Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30409/4YTKLb-uoF-XS1UW_BNslrCxg44.roa
File:                     4YTKLb-uoF-XS1UW_BNslrCxg44.roa (raw, json)
Hash identifier:          vq3wuBkGKS5ST00rqpIAMZnVWNqz1d0HPu8ULhDEVDs=
Subject key identifier:   E1:84:CA:2D:BF:AE:A0:5F:97:4B:55:16:FC:13:6C:96:B0:B1:83:8E
Certificate issuer:       /CN=6084C82997BC86365F5318867EFFB82561955474
Certificate serial:       02
Authority key identifier: 60:84:C8:29:97:BC:86:36:5F:53:18:86:7E:FF:B8:25:61:95:54:74
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YITIKZe8hjZfUxiGfv-4JWGVVHQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/4YTKLb-uoF-XS1UW_BNslrCxg44.roa
Signing time:             Thu 10 Nov 2022 12:25:44 +0000
ROA not before:           Thu 10 Nov 2022 12:25:44 +0000
ROA not after:            Fri 10 Nov 2023 12:22:06 +0000
asID:                     146984
IP address blocks:        2400:b420::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6084C82997BC86365F5318867EFFB82561955474
        Validity
            Not Before: Nov 10 12:25:44 2022 GMT
            Not After : Nov 10 12:22:06 2023 GMT
        Subject: CN=E184CA2DBFAEA05F974B5516FC136C96B0B1838E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:b7:d7:e3:88:bf:b9:0e:c1:9f:fe:72:d0:
                    48:0c:17:45:51:78:db:53:e3:49:12:b8:2a:aa:6d:
                    72:0c:a1:e2:58:4f:3b:ec:a4:46:91:52:62:77:f8:
                    dc:03:b5:d6:cc:94:10:26:b6:38:97:63:44:ec:57:
                    05:50:53:31:c1:3e:fb:99:09:62:c2:51:f2:f9:e7:
                    e8:9a:fb:9c:47:2c:18:bf:e8:ac:3e:96:1b:be:da:
                    d8:45:60:a5:f7:a6:5c:35:f1:99:e8:7a:c9:6c:75:
                    49:1a:7b:5d:de:82:9d:d6:a5:06:bf:98:c3:96:a4:
                    04:53:ca:85:f9:0f:cf:53:90:8b:a9:17:ff:5b:1f:
                    bc:b7:a6:79:12:2b:23:b4:d7:d1:59:7a:11:20:a0:
                    ba:f3:3c:7d:a1:ee:d3:bd:aa:5e:fa:87:7e:2b:c4:
                    40:36:b6:d8:94:5c:f4:2b:23:19:2f:f6:89:9c:96:
                    f2:16:0b:98:bb:d2:09:00:35:40:8a:ff:c5:6e:f3:
                    7e:85:e2:fa:a2:5c:26:e2:be:3c:0e:8e:19:19:b5:
                    e1:44:75:dc:9a:14:2b:86:90:9e:7b:42:27:02:bb:
                    fc:86:42:f9:3d:4a:61:8a:0c:97:09:9e:fc:74:af:
                    ab:54:44:34:89:b6:49:32:4e:08:53:b5:b4:13:b6:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:84:CA:2D:BF:AE:A0:5F:97:4B:55:16:FC:13:6C:96:B0:B1:83:8E
            X509v3 Authority Key Identifier:
                keyid:60:84:C8:29:97:BC:86:36:5F:53:18:86:7E:FF:B8:25:61:95:54:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/YITIKZe8hjZfUxiGfv-4JWGVVHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YITIKZe8hjZfUxiGfv-4JWGVVHQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/4YTKLb-uoF-XS1UW_BNslrCxg44.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b420::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:03:1f:3e:1a:5a:ee:5c:bb:5d:55:5b:2a:96:72:db:8d:30:
         1e:0a:26:f1:e2:ff:ca:54:dc:d6:b9:4a:bb:85:99:e8:ea:71:
         51:0f:78:38:95:7d:f2:9a:2c:7f:e4:f8:8e:0c:67:be:a5:64:
         42:d6:44:64:02:20:a6:d4:4c:56:a5:59:72:b7:8d:f5:59:5a:
         94:ce:6f:7c:8b:7d:73:f9:6c:5d:6f:82:53:30:bd:e8:74:78:
         9d:63:28:d7:48:82:1e:f9:e1:4c:4f:3e:1e:af:4a:85:70:5b:
         26:40:b3:7b:2b:3e:1d:67:01:73:e6:e8:c9:78:8f:1d:bb:79:
         83:fe:bf:67:c9:65:45:6a:73:81:f5:85:27:41:79:0c:cb:63:
         a0:57:d9:dc:89:38:24:cd:1e:49:89:08:2e:f7:e9:8e:73:2b:
         a9:57:71:a6:ef:72:e9:b4:95:92:17:69:79:03:19:e9:17:18:
         90:41:c7:46:12:05:ef:cf:a7:ab:28:32:35:33:4e:23:62:9e:
         69:a2:97:23:de:e5:4d:f4:b3:ea:77:88:b2:b2:79:4f:86:2c:
         02:bb:2f:39:4a:49:5a:c6:68:36:97:cb:a1:9c:6f:c3:94:d2:
         3e:e1:47:fc:c2:58:26:d4:99:37:68:98:33:d3:a0:08:e9:8c:
         de:92:8a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org