Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/15SmJvB6ElpH4oRXcORAAw_eBZw.roa
File:                     15SmJvB6ElpH4oRXcORAAw_eBZw.roa (raw, json)
Hash identifier:          dnmiu4eh/sNFGUx0kN8S/UviTcIm+ayIoAEFrgjBBCU=
Subject key identifier:   D7:94:A6:26:F0:7A:12:5A:47:E2:84:57:70:E4:40:03:0F:DE:05:9C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0350
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/15SmJvB6ElpH4oRXcORAAw_eBZw.roa
Signing time:             Tue 25 May 2021 02:43:05 +0000
ROA not before:           Tue 25 May 2021 02:43:05 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848 (0x350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:05 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=D794A626F07A125A47E2845770E440030FDE059C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:b2:3c:35:b8:4e:9d:04:d9:95:6a:e1:4b:
                    78:45:5a:45:e2:27:26:d5:60:5a:fa:4a:02:7f:2a:
                    86:09:76:9a:ba:72:46:a4:15:b7:ac:4a:f1:d1:41:
                    4a:f4:ad:a6:e1:c1:9a:ae:f6:c1:d4:b3:9c:10:ad:
                    32:c0:db:8e:4b:ad:8f:ee:f4:81:48:a6:4f:a3:8f:
                    b9:0c:e7:3c:70:52:16:db:27:5e:31:4c:17:6b:09:
                    50:11:66:98:01:3b:cd:a4:27:2b:08:15:9e:68:da:
                    bc:a5:e4:2f:f0:34:93:2e:61:0d:f8:d9:d1:43:15:
                    8b:20:69:e8:b4:6d:6a:6d:7e:36:89:23:6c:69:1d:
                    cb:51:94:bc:88:4d:a1:59:90:5c:9b:59:6a:d1:86:
                    6c:68:42:91:87:e9:85:93:12:82:c8:8c:ba:76:6d:
                    94:1b:06:6a:ae:4f:82:59:ba:46:90:59:e2:e6:35:
                    84:fb:e4:b4:cf:8a:d9:30:3d:80:cf:9b:c5:c5:ea:
                    15:0e:3c:f8:b9:81:52:c4:83:91:11:4d:57:d3:e4:
                    6f:c9:93:3b:f4:df:3e:f2:2f:f8:9d:1c:e8:dc:26:
                    75:0c:74:e2:2d:a7:ef:e7:45:9f:32:90:c6:3e:a2:
                    13:e2:94:4a:ed:94:b9:1f:fa:8f:91:dd:f0:92:ae:
                    17:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:94:A6:26:F0:7A:12:5A:47:E2:84:57:70:E4:40:03:0F:DE:05:9C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/15SmJvB6ElpH4oRXcORAAw_eBZw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:6c:0e:85:52:df:89:ba:49:5c:43:48:26:ae:6c:d8:61:8b:
         3f:cd:c1:90:70:99:44:c3:ed:4d:13:3b:ce:f7:88:d2:21:d0:
         5d:32:0c:f1:aa:44:3c:1e:2d:40:63:12:6b:dd:6f:90:46:7d:
         88:bb:36:f2:21:5e:34:f1:d1:0f:f4:fd:f1:90:9a:d5:cf:27:
         74:43:c3:10:cd:c6:98:42:dc:c2:ac:73:08:f6:16:d4:93:bb:
         f9:5d:4d:53:bc:09:68:86:a6:8b:49:3f:5e:c8:2c:5e:ce:4d:
         8d:43:90:05:a6:77:88:5f:78:af:03:a2:8d:9e:8c:73:62:91:
         ca:58:2f:5e:e4:a3:48:70:22:21:b1:40:58:b8:ae:8a:ec:e7:
         c2:67:76:81:b2:fb:14:17:5d:ac:61:0b:2d:3b:36:69:4a:ae:
         4b:e2:f4:3e:3c:3b:28:61:26:cf:fd:6f:7a:2b:95:d2:37:c0:
         bd:b5:40:09:27:d8:ec:0f:cd:5e:02:91:74:c7:ca:97:d6:42:
         8d:93:48:46:4d:4a:24:5e:b2:e5:47:09:49:68:dd:ea:ff:ca:
         10:33:81:82:a1:2f:74:ca:78:68:e7:50:0d:a5:7c:df:9e:e5:
         42:5a:16:2c:2e:9f:e1:4a:ca:04:0c:61:2f:db:ac:c5:28:01:
         e5:98:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org