Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/-eIsNFkov39hdwiW_0csCCLseWM.roa
File:                     -eIsNFkov39hdwiW_0csCCLseWM.roa (raw, json)
Hash identifier:          1OVmOUixAV4zjKv9sMzqZ3HGlecTUTcXWlfASpvtHLo=
Subject key identifier:   F9:E2:2C:34:59:28:BF:7F:61:77:08:96:FF:47:2C:08:22:EC:79:63
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0312
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-eIsNFkov39hdwiW_0csCCLseWM.roa
Signing time:             Tue 25 May 2021 02:42:04 +0000
ROA not before:           Tue 25 May 2021 02:42:04 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        27.121.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:04 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=F9E22C345928BF7F61770896FF472C0822EC7963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f7:3d:bd:fd:9b:ec:bc:48:33:63:14:3b:b5:
                    ea:01:8e:c7:7b:1c:ae:72:94:e7:fa:bc:f5:75:4c:
                    9f:b2:47:fd:ac:25:dc:65:7b:7c:e5:dc:6c:78:a7:
                    7f:93:1e:d5:c4:6e:52:05:4f:57:2b:df:23:a2:b9:
                    8e:fc:1a:76:78:8b:cc:35:bd:4d:96:69:b4:ed:e3:
                    ea:3e:ad:dd:ee:64:65:66:93:27:e5:e5:94:b1:56:
                    8f:a5:0a:f0:d3:1d:be:d4:99:ce:59:33:fb:7d:bb:
                    6a:4c:74:46:8b:4a:b0:9c:72:78:54:79:de:88:bf:
                    bc:d7:56:3e:aa:51:8e:bc:00:8a:43:19:34:1e:5d:
                    1a:16:da:0d:83:0e:71:7a:04:e3:dc:cb:ad:d5:62:
                    11:00:1e:87:68:a3:d0:9e:ef:f4:9a:50:3c:df:11:
                    6e:38:6a:0b:2e:c1:88:12:28:82:42:05:67:20:0e:
                    12:4f:ac:b0:c7:c4:02:27:a0:c0:f4:6f:5b:85:15:
                    ff:d1:8c:b7:42:92:ec:d3:6a:6e:2f:58:40:5a:2b:
                    38:14:46:34:e0:13:3b:5a:5a:f5:2e:be:28:29:37:
                    76:3c:91:25:55:ba:9a:77:f1:35:43:a4:7c:57:28:
                    17:70:1a:8b:cb:ca:1f:60:a9:6b:a2:74:a8:ba:e5:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E2:2C:34:59:28:BF:7F:61:77:08:96:FF:47:2C:08:22:EC:79:63
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-eIsNFkov39hdwiW_0csCCLseWM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:96:0d:a9:df:fd:f3:08:0f:ba:94:70:3e:c0:1c:8a:33:e4:
         2b:63:37:25:19:34:14:96:91:9f:5c:61:8c:2b:4f:ba:d0:5d:
         7e:16:44:0f:8d:28:f3:01:2b:f9:d0:ef:65:ac:ef:d7:d6:17:
         df:83:b1:be:65:f9:f0:48:ad:f0:a3:1f:dc:c2:05:f3:85:9a:
         dd:f8:79:a7:5a:7c:f9:23:b2:2d:e4:1a:32:dd:90:46:7a:79:
         d7:54:f3:f6:db:7c:c0:df:31:3d:8b:f8:5f:02:51:1d:6e:ea:
         4f:af:26:bb:47:a3:d0:5b:83:76:b3:95:0c:a3:08:92:e5:9a:
         32:dc:78:16:40:f0:b9:5a:7d:aa:b8:a9:56:a5:ea:12:b6:70:
         63:27:2d:83:f9:fa:cd:d1:47:93:ad:b0:bb:4b:95:4d:1a:bb:
         10:a2:ae:93:67:c4:96:dd:99:3a:ad:f2:52:0e:c6:48:18:0f:
         2e:ea:38:ed:60:43:ee:8f:18:37:ec:0a:08:c1:22:bd:2a:a5:
         3e:e2:45:91:a4:38:55:20:e6:5e:e0:9b:0a:a5:af:ab:db:59:
         f7:8d:d0:91:01:28:49:6a:90:c2:fc:42:db:8f:bc:6f:7a:ee:
         b9:9d:d5:b1:8c:c4:73:d3:45:1a:06:2f:fa:90:fb:7c:10:eb:
         24:2e:94:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org