Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/tY_oNw0m5u-pe8P7wE4d5YWwUYg.roa
File:                     tY_oNw0m5u-pe8P7wE4d5YWwUYg.roa (raw, json)
Hash identifier:          XITjA59KlvCJ9mrEc+lKlI4yjo1TLdEut0aKbeJwrLE=
Subject key identifier:   B5:8F:E8:37:0D:26:E6:EF:A9:7B:C3:FB:C0:4E:1D:E5:85:B0:51:88
Certificate issuer:       /CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
Certificate serial:       0F
Authority key identifier: 0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/tY_oNw0m5u-pe8P7wE4d5YWwUYg.roa
Signing time:             Tue 23 Feb 2021 08:57:35 +0000
ROA not before:           Tue 23 Feb 2021 08:57:35 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        92.202.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
        Validity
            Not Before: Feb 23 08:57:35 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=B58FE8370D26E6EFA97BC3FBC04E1DE585B05188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:0a:72:ea:67:ff:69:9d:c8:55:4f:f6:42:
                    1e:07:44:60:5e:ab:53:30:ab:e6:2a:28:f4:ea:51:
                    dd:59:48:68:45:a3:a7:11:f6:35:9f:6c:dd:25:17:
                    e9:28:b7:ae:69:f4:62:8a:c5:4d:19:0a:6a:0e:17:
                    55:5e:4a:a2:e1:8d:2c:c8:2c:38:a2:c9:25:44:b0:
                    db:e3:06:1c:b1:e6:2f:cb:b8:9d:13:ed:58:36:19:
                    f1:ce:c4:34:d6:80:9b:a7:cf:e8:dd:b1:79:73:8a:
                    2a:94:68:41:e2:4f:66:01:25:f1:a9:3a:65:3c:b2:
                    c8:d3:90:ea:4f:15:62:b7:76:12:54:07:db:34:22:
                    9b:df:a2:3b:27:02:0a:d1:b3:fb:ed:af:14:aa:25:
                    04:61:22:63:3d:01:52:e4:79:dd:74:7e:db:26:9b:
                    47:d1:7d:6d:f6:79:6e:a1:8a:01:0a:bc:a8:d9:3a:
                    cc:37:c0:0d:22:5c:97:90:5d:7c:b3:84:f5:75:7b:
                    2c:15:e5:96:5b:73:83:54:83:c1:e2:a0:ba:d4:11:
                    eb:00:32:16:4b:8f:33:1f:a2:64:10:52:bc:17:3b:
                    cd:32:95:a9:58:e8:27:f3:fc:4d:e7:2e:28:33:50:
                    d8:47:49:31:3a:27:e6:2e:a2:15:b8:8a:36:b1:9b:
                    fa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8F:E8:37:0D:26:E6:EF:A9:7B:C3:FB:C0:4E:1D:E5:85:B0:51:88
            X509v3 Authority Key Identifier:
                keyid:0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/tY_oNw0m5u-pe8P7wE4d5YWwUYg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.202.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a6:b6:d1:fc:4a:13:80:54:eb:31:29:26:b6:aa:18:75:63:28:
         cb:48:45:57:88:bd:c9:2b:64:12:77:9d:59:95:ce:3a:ce:31:
         ba:7a:73:b6:19:38:aa:91:42:1f:9c:77:53:87:b8:2b:d4:be:
         0a:44:69:27:5d:0e:2d:30:c3:aa:f9:de:4a:6a:63:09:c7:db:
         48:90:85:5b:40:09:2c:82:5c:68:fa:f7:0c:73:b2:4b:55:e5:
         47:29:e1:50:40:b7:63:5a:24:14:1b:6e:6c:d7:f4:06:df:8b:
         97:63:14:e1:b2:cb:40:6c:2e:af:81:49:8d:b9:1c:af:91:4f:
         9f:7b:d7:fb:ff:21:7d:4b:23:d4:4f:08:4b:4a:19:59:59:99:
         5e:1f:f5:10:49:b4:92:d7:24:a0:2f:49:da:75:3e:27:a8:8c:
         e1:3a:59:e9:1c:69:98:37:e0:b8:87:5b:45:61:66:73:a6:5b:
         ce:ab:00:c6:ae:81:f7:ea:55:72:df:fd:38:3c:fa:dc:ab:cf:
         22:99:b9:1c:db:76:ed:0e:47:b4:4e:92:76:8b:4b:cf:3b:d8:
         a1:c6:d8:a4:e7:5e:d1:a0:15:7f:f4:d6:aa:30:d6:43:77:86:
         ba:77:fa:7d:0a:32:ae:bc:4d:aa:22:73:f9:68:ff:a1:a9:92:
         3e:b4:61:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org