Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/utCyw2KCLverysbNynK-zb-oGCE.roa
File:                     utCyw2KCLverysbNynK-zb-oGCE.roa (raw, json)
Hash identifier:          1ZTbvis+6zVi+8bl0LRmbPCThYfPGnbuLe5/24bDiU0=
Subject key identifier:   BA:D0:B2:C3:62:82:2E:F7:AB:CA:C6:CD:CA:72:BE:CD:BF:A8:18:21
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       DC
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/utCyw2KCLverysbNynK-zb-oGCE.roa
Signing time:             Thu 28 Jul 2022 05:41:54 +0000
ROA not before:           Thu 28 Jul 2022 05:41:54 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        183.181.104.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:41:54 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=BAD0B2C362822EF7ABCAC6CDCA72BECDBFA81821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:8b:fd:0f:7d:98:48:64:f9:5c:37:b2:9b:
                    de:23:05:44:04:43:56:e1:52:d7:bb:a4:08:2c:b3:
                    b4:06:08:4b:a7:6d:52:5c:8b:65:71:2a:67:04:86:
                    36:79:d1:f8:8a:2e:d7:a3:31:3b:34:9b:e7:dd:b6:
                    c1:6a:93:0b:ff:e8:d7:6e:7e:7e:39:3b:c8:bf:6c:
                    5a:01:37:1d:8f:40:80:b0:12:af:d3:5a:d2:4f:3f:
                    f7:94:80:0f:a3:9f:c1:bf:45:05:88:8a:bf:75:b5:
                    2e:ed:f5:76:f6:66:9c:88:56:a6:f1:98:d4:20:20:
                    3a:86:cb:57:ca:09:2a:14:2a:aa:bc:de:46:7d:7f:
                    f3:91:5d:5c:a9:e5:00:d4:18:37:4b:34:a7:b8:c7:
                    be:68:56:96:ad:fb:d8:3a:ac:ff:34:3b:98:22:7c:
                    e5:65:42:22:2b:f0:e2:50:87:06:82:28:c8:fc:a8:
                    36:f2:3f:bd:72:3b:92:2d:d5:88:55:42:8e:33:cf:
                    ef:c7:1c:93:f5:07:dc:d6:bb:14:cf:61:43:32:61:
                    0d:fa:41:2c:93:d0:7a:50:41:59:d6:73:47:8f:bc:
                    df:c7:c1:79:d2:31:bf:1c:ba:f0:5a:64:db:1a:1c:
                    63:32:8c:0a:67:3b:bd:67:d9:9c:c2:aa:72:d0:cd:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D0:B2:C3:62:82:2E:F7:AB:CA:C6:CD:CA:72:BE:CD:BF:A8:18:21
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/utCyw2KCLverysbNynK-zb-oGCE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:bd:d5:64:15:d1:75:60:80:37:23:2a:84:6f:4c:cd:26:47:
         f6:84:ea:81:90:dc:53:ae:80:7e:6f:62:16:3d:a5:b6:50:7e:
         5e:63:84:f8:79:7f:84:da:d3:c5:e7:c1:33:dd:9c:de:dc:03:
         aa:c8:7c:24:3c:b0:cc:f3:af:85:cb:43:dd:85:fe:eb:13:d1:
         b6:d2:2b:e1:1f:b8:9e:11:93:a6:07:c8:c7:7b:0b:f2:bb:74:
         01:1c:38:c2:70:18:73:ca:02:d1:e7:b9:1f:75:8e:2b:43:51:
         af:97:c1:07:36:77:65:89:59:54:f9:71:f0:63:97:da:3a:a4:
         5b:23:c3:51:a3:5d:ba:62:9e:60:e9:09:f0:12:41:09:16:85:
         eb:83:8a:81:31:ba:99:d2:03:0a:69:4d:0c:48:72:4f:62:bc:
         79:d0:44:e7:76:2c:1b:85:4c:14:bd:bd:48:8b:ac:e4:1d:51:
         1a:7c:2f:c4:cc:d7:cd:75:e6:f9:b2:89:2f:0e:d5:52:2e:eb:
         2d:cd:fb:46:69:e7:71:74:86:52:58:17:9d:db:66:2b:8f:fa:
         74:62:15:67:a9:d3:71:57:96:d7:e0:b0:2e:e7:b2:64:97:d7:
         07:91:f6:e1:b1:ff:ac:ef:82:4e:ea:e0:8b:37:62:e8:c8:35:
         9b:5c:2d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org