Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/sE34FeA7zYi4sZQlJMyKoWXWfkQ.roa
File:                     sE34FeA7zYi4sZQlJMyKoWXWfkQ.roa (raw, json)
Hash identifier:          Ko2RRR0PXYcWLiXZQAudJS2Bn7MkX02ds0qnELMhdRE=
Subject key identifier:   B0:4D:F8:15:E0:3B:CD:88:B8:B1:94:25:24:CC:8A:A1:65:D6:7E:44
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       06
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/sE34FeA7zYi4sZQlJMyKoWXWfkQ.roa
Signing time:             Mon 20 Feb 2023 03:25:28 +0000
ROA not before:           Mon 20 Feb 2023 03:25:28 +0000
ROA not after:            Fri 16 Feb 2024 07:35:22 +0000
asID:                     9619
IP address blocks:        211.125.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb 20 03:25:28 2023 GMT
            Not After : Feb 16 07:35:22 2024 GMT
        Subject: CN=B04DF815E03BCD88B8B1942524CC8AA165D67E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:f8:f4:46:5c:f9:83:19:b7:03:5f:c0:cd:
                    5f:72:a2:aa:20:7d:58:6e:7b:98:15:dc:20:1d:d9:
                    60:04:de:e1:9d:d5:1b:9e:69:72:9c:4a:41:74:f5:
                    ec:46:30:1c:98:66:26:a3:02:4a:39:2a:b0:4a:6d:
                    ef:f1:50:f2:9b:49:bd:a5:e0:20:9d:45:a0:f1:4e:
                    7e:c3:8a:ce:fd:37:32:4a:bd:eb:55:7f:dc:8f:84:
                    76:ac:06:d3:dd:ed:08:7b:6a:59:c6:d6:f5:7b:3b:
                    2f:55:a4:b2:51:9b:b5:cb:b4:cc:e1:8c:b1:db:fa:
                    6c:fa:67:bb:08:0a:da:4b:bb:e3:4d:f3:9e:95:51:
                    80:5e:5d:d1:00:35:c4:2c:1b:e4:28:af:a3:69:db:
                    0a:dd:09:91:8b:0a:d9:38:d1:46:98:c5:18:79:b6:
                    53:5a:e8:ab:6b:4a:fa:34:75:41:46:7c:67:fb:3b:
                    89:6f:0f:02:42:ce:e2:73:4a:f4:93:bd:92:9f:2b:
                    af:21:90:f0:42:47:65:c5:86:88:07:f9:f4:e8:e4:
                    e0:a1:ff:14:8a:0f:65:0e:36:6d:1a:0c:e3:c0:25:
                    c9:46:0b:25:e1:c6:bb:5a:2c:e5:6b:a8:97:c4:98:
                    30:0e:9b:f4:09:e7:fb:ed:2d:21:ad:c1:84:cf:ca:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4D:F8:15:E0:3B:CD:88:B8:B1:94:25:24:CC:8A:A1:65:D6:7E:44
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/sE34FeA7zYi4sZQlJMyKoWXWfkQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:27:0b:0c:65:00:1b:f4:93:4f:e2:08:1c:aa:1a:14:09:28:
         a6:f3:88:6c:cb:3e:7f:b7:cb:f1:10:99:5c:19:c5:d1:50:ba:
         54:2c:4c:95:49:5d:76:85:ec:d8:53:0d:a2:b9:0d:84:66:ba:
         c8:fa:55:b0:94:90:c1:ec:7c:70:3e:f7:ab:95:36:a0:97:f7:
         62:bd:ab:c0:cd:c0:9f:8a:d2:4a:0a:60:8a:f6:bb:db:ec:eb:
         ef:ad:ee:10:26:1f:94:1f:c1:21:27:a4:eb:d5:26:a9:0f:49:
         2a:a4:da:78:a7:93:f7:dc:b4:2a:de:a6:80:16:42:9a:61:37:
         06:a0:35:c3:1b:f9:d5:2b:1b:0a:03:c8:a8:36:43:36:9f:cd:
         7f:61:ef:aa:85:c8:1d:59:5e:29:91:ea:e0:e0:96:a7:04:43:
         3b:b2:d4:1e:c2:87:a1:d9:4c:3b:f3:d5:c2:bb:c4:44:03:f2:
         27:2e:64:f2:84:57:a5:d1:65:05:eb:a1:59:aa:0c:15:f9:30:
         dd:b7:ef:64:1a:85:64:89:4c:d0:54:71:61:a0:37:8a:eb:57:
         7e:d7:f3:c0:0b:53:91:c9:bb:59:60:5f:48:97:22:1d:a1:ef:
         47:15:34:90:f6:58:59:d9:85:a9:1a:f2:30:77:ce:0e:35:6e:
         a6:15:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org