Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/I-vUb4vwVYGsZTh48jTkbPGhnlA.roa
File:                     I-vUb4vwVYGsZTh48jTkbPGhnlA.roa (raw, json)
Hash identifier:          sokcIfPojEfrvnf7JTHKZATnxKIrlySxQlb4fMNfbu4=
Subject key identifier:   23:EB:D4:6F:8B:F0:55:81:AC:65:38:78:F2:34:E4:6C:F1:A1:9E:50
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       028A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I-vUb4vwVYGsZTh48jTkbPGhnlA.roa
Signing time:             Tue 30 May 2023 16:36:26 +0000
ROA not before:           Tue 30 May 2023 16:36:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.104.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:36:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=23EBD46F8BF05581AC653878F234E46CF1A19E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:e8:44:c1:ac:b6:7d:b7:4a:6c:78:67:c8:
                    cd:28:70:b8:06:d8:0e:71:f2:4b:4a:16:c9:22:39:
                    e7:8f:b4:46:ea:26:84:3a:52:d9:7a:03:ce:be:69:
                    0a:90:ef:4c:de:fa:93:a7:b2:3b:ad:c7:cf:6a:a2:
                    91:11:55:42:f6:31:87:4f:2b:5d:84:4a:58:5d:cf:
                    d0:36:19:24:90:4e:e3:37:6c:1a:45:a7:c0:4a:0a:
                    65:d0:19:c4:ba:4a:4c:b8:cb:4f:c3:14:77:6a:cd:
                    ba:78:56:c0:92:f1:f0:be:ad:89:64:04:32:0c:7f:
                    b1:10:ab:c1:9d:64:87:14:63:da:93:63:9a:1d:bf:
                    99:33:a3:d8:32:c3:b1:b3:dd:f0:0d:de:6e:cc:01:
                    df:d5:19:d8:d4:f3:a7:4f:ab:dd:0b:cc:6c:59:7c:
                    08:7a:b1:79:54:ec:a0:94:ad:d6:21:e8:ea:3b:b5:
                    79:36:ad:4f:54:f6:d2:50:b4:01:db:26:65:d8:d4:
                    7b:72:95:64:8e:36:04:7f:11:cc:1b:cf:86:76:e9:
                    f8:af:a0:08:70:7f:45:0d:29:72:23:1d:85:51:db:
                    b7:b7:2d:48:87:4b:20:48:4b:92:5f:47:3f:2f:8b:
                    ad:ad:81:fd:46:bb:7c:35:d4:09:3c:a7:34:d5:17:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EB:D4:6F:8B:F0:55:81:AC:65:38:78:F2:34:E4:6C:F1:A1:9E:50
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I-vUb4vwVYGsZTh48jTkbPGhnlA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:91:aa:f5:ac:4d:79:01:ad:e3:ad:cf:82:10:fb:74:5e:
         e6:b3:4e:a3:33:39:74:5b:06:28:47:64:9c:d2:38:5d:2a:37:
         1b:2c:76:8e:fa:92:24:1f:48:cf:a9:85:37:50:ab:ad:1b:4a:
         a1:8a:85:f7:6f:c5:15:86:33:d7:50:4a:d6:56:fa:c4:1c:9f:
         c5:04:7d:a1:d4:f9:4c:83:32:f8:9d:55:71:82:a1:77:57:68:
         6d:bc:7e:ce:05:b8:90:c0:28:9a:f9:65:ad:cc:c6:35:c3:e7:
         8d:4a:99:d7:a9:bf:98:af:6f:e7:e0:61:28:b0:86:e5:33:21:
         2c:15:82:b0:ef:92:fc:c0:22:c4:40:c5:5d:95:f4:dd:b2:0a:
         23:c7:cd:b0:0d:44:37:1d:5a:5c:77:fc:e5:a4:e7:94:3e:83:
         49:30:72:f7:4a:f3:5f:81:0d:d3:77:99:55:6d:90:5c:10:47:
         33:12:e3:42:70:d9:b3:31:b7:95:5c:4f:ec:ee:d9:b7:40:d3:
         ef:0a:b7:e1:00:dd:19:c3:c0:6d:bd:db:47:5a:de:22:3c:89:
         06:2a:78:f6:01:e8:00:b8:ac:10:9e:cb:5b:1e:83:dd:7d:13:
         bc:29:70:09:2d:d4:f4:ff:54:95:67:4c:c9:9b:cf:a7:be:b8:
         8b:5b:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org