Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/UeyBPXhmIg11iQKVPtyGfa7DduI.roa
File:                     UeyBPXhmIg11iQKVPtyGfa7DduI.roa (raw, json)
Hash identifier:          U72CUXz0fBZt7IIIh2yZWSnEgkKkR9xgFtZ0Vh2xaw4=
Subject key identifier:   51:EC:81:3D:78:66:22:0D:75:89:02:95:3E:DC:86:7D:AE:C3:76:E2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       4F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UeyBPXhmIg11iQKVPtyGfa7DduI.roa
Signing time:             Fri 22 Jul 2022 02:02:19 +0000
ROA not before:           Fri 22 Jul 2022 02:02:19 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.52.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 02:02:19 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=51EC813D7866220D758902953EDC867DAEC376E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ed:27:d7:d3:dc:b2:bf:ac:42:09:58:7a:5c:
                    34:c7:44:a0:6b:74:03:a6:d6:91:83:4a:63:1d:9d:
                    ae:7c:8e:53:0f:06:81:d7:3a:36:55:bb:15:b4:e7:
                    bf:16:65:22:5d:9d:60:b3:f0:d3:6e:0c:c1:a6:de:
                    f2:19:1f:cd:79:a9:19:7d:39:e6:94:67:60:75:1d:
                    27:69:91:36:8f:0a:94:db:a4:0a:c9:0c:85:d3:e9:
                    48:e7:9f:8d:d7:68:3e:eb:71:82:69:39:71:be:22:
                    6d:5e:86:56:34:54:9b:64:d9:a2:49:92:a2:de:4e:
                    32:ee:67:dc:4f:eb:6d:25:a9:cc:9b:19:b0:e9:78:
                    8e:a5:5a:2c:a1:04:28:2e:17:7d:ec:ff:a4:34:5f:
                    b6:40:9b:dd:a1:77:55:d0:c7:a5:55:d0:70:a7:35:
                    d7:e5:cd:f1:c5:f5:50:99:7b:a8:7c:de:3b:d9:24:
                    49:8c:97:c6:30:2a:d3:57:92:eb:db:92:0a:03:83:
                    49:38:83:3f:fa:67:95:ef:bf:db:b4:18:90:1e:c5:
                    d9:b2:06:a2:23:6a:23:ce:08:e5:c7:ce:a8:c7:bf:
                    dd:3a:fe:6c:e0:76:7f:a3:f6:b3:10:e1:46:39:e5:
                    e9:bf:5e:b6:f6:96:9c:5d:93:56:27:87:e6:2f:f6:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EC:81:3D:78:66:22:0D:75:89:02:95:3E:DC:86:7D:AE:C3:76:E2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UeyBPXhmIg11iQKVPtyGfa7DduI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:69:b1:da:cd:af:43:a3:20:45:0e:0e:01:05:d1:73:bf:97:
         55:9d:45:21:ba:96:91:91:4f:10:95:ea:64:ef:08:0e:ff:a7:
         b7:36:03:b5:8c:ed:7f:b5:99:c9:45:fc:f6:f1:72:87:c4:b1:
         34:33:5d:0b:57:35:ed:d3:96:18:e4:50:f2:e0:f4:dc:8d:24:
         6c:6f:3e:d7:20:f1:52:95:f2:ad:3d:ad:d3:d1:97:ab:22:41:
         ba:15:4c:bf:e4:5b:41:f6:b3:0f:90:0b:5b:a9:51:5d:e3:b4:
         3f:60:42:1d:e9:de:05:9d:b3:51:70:a6:da:97:68:ad:b0:82:
         cc:76:b3:99:51:d2:21:e2:66:f6:1a:10:61:0f:56:8f:f0:86:
         ea:5f:99:07:6f:62:64:90:2f:1f:2b:dc:f7:9b:61:4b:e9:f5:
         a1:bf:f6:d4:dc:57:4c:4f:fb:15:cc:6d:ff:02:58:45:f9:9e:
         d8:c8:cb:69:30:7f:e1:70:2a:b4:5a:ef:5b:ff:9e:79:59:40:
         3e:b6:00:9f:40:09:71:e1:f7:4e:6b:63:12:dc:7c:4d:4b:4e:
         29:05:06:60:33:9a:79:6c:89:f3:d9:cd:0c:8c:c2:f4:ae:ff:
         69:15:95:9a:6b:85:96:35:39:e2:ca:37:a0:1f:fd:a6:dc:f1:
         dd:81:4e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org