Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ve_-5YZO-p-mTckQkR7HYM1EOgY.roa
File:                     ve_-5YZO-p-mTckQkR7HYM1EOgY.roa (raw, json)
Hash identifier:          DZWlUbZ1xgwDfturUwamOpg1kok0HOOZV9xak9hE+jQ=
Subject key identifier:   BD:EF:FE:E5:86:4E:FA:9F:A6:4D:C9:10:91:1E:C7:60:CD:44:3A:06
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0205
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ve_-5YZO-p-mTckQkR7HYM1EOgY.roa
Signing time:             Tue 30 May 2023 17:40:24 +0000
ROA not before:           Tue 30 May 2023 17:40:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=BDEFFEE5864EFA9FA64DC910911EC760CD443A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:f8:b5:38:a5:7d:db:91:4a:39:f2:80:ca:
                    1a:e4:ee:c7:2b:44:01:f2:20:f4:e1:09:5b:ce:4a:
                    7f:d3:5f:05:aa:bc:51:d1:e9:e5:70:ab:be:53:aa:
                    c9:92:bc:38:5c:9a:91:a7:a1:02:2e:76:06:da:e8:
                    34:81:ac:d9:18:06:8b:ad:d9:d2:1e:bc:b7:67:50:
                    97:8e:e4:1c:ac:e2:75:9a:1f:65:53:50:c1:f2:08:
                    e8:dd:4f:6e:b2:4c:92:ca:bb:fa:f4:f2:87:ee:23:
                    33:50:cd:04:37:b8:2c:e6:84:24:3d:62:c1:3e:fe:
                    1c:fe:fe:38:64:c9:c3:1f:bf:f3:ca:f7:7a:48:f1:
                    db:0d:06:99:0a:8a:b4:2f:4c:54:c7:3f:89:eb:54:
                    8d:fc:f3:52:13:ea:a4:3e:dc:8e:7b:e2:3c:02:4b:
                    4e:77:ee:99:18:0c:e2:83:db:fc:ba:5e:14:f3:2d:
                    36:d7:9c:90:e9:d7:b9:c4:96:f5:3a:33:85:b5:14:
                    2f:d4:98:00:9e:b9:51:55:38:c4:0f:19:fd:1d:f9:
                    7e:ec:65:52:fd:c9:76:cf:0b:60:08:98:27:63:e3:
                    7f:69:98:19:98:88:11:3e:a4:b7:43:eb:cb:07:d5:
                    0f:18:81:6e:77:a6:57:a0:43:0e:d3:9b:96:33:fc:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EF:FE:E5:86:4E:FA:9F:A6:4D:C9:10:91:1E:C7:60:CD:44:3A:06
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ve_-5YZO-p-mTckQkR7HYM1EOgY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:10:d4:bd:6d:80:02:e1:01:0e:42:13:af:29:5d:12:ef:dc:
         e9:97:54:31:88:13:82:61:aa:c6:b4:ce:e2:57:b8:d9:b1:48:
         74:9e:67:e7:fb:fb:f8:90:a1:f3:9c:e8:16:dd:4d:6b:e9:b0:
         34:6a:dc:47:a8:8f:e7:64:6f:14:f6:49:59:a8:d1:6f:d7:2e:
         09:06:2c:7c:dd:fe:a4:c6:ec:a7:ac:56:fa:07:68:3b:4d:d1:
         2b:7c:19:cf:94:fa:aa:2e:52:a4:2d:20:58:ae:89:a9:79:1d:
         44:79:d3:6c:1d:a2:5c:20:69:19:e4:c7:ea:c1:69:a6:f5:93:
         68:0a:4b:6e:40:0a:9b:87:d7:d3:df:9a:5c:f0:e0:08:bd:1d:
         1f:20:b1:55:00:83:2e:6f:b1:a1:2c:86:ae:a2:84:44:c5:b6:
         50:88:a1:ac:19:c1:ed:56:9f:43:06:dc:80:f4:d1:a3:05:94:
         a2:cb:99:ac:b1:f3:80:6d:4d:1f:33:ca:d3:e8:32:e4:42:8b:
         8d:f0:76:86:e5:8c:42:75:9b:b4:ab:91:b4:ff:b6:13:eb:b6:
         19:1c:27:6d:ca:c1:7d:cb:07:08:bf:c8:08:7f:9f:42:78:27:
         04:ca:b7:37:93:d4:db:bb:1f:f6:76:d6:f2:36:2d:73:0e:91:
         e8:cb:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org