Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/-y7swJ20Iw5pb-FWbN_WH76SHo8.roa
File:                     -y7swJ20Iw5pb-FWbN_WH76SHo8.roa (raw, json)
Hash identifier:          Ozrq1y63hA/hX7Q71L2RDsJY1vsD3GleD0O9cQzC1O0=
Subject key identifier:   FB:2E:EC:C0:9D:B4:23:0E:69:6F:E1:56:6C:DF:D6:1F:BE:92:1E:8F
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       3F
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/-y7swJ20Iw5pb-FWbN_WH76SHo8.roa
Signing time:             Tue 23 Feb 2021 08:57:30 +0000
ROA not before:           Tue 23 Feb 2021 08:57:30 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        39.110.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:30 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=FB2EECC09DB4230E696FE1566CDFD61FBE921E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f7:23:5c:18:44:09:df:d6:1f:f7:d2:69:5d:
                    04:bd:de:84:03:1b:c3:33:39:b2:01:af:52:ae:b0:
                    46:89:11:e2:35:e6:ac:f0:c9:f5:89:eb:a1:63:30:
                    7f:11:ee:50:d0:0d:95:49:eb:ce:27:9b:61:50:fd:
                    0d:20:49:a1:6b:4e:ad:54:1a:52:84:90:7a:2b:16:
                    ec:2c:8c:38:21:60:b6:50:39:51:78:71:11:85:ad:
                    af:ef:00:76:f2:86:2a:47:12:b1:a0:60:b4:e0:34:
                    79:61:10:65:91:a8:f8:72:c9:6a:c9:dd:4b:21:18:
                    24:4c:c6:0a:ac:66:9b:cd:e1:02:68:b2:9e:7a:e7:
                    41:7b:76:f9:ad:a5:58:43:d7:fd:9f:66:9e:df:57:
                    9d:b7:fe:70:c8:38:09:07:73:48:09:4c:3c:38:e1:
                    ed:71:4e:18:8d:1b:ac:c0:63:0f:5f:70:cb:18:c4:
                    fa:2f:4b:74:98:51:da:14:a0:53:2a:6c:61:b6:0e:
                    f2:40:75:5c:7b:5e:7c:99:7e:e5:0b:05:2e:a6:94:
                    6a:a8:67:d4:85:bd:60:d4:94:fe:54:fd:9f:c2:fc:
                    ee:eb:ee:5f:5b:76:52:94:06:a5:be:19:78:60:0a:
                    04:63:36:59:4b:d3:68:41:f6:eb:13:44:ab:30:d1:
                    fa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2E:EC:C0:9D:B4:23:0E:69:6F:E1:56:6C:DF:D6:1F:BE:92:1E:8F
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/-y7swJ20Iw5pb-FWbN_WH76SHo8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.110.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7b:9e:ad:86:1c:ba:37:25:ee:fc:f0:aa:70:03:ad:21:6a:32:
         d6:16:1f:fd:06:e5:e2:09:2d:28:b8:0e:6f:f6:ac:76:2b:8c:
         c0:d0:b2:83:4a:d5:16:a3:02:b9:e6:8c:41:50:26:8d:53:04:
         17:ce:2d:4c:57:7a:0e:e7:9f:f2:ce:c1:a7:e6:f3:86:62:71:
         40:51:22:3e:fb:bf:e5:36:61:25:99:bf:3c:15:00:fc:b2:b2:
         b4:f4:2f:03:12:a5:98:06:ea:87:b2:d1:97:35:b4:b6:fe:06:
         d7:69:15:51:04:44:19:32:7b:d8:0f:79:d8:4a:c3:3b:fa:79:
         a3:a7:3c:6c:34:69:cc:6f:a5:78:07:d7:3c:84:3d:ad:79:38:
         6e:27:71:b4:90:87:01:a8:47:c9:3a:67:ac:77:5a:bb:bd:bf:
         1a:86:3a:c5:cb:8e:75:7e:94:ec:28:d7:d5:39:c2:fa:17:b8:
         91:e7:ac:11:1c:da:88:99:fd:23:59:7b:ee:0e:8a:f6:f0:43:
         a5:70:1d:71:a0:d9:b9:c5:a1:06:82:c1:e5:77:5a:6a:41:80:
         81:0b:6a:cf:fb:4e:d9:1a:33:8d:b5:e2:59:df:2f:08:3c:bf:
         5c:04:f0:1b:d1:6d:41:33:01:d0:58:0b:f4:e3:2f:1c:5d:82:
         b8:9e:b9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org