Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ryTHB3GdCDde6HjTkuavYFL78kM.roa
File:                     ryTHB3GdCDde6HjTkuavYFL78kM.roa (raw, json)
Hash identifier:          ThefPI1Qc3+vnBAqR+AyzdZVgEj8n3PIwW8v+ORLIn8=
Subject key identifier:   AF:24:C7:07:71:9D:08:37:5E:E8:78:D3:92:E6:AF:60:52:FB:F2:43
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       017E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ryTHB3GdCDde6HjTkuavYFL78kM.roa
Signing time:             Wed 24 May 2023 16:33:24 +0000
ROA not before:           Wed 24 May 2023 16:33:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:33:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=AF24C707719D08375EE878D392E6AF6052FBF243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8c:3e:b6:de:b3:49:91:fe:45:18:f7:06:da:
                    65:e0:41:29:22:4b:21:03:79:bc:41:56:f7:d5:b4:
                    7c:24:ce:1a:bf:de:99:21:65:ce:6c:0b:27:4e:2d:
                    f2:b1:9b:57:16:2c:08:0c:56:fd:d0:56:bd:8e:6c:
                    3f:ca:83:87:0d:b6:42:93:29:cd:b2:f2:4c:0d:39:
                    d2:12:1f:5c:9f:9f:b1:d2:5f:b7:41:4d:cd:6b:dc:
                    18:5e:2c:2a:69:a0:b8:5a:b3:39:e1:00:a9:ac:75:
                    86:eb:1c:86:ad:60:18:4d:33:4e:d6:f7:81:4d:8b:
                    b4:97:f7:35:6b:ca:32:39:5b:dc:f9:4e:01:36:3c:
                    66:c1:ca:38:88:ab:fe:50:d3:31:3b:2a:9c:1a:0b:
                    6d:46:87:1d:d7:6c:4e:76:8a:33:a2:0a:57:fb:0b:
                    fe:db:e6:4b:61:05:97:29:d3:26:e9:3c:e5:ec:5f:
                    5d:e2:7a:c2:f0:92:a9:db:bd:db:b9:43:3e:d8:0b:
                    e2:ae:8d:50:8d:f2:8e:3f:ab:79:79:2c:20:64:7b:
                    51:91:d3:8c:f8:39:6f:93:d5:23:97:17:e0:9f:ef:
                    83:1d:f5:49:41:b5:59:fc:c0:30:b6:66:83:05:d6:
                    2c:18:db:34:ee:b2:34:65:5b:5a:72:ed:c1:a2:8c:
                    1c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:24:C7:07:71:9D:08:37:5E:E8:78:D3:92:E6:AF:60:52:FB:F2:43
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ryTHB3GdCDde6HjTkuavYFL78kM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:73:7e:09:2e:af:3b:9d:87:13:fe:84:9a:71:24:ec:72:7c:
         de:dc:ec:97:81:e5:ee:a0:36:5b:78:bc:4d:67:65:f5:31:5d:
         d1:09:4c:6f:1f:cc:33:ef:a9:48:e1:a5:99:a9:4d:8b:49:c2:
         a8:6f:ce:5a:15:9f:cc:f4:8f:41:1d:a0:71:a8:af:87:58:cc:
         43:5d:c0:e6:63:90:79:8e:9a:7b:7c:4b:ed:f6:5b:6e:4d:65:
         cd:a4:d2:5b:d8:f0:77:da:7e:f7:da:9a:b1:cf:63:c2:d3:7b:
         05:06:0a:4e:ee:36:1c:21:f4:04:be:a3:dc:f8:14:be:91:62:
         14:a5:bd:88:57:85:91:2f:49:df:55:31:97:8a:22:06:61:a4:
         8d:11:73:f7:d6:27:83:b6:62:6b:c7:80:45:67:f5:6e:ca:e2:
         13:c9:a5:02:fd:1a:e2:07:34:54:2c:4a:94:d5:d2:57:ab:1b:
         ad:ab:da:95:e9:5d:58:2c:7d:e2:94:39:aa:13:19:cc:24:74:
         b1:da:24:a7:6b:07:8f:c7:59:3f:bc:75:da:18:d3:51:92:3a:
         51:5b:48:d6:b8:41:9e:e5:71:95:f2:10:33:a2:41:11:49:32:
         0b:35:ba:55:0e:ba:86:05:90:20:c6:e5:ce:a1:d9:05:d1:18:
         05:8e:9b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org