Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pLuek--zh5NLAk3KpUM3Zf5DpTg.roa
File:                     pLuek--zh5NLAk3KpUM3Zf5DpTg.roa (raw, json)
Hash identifier:          JKAHL9SHHe03DtdV0JIUYEXRn2ZiXRtqQb+h08XeFxc=
Subject key identifier:   A4:BB:9E:93:EF:B3:87:93:4B:02:4D:CA:A5:43:37:65:FE:43:A5:38
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       55
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pLuek--zh5NLAk3KpUM3Zf5DpTg.roa
Signing time:             Tue 30 May 2023 16:04:22 +0000
ROA not before:           Tue 30 May 2023 16:04:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A4BB9E93EFB387934B024DCAA5433765FE43A538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:ce:82:40:b0:41:f9:ff:a7:95:69:cb:24:
                    ef:68:21:c7:25:e4:6d:00:cf:e8:a4:57:78:a6:ec:
                    ef:8b:e0:c3:56:4b:a9:9a:7a:03:8c:c9:ca:e8:5d:
                    a0:0d:52:e8:25:08:76:13:46:89:eb:22:cb:e4:0b:
                    98:a7:3f:2d:d4:e6:08:8d:e3:55:90:67:81:06:55:
                    6a:4f:62:3c:9f:92:b7:0d:ba:64:13:63:2a:74:74:
                    56:bb:bb:71:24:ce:b7:ce:8d:06:2b:2f:de:40:79:
                    66:f2:a5:26:71:fa:4a:78:dc:cf:70:cb:e6:36:17:
                    b0:bb:d8:eb:3a:26:53:56:77:7c:92:c2:79:4e:35:
                    6e:af:98:60:95:e8:5d:c4:65:83:c3:6c:b8:85:13:
                    96:55:94:e9:0d:17:b7:f8:90:ab:e1:18:fc:b4:40:
                    d5:9d:59:d7:63:99:e6:04:34:f8:c5:14:51:e3:c0:
                    1f:91:5d:b8:86:6a:72:a1:70:65:47:2e:55:0c:cc:
                    7a:16:af:c9:fa:cb:9a:39:1f:fd:82:4a:25:ad:dc:
                    f9:0a:af:29:e5:4d:94:3e:d4:68:c6:fb:4e:51:7c:
                    b3:82:a7:59:7a:7a:ff:b3:a1:bb:ce:be:54:42:2f:
                    ea:ed:05:9c:51:db:39:5d:0c:6f:73:79:09:69:4f:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BB:9E:93:EF:B3:87:93:4B:02:4D:CA:A5:43:37:65:FE:43:A5:38
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pLuek--zh5NLAk3KpUM3Zf5DpTg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c700::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:d7:a4:3b:55:cc:5e:09:c2:f6:c8:64:3e:dc:65:21:3e:25:
         a0:b4:07:ef:dd:92:6b:c4:eb:2d:51:8d:24:31:31:0b:4a:91:
         80:b6:af:be:17:5d:a0:b4:b5:dc:cd:e9:00:fa:f9:ba:55:2f:
         ae:bb:b5:22:ea:a0:fe:91:8e:25:26:3d:82:fa:38:8a:fc:ec:
         e3:f2:a7:64:c8:6f:80:b7:9f:24:1e:1c:69:11:1b:bc:92:7f:
         e2:39:05:44:d7:10:90:fd:d8:9f:46:4e:70:bc:0d:8f:c4:00:
         7a:28:28:00:ba:4a:47:5b:95:33:e8:85:67:16:17:b5:47:84:
         fa:b5:a1:cd:46:d0:5f:a6:f1:9f:66:a9:d1:ab:d0:eb:63:1d:
         9a:77:0f:5d:b1:9c:47:0b:27:07:a1:8c:c5:2e:24:12:44:92:
         79:f4:1c:6a:47:45:cb:ab:ef:9f:ff:08:d2:7b:18:91:26:f5:
         8b:57:71:01:1f:00:e6:4a:40:64:50:ea:d6:50:a1:ba:b9:48:
         3d:58:8a:7a:2a:2b:51:03:ff:ce:df:85:c6:c2:bb:33:04:7f:
         79:f0:c9:7e:48:70:ec:1c:f1:9b:51:42:da:8e:24:f7:c4:57:
         d7:51:01:f6:d5:53:8f:00:2a:b2:71:e6:eb:d1:1f:cb:fc:e7:
         b3:a1:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org