:a2:6a:fb:05:
         9d:98:d4:0b:dc:ad:c3:9c:c6:4b:99:40:40:f8:5e:92:04:0c:
         73:81:b4:b3:41:79:c5:ab:22:b8:a3:fe:c2:89:07:43:53:a0:
         ef:4f:4a:93:d7:ac:38:86:70:6a:45:56:2d:97:34:19:88:ad:
         67:d3:a5:2d:6d:38:64:f7:42:20:88:08:d1:94:48:b1:37:6f:
         30:51:01:d7:2e:d6:a6:44:91:72:e4:49:dc:35:80:94:36:1e:
         db:b6:ac:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org