Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30359/WvdUY7WKeEnqEwyBvxe-vwL6YJ8.roa
File:                     WvdUY7WKeEnqEwyBvxe-vwL6YJ8.roa (raw, json)
Hash identifier:          Oq3547WA+R38JF9/iNPmF4EXzZtqbkfsUmAoeNvPfrY=
Subject key identifier:   5A:F7:54:63:B5:8A:78:49:EA:13:0C:81:BF:17:BE:BF:02:FA:60:9F
Certificate issuer:       /CN=675815DB7349C2ACFBC48AA75306520050C26248
Certificate serial:       10
Authority key identifier: 67:58:15:DB:73:49:C2:AC:FB:C4:8A:A7:53:06:52:00:50:C2:62:48
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/WvdUY7WKeEnqEwyBvxe-vwL6YJ8.roa
Signing time:             Sat 02 Oct 2021 08:41:55 +0000
ROA not before:           Sat 02 Oct 2021 08:41:55 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     55898
IP address blocks:        2405:8500::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=675815DB7349C2ACFBC48AA75306520050C26248
        Validity
            Not Before: Oct  2 08:41:55 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=5AF75463B58A7849EA130C81BF17BEBF02FA609F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:70:a4:cb:02:49:43:63:49:80:19:79:f5:94:
                    f8:00:98:bf:28:3b:60:3a:fd:5f:9f:32:f1:15:19:
                    c9:68:ae:6f:71:83:a0:64:bb:8d:27:27:13:33:66:
                    df:c4:ee:f8:e0:dd:75:d7:50:d9:c6:63:55:45:53:
                    ae:55:be:19:28:12:cb:a2:ab:11:e3:e6:64:9c:c0:
                    38:50:dc:67:cc:65:77:72:e2:8c:11:e2:ab:99:6f:
                    f3:8d:f1:54:61:be:dc:82:94:4d:cd:dc:67:89:e9:
                    1e:89:88:9f:d6:37:80:7f:2c:68:b6:61:40:25:d9:
                    51:2f:e3:c0:d1:2a:cd:6e:7f:88:4d:cf:ed:85:03:
                    97:fb:fe:0d:7b:24:1f:43:1c:d2:db:c3:11:7a:9a:
                    03:ba:77:aa:37:3c:30:d3:85:56:ad:10:c6:18:80:
                    46:0d:7a:c2:e2:11:d2:30:49:63:4e:3f:57:0f:a9:
                    57:7f:1d:68:dc:34:0e:c0:2a:33:c8:33:bb:41:66:
                    8a:0e:eb:36:a3:c6:ac:6d:56:8c:74:5c:ef:88:1b:
                    c2:8b:82:ca:ad:fb:6e:eb:42:e9:ce:c0:eb:ec:14:
                    50:a8:7c:a3:6c:70:d4:48:0e:b2:06:3b:6b:bd:fc:
                    66:31:6d:c4:37:31:c6:73:cf:72:b9:ed:95:02:3e:
                    bb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F7:54:63:B5:8A:78:49:EA:13:0C:81:BF:17:BE:BF:02:FA:60:9F
            X509v3 Authority Key Identifier:
                keyid:67:58:15:DB:73:49:C2:AC:FB:C4:8A:A7:53:06:52:00:50:C2:62:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/WvdUY7WKeEnqEwyBvxe-vwL6YJ8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8500::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:62:47:79:9e:39:0c:c0:da:4e:6a:85:ba:df:03:b2:76:11:
         ae:a6:b9:7e:8d:52:85:51:f8:28:d2:c1:aa:e9:dc:c3:90:12:
         29:c5:66:ef:51:ca:62:7a:c1:a7:65:d0:d8:12:c4:7b:af:f5:
         dd:af:03:02:87:0a:67:c1:be:36:44:47:29:3d:d1:d8:4a:e3:
         a9:8e:d7:e7:bd:3f:af:99:8f:be:6d:14:d1:4e:f0:b2:0a:ac:
         ea:4f:28:b6:a4:9e:33:e9:52:10:b4:f9:e2:ec:8b:ac:78:af:
         40:a0:24:88:42:c4:52:98:d5:20:df:17:5b:d2:5d:90:79:73:
         2c:40:41:fd:36:70:d4:a6:92:f5:50:44:f3:6d:59:32:f7:62:
         ce:9d:c1:2e:24:e7:0b:7c:e3:42:de:91:a3:9b:66:31:28:75:
         3c:0f:8a:47:ea:1a:fe:0d:ca:db:e8:6c:47:95:8d:b9:af:60:
         6b:23:d7:7e:63:79:79:3b:77:54:61:c9:13:27:46:34:b7:c1:
         e6:ab:0b:5f:38:a3:a0:4d:61:c1:e4:ef:b6:83:ae:79:da:5d:
         0d:57:ec:68:3c:c6:dd:a5:0f:d5:3f:32:a8:66:d8:9c:11:93:
         72:13:6a:ab:d3:1e:94:40:61:bb:8f:43:20:6e:e5:b7:9d:73:
         53:a7:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org