Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30156/gFLl0YSaNqjq8EouQ2eSHcalq0w.roa
File:                     gFLl0YSaNqjq8EouQ2eSHcalq0w.roa (raw, json)
Hash identifier:          jcqT2LU3egYcTiwShEA4tVs9JQLWakJ45tv4OnltDzE=
Subject key identifier:   80:52:E5:D1:84:9A:36:A8:EA:F0:4A:2E:43:67:92:1D:C6:A5:AB:4C
Certificate issuer:       /CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Certificate serial:       1F
Authority key identifier: 66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/gFLl0YSaNqjq8EouQ2eSHcalq0w.roa
Signing time:             Tue 25 May 2021 02:42:07 +0000
ROA not before:           Tue 25 May 2021 02:42:07 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     55392
IP address blocks:        2404:8e01::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
        Validity
            Not Before: May 25 02:42:07 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=8052E5D1849A36A8EAF04A2E4367921DC6A5AB4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:8c:8d:5e:15:b8:e8:fe:c4:8e:63:51:73:
                    90:47:b5:5e:7e:63:cf:cf:d2:97:b2:08:ba:98:b8:
                    42:70:8c:02:e1:12:c3:33:42:f5:b9:a4:ea:0d:04:
                    99:b9:70:40:56:24:1e:75:df:4d:08:ce:59:8a:fe:
                    8d:f4:65:99:85:90:a2:fa:2f:41:d3:87:b9:2f:c9:
                    07:ef:ce:52:c7:4b:fa:62:cb:c1:e8:eb:36:85:29:
                    51:a1:45:20:fe:b1:fd:71:bb:78:ad:31:16:41:e6:
                    a5:4f:53:af:e0:54:ef:c6:b1:37:da:2f:10:19:ba:
                    95:84:7e:fd:47:f9:22:e9:e7:da:3c:96:6c:25:c7:
                    f0:5e:bb:56:17:16:cb:19:3a:93:e7:86:83:65:d1:
                    ee:98:e9:b3:4e:25:d6:7b:d2:c1:e6:ea:93:94:51:
                    4b:d8:f1:92:cc:da:66:1e:65:eb:aa:0d:26:64:07:
                    4b:99:5b:47:db:ab:6a:3f:96:c6:41:a3:11:f1:b6:
                    17:8a:aa:61:17:9c:f3:ca:d7:ef:75:42:bb:c4:e5:
                    5b:b6:11:49:f0:c7:a5:48:94:e1:41:b5:80:9c:18:
                    32:af:20:04:b6:3b:7f:11:43:5e:11:93:15:01:a3:
                    4b:58:3d:1f:9a:32:e0:2d:06:21:b6:31:fe:76:95:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:52:E5:D1:84:9A:36:A8:EA:F0:4A:2E:43:67:92:1D:C6:A5:AB:4C
            X509v3 Authority Key Identifier:
                keyid:66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/gFLl0YSaNqjq8EouQ2eSHcalq0w.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8e01::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:29:0f:8a:cb:2d:59:75:4a:bf:1d:d6:f3:87:f4:cd:83:c3:
         56:bd:26:d1:21:b2:88:40:aa:08:37:c9:c1:c7:28:93:fb:b2:
         30:cc:d8:14:49:27:09:cc:6f:6b:c1:70:96:2d:b3:d2:3e:8e:
         61:01:19:cc:36:78:00:db:14:07:0f:9f:a1:d1:b0:7d:a3:b2:
         7e:d2:af:d7:53:6d:b0:ab:99:d1:a2:c4:90:00:dc:c1:84:4c:
         19:82:4d:c0:f7:03:66:22:b8:fd:ac:b0:01:39:44:ad:99:65:
         1f:f8:19:6d:d7:6c:32:db:72:9d:d6:03:81:b5:57:73:63:49:
         cd:c9:f5:48:5f:7b:8a:40:76:7a:42:f3:0c:88:c8:95:e6:fa:
         c1:8a:8b:6f:2a:ec:dd:94:ca:7c:cf:48:ea:38:b5:ef:81:c2:
         c4:a4:00:b3:8e:e3:9e:8d:87:c1:85:4f:f8:33:45:24:c9:34:
         2c:52:c6:a3:51:4a:e7:0f:80:93:a5:74:84:89:15:49:95:34:
         d5:c0:6a:fa:bf:23:d9:28:26:04:ab:68:cc:ae:05:06:d6:a7:
         b4:93:a3:be:fa:ad:cd:71:e2:af:13:6b:09:dc:4c:74:be:e5:
         15:1d:79:61:25:6e:2a:d8:47:cd:f8:a4:63:82:0e:76:f5:d9:
         83:5e:3f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org