Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30293/EvSS-_L_2EhG7OOTOg8O3wcXPcA.roa
File:                     EvSS-_L_2EhG7OOTOg8O3wcXPcA.roa (raw, json)
Hash identifier:          11ffnh1Ug/82P37sK6oeB9dlWTyCC8raztzqcNzXsaU=
Subject key identifier:   12:F4:92:FB:F2:FF:D8:48:46:EC:E3:93:3A:0F:0E:DF:07:17:3D:C0
Certificate issuer:       /CN=4ED0E8EA7DB29EAACFBAA3F2EE80A4AE9B5F57CE
Certificate serial:       14
Authority key identifier: 4E:D0:E8:EA:7D:B2:9E:AA:CF:BA:A3:F2:EE:80:A4:AE:9B:5F:57:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TtDo6n2ynqrPuqPy7oCkrptfV84.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/EvSS-_L_2EhG7OOTOg8O3wcXPcA.roa
Signing time:             Tue 25 May 2021 02:42:25 +0000
ROA not before:           Tue 25 May 2021 02:42:25 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     38631
IP address blocks:        2400:dcc0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ED0E8EA7DB29EAACFBAA3F2EE80A4AE9B5F57CE
        Validity
            Not Before: May 25 02:42:25 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=12F492FBF2FFD84846ECE3933A0F0EDF07173DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:84:e0:d0:d4:a6:d7:00:f1:f2:c5:23:18:
                    0c:8a:27:8c:1c:93:e0:50:82:29:1c:49:fc:63:6b:
                    29:3e:c5:6e:75:50:84:a2:f8:74:f5:59:a2:5a:f5:
                    f0:09:75:85:d1:86:25:3b:31:af:15:09:90:25:d6:
                    90:27:10:39:04:5c:0c:5f:2a:a2:d9:88:5b:44:38:
                    a9:d2:a6:ed:d4:0d:12:f6:2c:a9:19:f3:a2:4d:47:
                    2a:ab:80:03:92:8e:c8:5a:80:9b:ad:46:1d:d1:86:
                    be:4b:c3:be:97:e2:2f:12:47:8c:dc:ad:a2:3f:82:
                    0d:9a:b3:2b:db:31:24:ed:1d:ea:9f:38:e8:d0:b7:
                    39:7d:9c:5d:9f:4e:e7:2b:99:a9:6f:27:28:a7:e9:
                    4b:86:da:40:97:4e:80:6f:d5:db:73:a0:3c:b8:2f:
                    7a:3c:de:0e:be:d0:3d:21:f0:7d:31:87:8a:f4:9b:
                    a1:de:fe:c5:5b:d6:5b:a3:59:11:37:58:6f:e4:e0:
                    67:6f:04:aa:c2:12:c0:e2:47:0c:be:68:4a:c6:9c:
                    27:d8:07:20:d9:d8:4f:c7:79:7a:37:25:ff:fd:25:
                    fb:03:3e:fc:ef:56:c0:56:7f:9a:f3:a1:fb:1c:cc:
                    35:42:0a:50:a6:37:99:44:3a:0a:35:1f:eb:55:ed:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F4:92:FB:F2:FF:D8:48:46:EC:E3:93:3A:0F:0E:DF:07:17:3D:C0
            X509v3 Authority Key Identifier:
                keyid:4E:D0:E8:EA:7D:B2:9E:AA:CF:BA:A3:F2:EE:80:A4:AE:9B:5F:57:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TtDo6n2ynqrPuqPy7oCkrptfV84.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/EvSS-_L_2EhG7OOTOg8O3wcXPcA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:dcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:41:f6:7d:f4:62:32:b7:4f:ca:20:e7:d8:f3:aa:da:86:7c:
         83:2a:c4:ad:20:a1:3b:66:a7:4c:26:82:c3:7d:e7:58:0a:e8:
         a2:7b:c3:31:5d:d5:eb:5b:88:ce:4f:30:a6:f5:6d:5a:74:7e:
         4a:2f:d5:6c:a2:f2:67:02:f6:a2:9f:79:ae:93:05:40:f6:58:
         f7:1f:f2:0b:bf:09:3a:ea:f1:0d:9c:6c:0d:36:2f:f0:45:eb:
         a4:dc:bb:1f:ea:ba:c5:9a:dc:83:ab:c9:0f:ac:1a:c9:23:06:
         8b:d6:92:7a:76:05:40:4b:02:3e:ec:a3:69:9a:9e:66:6c:02:
         79:35:ac:fc:c0:97:c3:f2:73:29:1e:34:d0:91:d9:6a:7f:0c:
         e2:73:43:ff:1f:96:a5:47:1c:c6:16:ee:e5:1e:f6:08:3a:d8:
         25:8b:02:ca:58:5a:62:69:1d:5a:fb:73:b3:2d:a8:25:a3:05:
         7f:8e:ea:cf:95:18:af:59:99:cb:eb:4c:06:66:20:4e:2b:08:
         34:08:29:03:9b:06:20:c7:c8:03:f3:cb:ff:91:b7:fe:84:8a:
         49:f2:b3:7f:be:3a:cb:e8:5c:36:43:e4:a9:5c:fb:87:ab:06:
         d3:43:59:08:50:23:64:30:ea:8b:1a:da:95:15:e6:79:3e:6e:
         bf:97:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org