Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AuYlCapXiHLMLiPeXLShjproxrk.roa
File:                     AuYlCapXiHLMLiPeXLShjproxrk.roa (raw, json)
Hash identifier:          woqi6pMeDuyYfG+MVaEOjHwM7JdjcaDQlja15gRl8/8=
Subject key identifier:   02:E6:25:09:AA:57:88:72:CC:2E:23:DE:5C:B4:A1:8E:9A:E8:C6:B9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       013E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AuYlCapXiHLMLiPeXLShjproxrk.roa
Signing time:             Wed 24 May 2023 16:31:11 +0000
ROA not before:           Wed 24 May 2023 16:31:11 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.92.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:11 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=02E62509AA578872CC2E23DE5CB4A18E9AE8C6B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:be:ab:72:af:db:bd:78:cd:50:fd:a3:93:
                    69:c0:cb:66:4d:86:8a:f5:e0:56:b5:88:51:62:af:
                    f0:ad:f0:72:17:b3:0e:e0:82:14:c4:4c:48:3c:f3:
                    cd:0f:5e:59:83:82:2a:68:df:cf:1d:c6:f1:12:7f:
                    70:70:07:82:c8:c2:49:40:3a:52:73:0d:23:3a:f7:
                    f6:c1:3e:fc:99:bc:bf:a3:bc:96:31:7d:38:25:1e:
                    89:19:02:e7:9e:65:bd:05:24:93:e9:09:eb:61:f3:
                    03:eb:12:9e:8a:9e:26:5c:64:65:d6:50:2b:a0:da:
                    6e:08:fb:36:cd:c9:67:db:73:17:a9:74:74:d5:4c:
                    2c:fe:4a:4e:c1:ba:cb:a1:62:f4:1f:0f:24:83:ed:
                    da:81:2d:90:52:86:9a:f7:41:17:13:31:de:1b:f4:
                    ab:ed:63:c6:4a:18:5a:35:0e:fb:81:15:0d:d5:f5:
                    3a:20:e1:7f:19:3d:54:03:0e:af:e7:e4:83:b1:f0:
                    df:d5:86:1e:2d:c0:81:c8:62:f0:a7:c9:1f:9e:25:
                    dc:bb:fe:98:48:6f:a2:5b:f9:9e:2e:ca:83:ce:5c:
                    8c:86:fe:0d:d8:30:8e:a3:1e:94:f3:ff:a5:51:36:
                    c9:e9:9f:ff:ac:da:92:75:34:81:0c:13:36:b1:75:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E6:25:09:AA:57:88:72:CC:2E:23:DE:5C:B4:A1:8E:9A:E8:C6:B9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AuYlCapXiHLMLiPeXLShjproxrk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:c4:31:c0:9d:93:63:39:f1:3b:d6:96:5d:0a:10:6c:5b:
         21:6b:6e:48:22:5d:47:a6:98:a8:45:4e:72:6a:7d:3e:fc:a4:
         47:58:2d:13:7c:ae:74:36:ed:f6:8a:7f:c0:a9:a1:67:bd:90:
         80:cf:29:6b:21:1e:db:b7:9d:9f:a4:b5:b1:7e:07:36:84:2a:
         78:e6:14:05:f0:f6:f8:2c:61:b8:fe:9e:6a:d9:1c:d9:a3:10:
         35:ff:95:98:2d:33:3b:63:65:bc:0b:d2:6a:85:3b:17:2a:95:
         21:7b:cd:e1:28:da:59:9b:8e:9d:0d:94:80:e0:79:d6:7c:78:
         a4:71:5a:54:5a:db:a8:37:fe:ff:14:21:1e:d6:e2:74:34:3f:
         a6:b7:0f:6a:e0:77:e6:de:a2:40:30:22:e2:46:84:e6:8e:9b:
         bd:cf:c6:46:32:90:31:59:ee:08:dc:78:24:65:f7:24:76:c4:
         9f:ce:86:09:e8:9f:30:c5:26:27:58:16:12:af:3b:ca:65:e0:
         58:e9:a8:a5:b1:99:36:50:a2:ee:b7:aa:0a:67:c9:bf:53:d2:
         0a:43:9a:6f:d6:76:97:25:51:3d:0b:7f:fe:b5:06:51:97:ef:
         3d:18:62:e1:8c:f2:d0:89:67:0f:68:06:d2:54:c1:78:a6:8e:
         a3:b1:c1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org