Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tlu1FHgREP98LODMRrG2htJqXEQ.roa
File:                     tlu1FHgREP98LODMRrG2htJqXEQ.roa (raw, json)
Hash identifier:          /5CJLb3QSle3/01Ftr/R6I4B1WDhUK0E1w9Gnwudqrc=
Subject key identifier:   B6:5B:B5:14:78:11:10:FF:7C:2C:E0:CC:46:B1:B6:86:D2:6A:5C:44
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0297
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tlu1FHgREP98LODMRrG2htJqXEQ.roa
Signing time:             Tue 30 May 2023 16:36:29 +0000
ROA not before:           Tue 30 May 2023 16:36:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.73.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:36:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B65BB514781110FF7C2CE0CC46B1B686D26A5C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:2e:8e:a9:e8:52:d0:90:25:3e:32:15:78:
                    45:c6:91:70:88:ff:ac:19:39:02:ba:0c:dd:9b:20:
                    66:4c:66:31:01:83:53:da:b6:b8:3d:be:29:17:2d:
                    4d:f5:54:18:de:96:e8:c3:7c:4d:9e:15:38:31:e9:
                    00:8d:64:1d:af:e3:61:2c:20:a0:af:cc:98:eb:47:
                    46:40:20:fd:40:e1:80:b1:35:c1:25:6c:52:65:af:
                    79:58:c2:49:31:c9:60:c8:3c:aa:46:fa:03:e7:64:
                    4c:c8:88:2a:09:2f:b9:de:9f:d0:79:d1:f8:ee:bc:
                    38:79:dc:f2:e4:fd:a2:94:7c:de:63:4f:b3:b6:d5:
                    8b:e3:06:4c:55:bb:b6:98:85:a0:af:f3:7a:9b:23:
                    9b:7f:2f:68:77:c3:cf:5d:19:01:a4:d3:54:dd:27:
                    fd:1e:0a:3c:c2:23:f6:d4:b8:d3:95:6c:f9:d1:50:
                    53:94:3d:f1:c0:bb:97:b9:6e:71:78:f7:35:b8:e8:
                    c2:33:37:fd:49:45:9e:b1:36:63:bc:06:7a:3a:b7:
                    58:c9:f7:88:21:d1:2f:f5:d4:2a:fb:08:df:b7:15:
                    7b:b3:ef:0d:ba:22:83:cc:18:93:14:c6:6b:0d:64:
                    87:38:87:11:49:c6:34:47:83:79:fc:32:37:fb:c1:
                    db:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5B:B5:14:78:11:10:FF:7C:2C:E0:CC:46:B1:B6:86:D2:6A:5C:44
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tlu1FHgREP98LODMRrG2htJqXEQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:ba:25:dd:d0:4a:ed:6d:57:50:1d:d7:e5:d5:c8:36:3a:52:
         f7:f2:e0:f1:79:a0:df:d6:d9:7e:81:ea:f0:47:15:d0:62:da:
         1c:43:5f:d5:87:f0:ee:78:55:7f:bc:b4:33:27:d7:1f:74:e4:
         95:27:3f:8b:07:9a:86:89:fc:cb:93:fa:23:ce:d4:d3:18:3b:
         a2:92:9e:77:08:2c:8f:3f:c4:82:7c:be:5f:2b:89:4f:3d:48:
         e9:db:a2:3a:52:ea:05:a6:b2:f6:9b:dd:2b:57:bf:9f:20:1d:
         b7:a8:57:ff:b9:2f:08:3f:91:83:ea:11:86:da:fc:07:79:5a:
         7d:10:16:22:1b:93:68:f5:68:8b:67:5e:3c:7e:01:27:cf:10:
         9d:c6:d3:8b:40:ac:00:36:f4:bf:42:57:74:4f:f5:56:cf:1a:
         09:d4:63:00:42:13:bc:a1:3c:26:14:d0:f0:8d:92:ac:ed:cb:
         0e:d6:21:87:0d:81:a6:c0:a2:e5:dd:9a:a5:c1:85:cb:61:ef:
         9c:84:e2:98:85:71:7b:7a:7f:71:f7:cf:29:4e:ba:42:38:74:
         1b:03:fb:17:bd:a0:1b:4e:0a:20:c9:f8:85:e4:d5:2a:ec:13:
         ef:a6:c5:78:df:96:4c:97:01:ca:f4:f4:e1:07:45:4c:7b:f0:
         61:10:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org