Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UQcr2sPY0sFOWnStDDv3mBmhzCs.roa
File:                     UQcr2sPY0sFOWnStDDv3mBmhzCs.roa (raw, json)
Hash identifier:          KzBLjm8Y+TrCc5ROiuZ6/p175NkHD1z9YKtuWARTbmI=
Subject key identifier:   51:07:2B:DA:C3:D8:D2:C1:4E:5A:74:AD:0C:3B:F7:98:19:A1:CC:2B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0148
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UQcr2sPY0sFOWnStDDv3mBmhzCs.roa
Signing time:             Tue 30 May 2023 17:32:23 +0000
ROA not before:           Tue 30 May 2023 17:32:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4b00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=51072BDAC3D8D2C14E5A74AD0C3BF79819A1CC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:0a:98:60:01:2a:53:5e:16:fc:8a:58:15:
                    86:71:f9:b4:55:01:18:4d:a5:b3:72:08:6b:66:5e:
                    6d:f7:f0:c4:eb:d3:a0:f8:16:db:57:6f:f0:fe:98:
                    a6:06:39:81:89:ed:be:e9:19:78:26:b8:28:f0:24:
                    12:46:b3:5b:96:0b:5b:43:f5:b2:9b:35:5e:7f:fe:
                    70:1f:c3:fb:8a:50:07:7f:db:ce:e8:06:21:81:43:
                    2f:ff:fb:13:cf:6c:7e:d6:6d:6c:60:f3:ba:74:55:
                    ab:9e:95:4b:91:f5:be:c5:b5:24:19:48:fd:46:0e:
                    53:f6:a2:91:3a:61:83:e2:a1:ac:ce:bb:69:d5:16:
                    8d:c7:ad:e8:be:de:89:74:e0:2a:bf:a8:0d:37:a7:
                    d8:87:21:13:f6:0b:af:56:9e:6f:bb:de:3f:fc:32:
                    2b:a2:5b:1a:90:6f:5c:f2:45:78:64:cf:b7:1b:7c:
                    90:a2:1e:5a:76:34:1a:e5:3d:df:5f:b7:8b:61:b6:
                    f2:67:5a:0d:2c:de:6f:44:8e:2a:a9:e6:50:5d:f9:
                    56:b3:7f:d7:b6:c2:6c:67:b3:ce:b1:35:1e:36:65:
                    7f:b8:6e:ec:12:ef:81:5e:39:18:41:3e:51:fa:f8:
                    bc:29:21:95:1b:6c:d9:44:58:b3:1a:47:d6:ba:9b:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:07:2B:DA:C3:D8:D2:C1:4E:5A:74:AD:0C:3B:F7:98:19:A1:CC:2B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UQcr2sPY0sFOWnStDDv3mBmhzCs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:3e:03:00:e5:2d:89:7c:09:a9:ea:09:87:dd:a0:91:6a:3c:
         99:6c:a0:85:bc:dd:f3:91:df:ac:47:5e:ff:16:fb:9f:99:e8:
         5d:67:ed:0c:eb:e1:55:65:82:91:05:1b:45:df:06:61:32:7f:
         a9:7c:0d:eb:18:02:e5:db:65:ff:a9:fe:e8:9b:bd:3d:6c:bd:
         02:d1:9f:e0:dc:09:76:86:1c:25:5b:94:51:a3:b1:8c:8c:d1:
         6f:0a:b2:00:88:57:87:15:81:78:b0:a6:7e:25:93:5f:2b:d2:
         0d:af:ce:0b:ee:1a:a0:fc:7a:1c:24:ad:09:4e:42:54:ed:8a:
         09:19:7c:44:62:bb:fa:d1:ee:8d:a5:5d:ad:44:2a:13:94:ea:
         6e:de:a1:85:e1:d9:8d:a8:b4:c6:f2:25:70:f2:6c:6c:a0:ff:
         c4:f8:4c:6c:f1:94:ef:ba:1b:19:2a:d8:9d:da:1f:24:8c:bc:
         d2:9d:b3:52:e4:71:c2:70:af:71:4c:7d:38:ca:8e:4f:ea:c7:
         0a:70:25:f1:44:a0:13:58:fc:e6:cf:0e:d9:36:e4:f2:a7:6f:
         25:e5:6b:f0:62:fa:d7:e9:24:9d:bd:1a:e4:cf:42:e6:a2:a7:
         bd:17:cd:3f:4c:c6:39:1c:9e:8a:e3:a3:bf:64:4c:f1:7b:e3:
         7d:7a:42:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org