Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TkwlAVYOKGEZIwnShb6Cce5upsY.roa
File:                     TkwlAVYOKGEZIwnShb6Cce5upsY.roa (raw, json)
Hash identifier:          2/pb4R3ab44o8TVzhXFq/QE5F8umqc1lL1ynw9JjQ+s=
Subject key identifier:   4E:4C:25:01:56:0E:28:61:19:23:09:D2:85:BE:82:71:EE:6E:A6:C6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01C3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TkwlAVYOKGEZIwnShb6Cce5upsY.roa
Signing time:             Tue 30 May 2023 17:36:34 +0000
ROA not before:           Tue 30 May 2023 17:36:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:14:e90::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4E4C2501560E2861192309D285BE8271EE6EA6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:20:b4:89:33:1c:76:3f:7b:e9:39:78:bd:48:
                    6f:19:f0:e4:a0:cc:b2:5b:3d:8a:77:37:b6:0e:d6:
                    99:7c:fe:aa:7c:a5:8f:28:ac:87:50:38:7f:42:1a:
                    d0:b4:75:1c:de:c3:fe:f4:41:fa:bd:30:69:6e:f3:
                    da:49:ff:4b:db:94:7a:72:c1:9b:e7:86:39:5d:4a:
                    54:91:d2:1e:e9:4a:a8:12:5a:29:74:1b:aa:24:62:
                    fd:c2:37:cb:6b:1f:22:12:2a:b7:70:a3:ec:16:d1:
                    6c:2a:83:36:f4:d6:1e:50:8d:0e:09:9c:41:ea:f5:
                    ed:8c:04:05:e9:94:cb:6f:60:12:a7:d6:9a:0b:fb:
                    b2:c5:ec:52:09:1a:45:cd:f2:77:83:b3:86:bb:77:
                    f1:fa:1f:17:9b:81:af:18:ff:10:7d:8a:1e:1f:9d:
                    b0:83:39:3a:1d:b4:6f:25:9d:b3:a3:0c:b8:11:be:
                    f4:b2:ee:5f:dd:5a:d8:30:b8:20:2b:a3:1a:ee:1b:
                    da:3e:ab:ff:36:28:94:22:1c:02:8a:4d:24:51:4a:
                    51:b3:5a:a3:5a:02:28:76:64:4d:5b:15:b2:87:4a:
                    b8:03:03:bb:57:82:94:b1:cf:fd:dc:34:07:3b:ef:
                    5a:01:ad:f9:a9:bf:12:6c:08:a8:f4:32:fd:3b:0d:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4C:25:01:56:0E:28:61:19:23:09:D2:85:BE:82:71:EE:6E:A6:C6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TkwlAVYOKGEZIwnShb6Cce5upsY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:14:e90::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:52:df:57:19:20:35:ee:e5:fc:14:88:5c:3d:b3:8c:ee:3b:
         98:8a:f1:93:72:9a:9b:d3:cf:07:5e:b3:33:c4:1c:a6:51:d2:
         0b:94:0d:78:a8:fc:bf:99:fe:a1:f5:ee:d0:bd:eb:fe:db:ae:
         df:b0:20:b8:a2:ac:a2:23:a8:5c:0c:02:78:d7:b5:99:ad:53:
         d8:d7:0f:51:b1:f5:4f:fb:23:0e:df:a9:91:1b:ad:3a:9f:b3:
         be:62:35:83:32:29:a5:e1:48:a4:26:c7:2d:0a:61:5a:bd:dd:
         7a:82:b6:4f:77:54:e6:90:60:4d:f9:62:4e:b6:87:59:cc:ed:
         00:aa:b9:09:51:ed:2c:70:bc:96:22:04:a0:6c:f4:e2:35:74:
         c7:7b:0b:46:8c:75:e5:a2:b3:e3:8e:11:87:05:a2:cd:9d:66:
         8d:3c:d9:a6:ae:45:e3:af:34:d2:25:cc:82:c1:a0:bc:39:93:
         b7:de:a0:f8:7c:bf:25:52:9a:68:e6:6d:eb:ba:28:56:77:5c:
         0e:e8:d2:5a:80:25:60:00:d9:04:17:c7:cc:c0:9a:83:af:bd:
         e5:10:81:a8:22:fd:43:ba:80:cc:6e:00:71:a4:67:63:fb:9c:
         50:48:6d:d0:9a:37:dc:7c:29:66:25:37:6c:81:57:56:d0:ce:
         d6:10:27:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org