Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Y8vzukDGtbw6K_l5vuc6KGRGtm0.roa
File:                     Y8vzukDGtbw6K_l5vuc6KGRGtm0.roa (raw, json)
Hash identifier:          o2tdBhvKTAOpChv7XAsuJ8PlTadpKZakmStDLtmqves=
Subject key identifier:   63:CB:F3:BA:40:C6:B5:BC:3A:2B:F9:79:BE:E7:3A:28:64:46:B6:6D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       9B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Y8vzukDGtbw6K_l5vuc6KGRGtm0.roa
Signing time:             Tue 30 May 2023 16:08:17 +0000
ROA not before:           Tue 30 May 2023 16:08:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=63CBF3BA40C6B5BC3A2BF979BEE73A286446B66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2c:f1:f2:e1:a9:50:47:94:35:f2:6d:2c:f0:
                    90:d5:a0:4b:d3:7d:3b:43:51:df:47:9c:76:ef:e3:
                    88:56:a8:8a:b2:74:dc:61:87:da:d5:f1:25:db:1a:
                    5e:63:51:19:96:aa:4b:16:7f:57:ea:41:fb:5c:51:
                    4f:3f:e0:cb:63:9b:29:f9:36:aa:a1:6a:2f:0d:0a:
                    85:cb:cd:94:31:82:34:84:7d:23:91:26:d2:f1:0c:
                    89:8e:f3:7c:65:bb:cd:55:ee:05:45:a7:9d:81:45:
                    39:31:fb:06:8e:44:42:c9:91:e6:be:d2:e0:e2:16:
                    fa:88:a7:27:72:30:43:fb:fe:bd:c5:60:b6:b6:65:
                    be:3f:b3:73:50:f1:b4:c0:39:e8:d7:24:2f:cb:19:
                    27:f7:1b:21:e8:fa:38:5c:05:fe:68:3b:47:50:c9:
                    94:de:63:ed:71:eb:df:a9:6d:92:ec:f8:da:c1:94:
                    74:1d:b5:25:f0:08:8a:62:37:a5:a2:ea:09:83:78:
                    49:b3:85:f3:3f:b3:21:f2:68:b3:bd:ec:ff:b6:89:
                    a6:7d:da:10:08:2c:e9:88:7c:7c:42:75:5a:48:4d:
                    dc:fa:7a:6d:a7:24:6d:04:16:18:a6:4b:b2:3e:fc:
                    41:3c:6c:12:6c:f8:91:51:e7:2a:21:af:39:15:68:
                    eb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CB:F3:BA:40:C6:B5:BC:3A:2B:F9:79:BE:E7:3A:28:64:46:B6:6D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Y8vzukDGtbw6K_l5vuc6KGRGtm0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a800::/40

    Signature Algorithm: sha256WithRSAEncryption
         c6:d4:95:68:96:6b:39:cd:5f:3a:19:20:1e:1c:7f:89:23:1c:
         98:ac:90:c9:d2:f7:e4:74:fa:2e:51:53:a9:a5:52:96:52:a7:
         c1:75:ce:6a:d8:c8:a0:36:11:0b:d1:c0:a4:2b:f8:26:ad:4d:
         e0:c3:37:aa:02:f3:a3:e8:5f:4b:88:e6:b6:fd:0e:e3:b7:e5:
         a2:a5:86:67:b9:db:03:12:c5:67:95:8f:ee:5a:3d:bd:39:0c:
         6b:85:29:33:fb:47:86:12:69:98:0f:22:66:34:87:ba:76:e1:
         d5:74:f8:77:74:24:31:21:32:6d:cf:49:6e:a8:5e:4d:6b:77:
         ce:9f:f8:c8:7d:e9:53:77:9b:47:8e:35:8e:3c:00:fb:dc:20:
         84:d9:35:b0:1e:95:2d:2d:da:95:85:8a:3b:9c:82:36:af:14:
         47:98:ea:32:66:9c:44:5b:81:e5:21:04:0b:e4:02:39:e4:84:
         29:43:5a:22:c7:b6:20:e2:d4:68:05:74:fd:96:69:b9:2b:fb:
         2e:68:05:7a:c7:2c:f7:c6:14:5a:27:51:ae:80:28:9a:bb:23:
         c3:9f:51:b4:07:07:a4:1c:10:37:87:42:5e:4a:6f:ae:62:07:
         f1:5a:11:ad:0b:5e:6d:36:17:80:f9:25:c7:84:9c:fb:83:7e:
         58:14:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org