Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30156/iLzsmHI_6JJuLNLTEdQesHZvITQ.roa
File:                     iLzsmHI_6JJuLNLTEdQesHZvITQ.roa (raw, json)
Hash identifier:          zDXAclo1gQ86jrjKzEqaDuYq/yBfto0c/iFxtXLMi44=
Subject key identifier:   88:BC:EC:98:72:3F:E8:92:6E:2C:D2:D3:11:D4:1E:B0:76:6F:21:34
Certificate issuer:       /CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Certificate serial:       31
Authority key identifier: 66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/iLzsmHI_6JJuLNLTEdQesHZvITQ.roa
Signing time:             Sun 01 May 2022 01:29:59 +0000
ROA not before:           Sun 01 May 2022 01:29:59 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     55392
IP address blocks:        2409:250::/28 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
        Validity
            Not Before: May  1 01:29:59 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=88BCEC98723FE8926E2CD2D311D41EB0766F2134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:e1:e4:7a:20:3b:78:ab:80:be:12:b5:b9:
                    80:00:a8:0a:03:50:bd:4b:52:bc:25:6c:e9:0a:3b:
                    0f:94:de:94:c9:be:5a:ab:9f:34:73:44:f9:02:56:
                    51:07:0f:1e:80:fa:5e:b8:97:f4:b6:74:ee:38:9f:
                    26:5a:c1:ca:13:95:49:ec:48:a7:2d:b5:7f:a9:dc:
                    29:26:20:f9:b0:f4:49:07:a0:5d:a1:04:3e:27:c5:
                    d7:c4:fc:e5:f1:63:e7:92:6d:b9:6e:25:07:34:9c:
                    45:01:0b:df:07:8c:08:34:e2:91:8a:3d:4c:10:43:
                    86:e7:06:25:c7:8e:9b:bc:aa:9a:23:4e:58:2d:4d:
                    bf:99:5d:46:8d:11:f1:f5:66:9d:3d:a3:c0:57:98:
                    ae:f9:95:1e:84:f2:a2:0d:06:4a:5a:e3:f8:7f:2f:
                    d2:fd:82:62:08:2e:e9:3b:64:7b:c8:d6:96:42:41:
                    1f:d4:7d:d6:86:70:9e:b8:c9:af:cb:ce:05:92:05:
                    a9:0f:1e:3a:e8:cf:8a:a8:fb:21:a7:11:c2:46:eb:
                    f7:7a:19:5b:c1:a5:4b:18:1e:37:1c:b9:5c:a3:cf:
                    74:76:6c:d0:11:c9:70:60:7c:ef:b4:5f:08:2b:96:
                    33:1a:0a:42:20:dd:b1:03:66:16:ce:ef:ae:18:9e:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BC:EC:98:72:3F:E8:92:6E:2C:D2:D3:11:D4:1E:B0:76:6F:21:34
            X509v3 Authority Key Identifier:
                keyid:66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/iLzsmHI_6JJuLNLTEdQesHZvITQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2409:250::/28

    Signature Algorithm: sha256WithRSAEncryption
         41:17:95:d1:7b:43:62:1b:dc:72:2f:5e:4a:d5:0c:c1:95:5d:
         2f:88:23:98:e6:5f:50:bb:5c:2e:6b:aa:63:3e:51:96:96:03:
         ad:15:63:fa:8b:a2:71:b1:dc:22:ec:a3:ed:ab:fc:31:0c:10:
         1c:55:9e:81:93:f5:7b:c1:e0:61:94:78:f5:d4:6e:88:da:dc:
         cb:9c:5c:23:bd:dc:75:5e:65:39:76:d0:23:96:20:da:ed:fc:
         82:22:20:9c:7b:b0:9c:2c:30:77:6b:fd:2b:4f:ff:bd:3c:a8:
         ce:34:6c:27:01:16:d3:3c:c8:f9:e3:67:03:9e:b4:e3:f4:df:
         5b:ae:3c:bc:16:b8:58:f2:e8:dd:93:b3:42:be:c2:30:71:03:
         95:0a:aa:94:76:28:87:dc:07:46:37:8c:92:b8:18:d4:8c:4d:
         41:ca:79:52:9d:38:db:ab:cb:43:05:df:20:41:bd:0a:a7:44:
         d0:55:ed:bb:e7:00:d1:49:39:c7:6d:9a:6b:bd:86:71:6d:cb:
         b6:2b:97:58:e0:bf:69:81:c9:69:3b:e3:dd:4e:29:b1:bb:bc:
         30:e2:ad:f9:16:64:70:5e:4b:59:de:c9:f0:c4:e4:7f:37:30:
         98:18:2a:93:91:f4:ac:25:3a:b1:45:e0:73:cd:c7:7f:74:81:
         1b:cf:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org