Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WvFN1_FBWPu4Up1OveLP6Fg0xIc.roa
File:                     WvFN1_FBWPu4Up1OveLP6Fg0xIc.roa (raw, json)
Hash identifier:          gSt+8ICGZqVZf+xNR4hjaZ++VucbwmrBT68YtNHuszw=
Subject key identifier:   5A:F1:4D:D7:F1:41:58:FB:B8:52:9D:4E:BD:E2:CF:E8:58:34:C4:87
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0252
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WvFN1_FBWPu4Up1OveLP6Fg0xIc.roa
Signing time:             Thu 08 Jun 2023 17:00:17 +0000
ROA not before:           Thu 08 Jun 2023 17:00:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:14:ecc::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  8 17:00:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5AF14DD7F14158FBB8529D4EBDE2CFE85834C487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:8a:14:25:61:94:ab:ba:7c:c7:2e:3f:cb:
                    12:16:5f:42:11:4c:bf:3a:40:c4:39:3b:72:7b:b4:
                    3b:6e:05:3e:70:6b:db:c3:ca:95:bf:80:6b:b9:48:
                    5f:21:e5:e0:c6:d0:f3:3c:de:c0:87:ef:9d:e3:3f:
                    29:c7:b2:09:15:b8:fe:0c:76:b4:bc:8c:92:c2:79:
                    8d:93:65:6b:76:e7:86:11:68:69:37:e7:0c:55:50:
                    12:56:96:26:ec:f4:41:76:19:af:64:88:0b:18:68:
                    95:43:63:64:66:22:44:78:84:35:3b:04:4c:66:98:
                    ed:b7:6c:81:f8:0f:4d:e9:bf:ff:a2:d0:f7:71:df:
                    74:20:47:76:3f:c1:a2:f6:f3:a5:0e:d4:21:c4:bd:
                    6c:a8:c7:de:b6:47:e4:a5:fd:33:27:76:3c:04:03:
                    f3:a5:b9:72:f3:f7:ab:03:41:74:d5:66:b6:8c:b5:
                    24:a4:6c:23:3f:a9:ed:f0:b7:86:f8:0c:0f:7d:f8:
                    3f:0c:66:5e:d5:b9:ac:c8:11:3a:87:02:82:7d:21:
                    2c:f5:2e:ef:56:00:a7:67:fc:65:be:fb:33:81:97:
                    42:de:39:73:16:fe:39:52:91:2a:43:d6:06:7a:f8:
                    fd:66:89:6d:f8:ca:3d:a3:d7:62:4b:a0:9e:a7:ad:
                    02:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F1:4D:D7:F1:41:58:FB:B8:52:9D:4E:BD:E2:CF:E8:58:34:C4:87
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WvFN1_FBWPu4Up1OveLP6Fg0xIc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:14:ecc::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:8d:1a:4d:d7:c9:a4:0d:6d:62:c0:5f:f7:2b:2b:56:1f:e5:
         18:27:c5:e6:ae:99:a5:b8:63:1e:b3:a2:a8:35:1e:16:af:8a:
         f4:d6:ac:0e:2f:f8:f1:da:fa:68:53:be:f0:83:14:d3:80:69:
         ae:a4:ae:eb:e8:e2:36:e2:40:5d:bf:df:4c:11:92:af:25:8f:
         03:5b:2f:69:a4:4d:fc:09:af:87:b6:b4:58:cc:cf:bc:5c:83:
         13:68:b3:ae:a3:b0:f3:75:7d:1a:bc:be:47:da:da:a7:26:be:
         65:cd:7c:a4:a8:e9:af:d1:b5:32:86:e4:67:7e:ba:4a:98:a6:
         af:5c:54:0d:4a:2a:70:84:15:7c:56:28:04:d5:1d:41:b0:a8:
         89:f8:3e:c4:b8:de:1a:1a:09:c9:b9:dc:68:f3:73:81:34:41:
         71:98:6f:fc:0d:75:45:4b:25:e9:19:7d:cf:1a:5e:a6:5b:1e:
         d7:bc:ca:04:43:14:ab:f4:c3:4e:5c:46:e2:38:99:7a:3e:c0:
         91:9f:86:b2:81:20:01:29:46:2d:79:64:82:23:df:c9:a2:bf:
         1c:1c:a0:b8:66:36:45:45:27:7b:86:3b:90:6a:db:e2:83:29:
         74:16:ae:be:30:2a:71:ad:1e:58:a2:a9:d7:5e:6f:f0:93:19:
         c6:e6:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org