Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/ly9hVUreST05Rs4kvBF0hJoON_Y.roa
File:                     ly9hVUreST05Rs4kvBF0hJoON_Y.roa (raw, json)
Hash identifier:          nQMxsKAEn0kRJJfnZQewAEXrqggldCtaKEOt+NXGPzk=
Subject key identifier:   97:2F:61:55:4A:DE:49:3D:39:46:CE:24:BC:11:74:84:9A:0E:37:F6
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0D
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ly9hVUreST05Rs4kvBF0hJoON_Y.roa
Signing time:             Tue 09 May 2023 08:16:39 +0000
ROA not before:           Tue 09 May 2023 08:16:39 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4685
IP address blocks:        122.223.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: May  9 08:16:39 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=972F61554ADE493D3946CE24BC1174849A0E37F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:90:e4:9f:7e:dc:58:c0:8f:32:9b:84:8a:
                    3e:4a:88:00:22:09:7b:76:80:b9:e6:1c:63:2a:c3:
                    78:50:2f:5e:fb:da:92:8a:c8:ef:f7:6f:88:54:56:
                    28:06:29:a6:1c:27:a9:e0:7d:6a:a3:7e:0a:38:ab:
                    a6:2f:b1:ae:62:57:f4:31:ea:f0:3d:56:e0:09:33:
                    d8:37:89:56:85:39:9d:bb:77:88:6c:63:a3:50:df:
                    b7:90:d3:fc:52:ed:3a:bc:fe:ae:77:4c:86:af:77:
                    00:59:a6:eb:f7:41:49:ee:fc:8f:b6:e0:53:45:1e:
                    a6:e1:5f:fc:85:1d:d2:84:cf:fd:3a:8e:11:8b:f3:
                    71:7d:74:98:bf:88:ed:dd:2f:d0:06:24:71:2b:a1:
                    ac:86:ad:6f:70:ea:ba:c9:b7:2f:63:be:9d:80:74:
                    e3:15:c7:9c:51:75:7a:78:ec:51:a3:bb:d9:67:f1:
                    ad:68:83:cd:37:bd:57:6b:dd:ca:a8:0c:eb:2d:57:
                    ec:09:96:c5:10:09:bc:2a:a5:24:6c:93:05:4c:19:
                    2a:7d:2f:57:08:d3:5f:c4:1b:fa:70:75:f0:6c:52:
                    ba:91:b3:76:9c:47:b3:d8:82:d3:11:20:34:13:39:
                    80:0e:68:15:2e:b8:a3:eb:11:61:d3:56:60:fe:9c:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2F:61:55:4A:DE:49:3D:39:46:CE:24:BC:11:74:84:9A:0E:37:F6
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ly9hVUreST05Rs4kvBF0hJoON_Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.223.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:ae:e1:cc:be:a7:5b:a7:33:f5:20:f5:e6:14:54:48:2c:35:
         de:eb:47:c7:8a:e5:f1:6f:f8:c3:ec:ba:fd:c8:52:2d:51:fc:
         67:1b:56:dd:9c:e4:39:9a:ca:20:55:96:82:33:c9:78:67:9c:
         31:7b:a9:2e:41:12:04:2e:ae:2e:db:b5:9a:18:7e:1f:0d:83:
         4c:f5:e5:8e:d3:38:ee:78:a6:79:ca:81:ce:d8:c7:62:fe:e7:
         43:f0:c4:2f:bb:a8:32:b5:b1:b2:35:96:38:13:18:ed:cc:ee:
         15:a5:58:c0:56:0a:a3:1a:39:ba:e0:3f:2f:6f:de:9e:82:0b:
         18:61:67:28:17:71:75:a7:92:62:9f:f8:84:b1:d1:47:12:52:
         33:96:15:7e:03:f6:d9:b2:3d:d2:16:99:f5:29:5e:99:b1:0b:
         bb:c4:59:b9:89:f8:fc:ac:97:28:b6:61:2e:12:b7:a2:e1:a8:
         a7:ce:cf:84:a6:fd:88:38:33:15:6d:bc:4f:7f:9e:0e:bb:60:
         db:1a:00:fd:34:1b:c3:fc:36:51:e5:bb:91:ac:8c:52:13:3e:
         17:72:c6:30:48:43:1a:54:89:d4:b8:32:8d:66:ef:1d:3b:7b:
         f6:46:08:0e:8d:da:fb:44:c2:3e:eb:bd:a2:6f:3f:33:29:5a:
         0f:41:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org