Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/eu423r3NRaag6mPi3lIJFbzL5eU.roa
File:                     eu423r3NRaag6mPi3lIJFbzL5eU.roa (raw, json)
Hash identifier:          5EmEoMSEWMZrnCazrUzKvX3o/zRblW6H1BJQxmiWMds=
Subject key identifier:   7A:EE:36:DE:BD:CD:45:A6:A0:EA:63:E2:DE:52:09:15:BC:CB:E5:E5
Certificate issuer:       /CN=86A0BE02D491F35A561CC4904BEB7EB1AD4EC2FF
Certificate serial:       15
Authority key identifier: 86:A0:BE:02:D4:91:F3:5A:56:1C:C4:90:4B:EB:7E:B1:AD:4E:C2:FF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hqC-AtSR81pWHMSQS-t-sa1Owv8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/eu423r3NRaag6mPi3lIJFbzL5eU.roa
Signing time:             Tue 25 May 2021 02:42:14 +0000
ROA not before:           Tue 25 May 2021 02:42:14 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     9607
IP address blocks:        208.111.48.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A0BE02D491F35A561CC4904BEB7EB1AD4EC2FF
        Validity
            Not Before: May 25 02:42:14 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=7AEE36DEBDCD45A6A0EA63E2DE520915BCCBE5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a3:9e:51:1b:ad:ad:9e:73:ce:34:4f:e8:6a:
                    7e:6e:ae:bd:07:d9:4a:0e:64:d0:d2:85:68:ab:56:
                    dd:ed:cf:22:5b:7f:90:e0:8f:a4:a7:49:38:85:7f:
                    b6:a3:a6:93:d0:24:1b:ef:d7:90:6c:91:6b:9a:94:
                    86:96:cd:9b:b1:04:a3:15:e4:cd:73:cc:4e:bd:e5:
                    fa:59:fd:78:73:2d:8f:9c:24:ad:1d:2a:b5:be:9c:
                    e9:f4:41:77:0e:41:8f:81:87:c0:f4:2c:c6:14:e2:
                    a3:34:5d:9f:45:16:d5:d2:98:ed:34:08:b5:d1:6e:
                    68:7b:45:3e:ac:dd:91:bc:23:de:2d:55:bb:c2:00:
                    92:22:1a:20:97:a2:55:eb:0e:a1:11:2f:1c:39:d6:
                    3b:dc:5d:88:44:1f:47:a3:f6:3e:74:ee:e3:17:ec:
                    bf:29:8f:d8:22:b7:71:89:e7:62:f7:46:74:42:ff:
                    92:0a:ed:7b:0b:8a:f8:1f:36:69:34:9e:e7:90:00:
                    bb:a9:58:eb:8c:5d:6f:ae:f2:94:d3:2b:74:e0:0a:
                    ce:97:22:0f:ff:cd:3e:eb:82:96:26:a4:bc:52:7f:
                    d8:0c:df:b4:6d:7f:b6:75:6b:02:f3:c8:94:eb:ee:
                    1f:30:8b:ab:ca:85:7b:d2:14:6f:b9:89:50:ca:c3:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EE:36:DE:BD:CD:45:A6:A0:EA:63:E2:DE:52:09:15:BC:CB:E5:E5
            X509v3 Authority Key Identifier:
                keyid:86:A0:BE:02:D4:91:F3:5A:56:1C:C4:90:4B:EB:7E:B1:AD:4E:C2:FF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/hqC-AtSR81pWHMSQS-t-sa1Owv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hqC-AtSR81pWHMSQS-t-sa1Owv8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/eu423r3NRaag6mPi3lIJFbzL5eU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.111.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:46:96:fd:1c:f4:00:71:5b:e9:93:f9:cb:b5:93:ba:97:
         c0:f4:72:68:73:c4:29:38:50:37:31:63:21:37:75:61:b8:61:
         e9:e8:74:6e:07:91:fe:c0:69:a9:2a:9e:e5:c0:a6:7c:a1:4c:
         76:a2:19:88:91:7f:c3:42:c6:d9:bc:83:a2:4d:e1:97:d4:77:
         e1:6f:1e:10:1f:59:1c:c3:dc:d8:9e:6a:d0:76:7b:c8:a0:c7:
         af:1b:47:48:21:7a:a3:2e:a8:45:36:c8:34:c5:da:06:05:96:
         af:a7:91:aa:2d:52:23:f6:c1:c2:ac:3d:b4:f0:93:ad:8c:20:
         59:d2:4e:8c:6c:bd:67:09:eb:8f:c7:76:9e:3b:76:02:89:d3:
         08:c6:48:92:55:30:36:a3:9e:58:8e:78:0c:2c:eb:82:28:56:
         b4:4f:70:c9:88:5f:c4:06:6c:b8:af:79:29:73:98:ba:42:f8:
         68:2d:75:63:35:86:2e:01:b6:5f:b0:97:ec:5b:16:d5:7f:ee:
         01:d5:b0:4a:5c:34:9b:15:55:b4:6f:67:13:d5:c3:d0:f1:1f:
         6f:ac:33:84:62:de:bf:b6:6c:f2:17:d9:98:e7:de:51:ac:4a:
         6b:be:86:28:6e:a3:f8:7e:61:21:7d:83:87:32:b5:76:18:54:
         ea:f2:80:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org