Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/g-nav_9ENpB31z_viOBUVquTfUQ.roa
File:                     g-nav_9ENpB31z_viOBUVquTfUQ.roa (raw, json)
Hash identifier:          LEx3MQCAO5XnwAYnGDKueohwAfyVkrEy4JKadd+t7Ws=
Subject key identifier:   83:E9:DA:BF:FF:44:36:90:77:D7:3F:EF:88:E0:54:56:AB:93:7D:44
Certificate issuer:       /CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
Certificate serial:       13
Authority key identifier: 0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/g-nav_9ENpB31z_viOBUVquTfUQ.roa
Signing time:             Wed 02 Jun 2021 07:49:39 +0000
ROA not before:           Wed 02 Jun 2021 07:49:39 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        90.149.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
        Validity
            Not Before: Jun  2 07:49:39 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=83E9DABFFF44369077D73FEF88E05456AB937D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:2e:6a:b1:ed:8f:6b:8d:e5:4e:c9:a8:06:
                    1b:53:28:1b:dd:c9:d4:e3:34:83:19:05:07:30:f3:
                    c7:31:ed:04:b3:bf:bb:e2:a6:a4:d7:f8:fe:fe:dc:
                    c9:1c:3a:76:ef:ef:53:b2:e1:d6:7f:8e:7d:9e:ba:
                    48:01:e7:4d:98:1d:56:32:5f:0d:c4:3f:fd:02:33:
                    8c:5d:18:00:4e:3e:3e:32:5c:71:be:40:7a:a0:74:
                    fa:4a:02:60:14:58:70:41:ae:7d:63:9a:1c:33:4f:
                    54:b1:a4:06:56:bd:71:f1:ef:16:fb:fb:5e:1b:7c:
                    65:4e:f2:07:f3:57:30:13:57:83:33:20:48:1b:38:
                    01:61:d2:e4:1d:31:18:04:14:ce:c0:98:a0:e6:a3:
                    c2:17:cb:f9:81:65:39:0a:d4:4a:7a:05:3c:2c:8f:
                    47:c6:22:fd:d0:14:e1:80:e3:10:15:b4:81:a2:18:
                    2d:25:35:68:e7:b3:2a:a3:d0:fa:9c:46:dc:00:8a:
                    73:5d:d4:5e:be:57:d6:b5:6f:37:5e:29:d0:b1:47:
                    e2:37:15:ea:9a:6a:22:42:53:47:90:ae:d5:4c:85:
                    f0:f5:92:1d:07:ac:c7:1e:32:83:7f:b6:9d:32:bf:
                    e9:87:c3:31:d1:63:6f:84:fe:36:84:99:94:b6:a5:
                    9d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E9:DA:BF:FF:44:36:90:77:D7:3F:EF:88:E0:54:56:AB:93:7D:44
            X509v3 Authority Key Identifier:
                keyid:0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/g-nav_9ENpB31z_viOBUVquTfUQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  90.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:0e:4b:00:f6:f6:22:c4:0b:ca:39:5c:ed:d6:26:21:18:a5:
         65:98:6e:93:f5:64:cc:f9:65:20:b9:f1:17:bf:18:df:7a:d0:
         9c:d4:c0:6b:8b:f9:7a:bd:da:db:80:b4:8d:6a:75:8b:59:a9:
         17:37:48:6b:d1:a5:2e:3a:52:ac:28:53:1a:39:9c:d4:f9:4d:
         d1:7f:db:aa:19:b7:a5:65:98:2d:b2:cc:fb:79:f3:2c:46:9f:
         b6:ad:0a:f9:4f:7e:ac:1d:db:80:b2:cf:74:23:d2:6a:06:da:
         33:f9:16:f4:22:17:9f:8d:ca:0d:44:82:c6:43:bd:be:23:bc:
         b0:28:00:14:5a:62:6d:bc:8c:29:8c:19:00:ad:05:8e:25:9e:
         49:bb:6a:d2:e9:8b:ef:67:39:5d:b1:43:20:a3:1a:32:3d:44:
         61:5d:aa:16:ce:5a:b6:6f:ed:04:28:88:af:8b:7f:98:6f:8c:
         0c:c3:7a:57:87:a4:a2:29:44:bc:eb:0d:1c:e8:fc:5b:16:3a:
         53:95:41:67:62:d0:3e:44:85:ef:b6:b7:fb:f0:8c:79:cd:29:
         f4:9c:a1:a3:59:fb:b0:89:55:51:50:cf:98:c3:e9:1c:53:76:
         cb:33:28:e2:46:3d:0d:58:05:08:66:43:8a:41:e6:83:fc:11:
         e0:dd:db:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org