Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UfElpgvDrMMlCEptsZEe0sKhwi4.roa
File:                     UfElpgvDrMMlCEptsZEe0sKhwi4.roa (raw, json)
Hash identifier:          50gc6KKk292A1CMQSVP2BtCBSb9nn60065+i7vX0UK4=
Subject key identifier:   51:F1:25:A6:0B:C3:AC:C3:25:08:4A:6D:B1:91:1E:D2:C2:A1:C2:2E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       019C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UfElpgvDrMMlCEptsZEe0sKhwi4.roa
Signing time:             Tue 30 May 2023 17:34:33 +0000
ROA not before:           Tue 30 May 2023 17:34:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=51F125A60BC3ACC325084A6DB1911ED2C2A1C22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:b6:e0:81:d4:45:83:17:37:03:19:3f:4c:
                    12:a4:68:fc:46:43:5b:2e:56:9b:2b:43:0b:a0:17:
                    e9:cc:cc:56:43:6d:72:02:d7:7a:43:2f:3b:94:1d:
                    fb:fa:f0:82:65:f9:a9:25:fc:4c:b9:69:c1:de:39:
                    b7:fd:54:ff:5a:41:66:1d:50:42:8d:a5:2e:50:71:
                    ec:2f:a1:c4:cb:f7:f6:b9:bd:90:74:f2:73:87:4a:
                    12:81:7a:ab:bc:6a:d4:b7:62:c0:80:fa:68:a2:28:
                    ad:f4:99:ea:bf:ba:dd:85:0e:4e:96:67:3a:95:83:
                    77:12:e6:cf:9b:6e:85:1f:d2:e7:0a:8d:61:4b:ca:
                    68:1f:21:7e:c6:37:14:3d:d8:09:69:43:25:ee:81:
                    ce:9b:74:be:48:0d:62:35:38:71:d4:db:22:e0:29:
                    09:9b:f4:55:e1:49:1a:74:74:a5:af:bf:c1:d1:ea:
                    c2:80:05:e7:ca:8e:b4:0a:c7:f1:0d:23:00:be:97:
                    8f:e3:30:c1:15:ee:e7:7b:ad:8f:3d:93:60:0d:56:
                    90:df:f0:fe:40:f3:3d:b9:e9:1c:ab:67:d5:b9:64:
                    87:3a:e5:c5:66:95:3d:a6:f0:1d:fc:c9:4c:37:ab:
                    53:e7:cd:66:06:55:da:33:74:db:f1:8f:23:08:ee:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F1:25:A6:0B:C3:AC:C3:25:08:4A:6D:B1:91:1E:D2:C2:A1:C2:2E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UfElpgvDrMMlCEptsZEe0sKhwi4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:f0:0a:44:3b:f3:25:8e:30:00:23:37:c2:0c:0c:30:3c:a9:
         0f:27:c8:c1:2c:f2:e1:3b:d1:b9:92:f2:99:4f:4b:20:d7:65:
         a1:ad:9d:5e:16:ba:6d:1e:f7:4f:93:f5:65:69:89:d5:82:c8:
         7c:ae:50:d3:c3:0e:ae:40:c4:00:43:7e:ca:79:f4:c8:98:e1:
         3c:be:74:82:ff:50:97:36:ca:43:b2:bc:3e:32:4b:50:88:b4:
         56:a8:e1:8f:4b:ff:11:56:9c:fa:74:96:c3:4d:14:b2:05:a2:
         23:11:c9:01:bb:71:39:3c:82:95:c2:79:d9:a8:6e:7d:50:d7:
         6a:fb:3c:83:08:eb:1e:f5:52:ee:7a:44:b3:16:e5:fd:8d:93:
         87:84:d4:17:93:5c:db:30:34:a8:5d:ab:15:69:bb:0c:ad:fb:
         74:51:15:9b:02:24:18:94:bb:ee:31:fa:da:1b:46:14:b9:d9:
         63:fd:83:7f:2b:f8:04:1f:2e:e6:02:88:95:ae:34:9f:b6:d1:
         fd:0d:74:7e:35:25:a5:ff:69:2e:e1:74:51:dd:ea:bb:56:c5:
         0d:2f:11:88:87:bb:60:2c:60:e1:94:84:75:82:06:2b:9d:99:
         da:81:18:65:17:e6:fb:7c:ed:c5:a8:18:e5:94:dc:77:e1:23:
         ca:94:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org