Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30279/3t8pdS0e217_xn7SqieLUTHsCT0.roa
File:                     3t8pdS0e217_xn7SqieLUTHsCT0.roa (raw, json)
Hash identifier:          PikqBuN13De4LWm86HjfvI1Oj4BUqfWDS8PVQhFsxYY=
Subject key identifier:   DE:DF:29:75:2D:1E:DB:5E:FF:C6:7E:D2:AA:27:8B:51:31:EC:09:3D
Certificate issuer:       /CN=1666AC184C9FEE6089751DCC75BD39FD6A652AEE
Certificate serial:       2A
Authority key identifier: 16:66:AC:18:4C:9F:EE:60:89:75:1D:CC:75:BD:39:FD:6A:65:2A:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FmasGEyf7mCJdR3Mdb05_WplKu4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/3t8pdS0e217_xn7SqieLUTHsCT0.roa
Signing time:             Sun 01 May 2022 01:30:27 +0000
ROA not before:           Sun 01 May 2022 01:30:27 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     59105
IP address blocks:        2403:bd80::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1666AC184C9FEE6089751DCC75BD39FD6A652AEE
        Validity
            Not Before: May  1 01:30:27 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=DEDF29752D1EDB5EFFC67ED2AA278B5131EC093D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:66:b3:cc:03:a9:28:23:43:71:7c:a1:44:
                    86:36:e8:18:ca:43:03:64:a5:c8:43:33:71:8c:88:
                    60:08:c1:f5:30:51:bf:e5:c2:1c:19:4a:24:f2:c7:
                    d3:ff:ee:c8:c1:48:07:76:8f:52:9f:c6:2a:c4:04:
                    66:49:0d:7b:c7:41:47:85:57:09:2f:92:41:c0:22:
                    51:29:c3:4e:97:18:d9:72:cd:46:2a:9d:a3:cb:9f:
                    f5:53:29:83:cd:b3:53:f6:02:25:90:91:dd:71:4e:
                    9f:8c:a9:2a:90:b1:9f:98:4f:80:2a:e6:a6:37:e3:
                    31:85:a4:4d:df:04:d8:70:7d:3e:41:e6:31:2b:8d:
                    2e:8d:30:b5:96:cc:04:df:69:89:2f:05:eb:92:a3:
                    ba:3c:ba:9a:69:9b:40:d2:49:5a:b8:78:f2:3a:36:
                    b3:c9:38:95:28:b9:b9:96:7a:74:42:50:61:e3:28:
                    c7:30:ad:7b:a4:28:dd:31:dd:0a:ee:52:d4:8f:20:
                    07:29:5f:43:f5:8c:cb:cb:17:f3:dc:af:8f:ed:1c:
                    4d:b2:ec:05:19:2e:53:e5:4d:2a:ea:00:de:3a:ae:
                    ff:07:2b:79:6c:37:fa:83:91:1a:82:05:f6:48:74:
                    1f:a2:84:64:73:ab:c4:b5:43:0a:d7:d2:35:80:79:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DF:29:75:2D:1E:DB:5E:FF:C6:7E:D2:AA:27:8B:51:31:EC:09:3D
            X509v3 Authority Key Identifier:
                keyid:16:66:AC:18:4C:9F:EE:60:89:75:1D:CC:75:BD:39:FD:6A:65:2A:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/FmasGEyf7mCJdR3Mdb05_WplKu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FmasGEyf7mCJdR3Mdb05_WplKu4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/3t8pdS0e217_xn7SqieLUTHsCT0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:bd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:62:e4:ab:ed:f8:33:d5:a3:93:d3:a0:0e:37:76:96:5a:f1:
         84:8b:e3:01:fc:f7:e8:33:74:2f:39:f6:c6:94:ca:a0:67:81:
         b1:6d:8b:c2:f7:22:d5:d7:18:c6:fe:87:99:e5:60:5f:c3:ff:
         8b:e6:46:7c:b8:e1:08:37:15:40:90:2e:13:1e:08:f8:18:11:
         7c:8f:c4:f1:db:7f:d2:d5:73:56:53:5e:70:02:13:60:81:2b:
         c4:82:96:38:d1:fa:27:a3:f8:ba:76:ce:f6:dc:0a:5a:82:fb:
         21:98:34:af:8f:9c:76:ba:05:f7:d9:37:11:68:a9:ff:6a:c9:
         23:d4:01:c4:78:3a:05:67:80:df:07:40:eb:69:4c:8c:e7:63:
         c0:06:b8:c6:42:e8:ca:b7:97:fe:9d:39:a5:5e:c0:e0:46:66:
         98:22:dd:bb:ae:79:db:cd:40:8c:99:0b:64:37:82:da:47:17:
         32:da:80:a5:14:e1:9f:68:9b:5e:e5:00:79:a1:eb:c4:77:df:
         25:b7:88:22:1d:0a:84:1f:53:5d:d1:32:2b:9e:c2:b6:37:34:
         ed:60:1d:9b:3a:08:d4:1a:f6:72:36:1e:47:1e:07:a4:56:35:
         59:f2:d9:4e:9c:43:ea:93:f0:e3:c8:15:61:53:00:74:da:61:
         48:d4:d1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org