Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/GKBFvsKB5gmqkJ-B7nAuAU75BH0.roa
File:                     GKBFvsKB5gmqkJ-B7nAuAU75BH0.roa (raw, json)
Hash identifier:          y/HFS4ToUP6gQb50iHBzQsQAjvWxAxi2SBTeWW3aZpI=
Subject key identifier:   18:A0:45:BE:C2:81:E6:09:AA:90:9F:81:EE:70:2E:01:4E:F9:04:7D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02EE
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/GKBFvsKB5gmqkJ-B7nAuAU75BH0.roa
Signing time:             Tue 25 May 2021 02:41:54 +0000
ROA not before:           Tue 25 May 2021 02:41:54 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        61.200.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:54 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=18A045BEC281E609AA909F81EE702E014EF9047D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:84:3b:75:d1:44:82:2e:f5:f3:1f:20:56:
                    ae:f2:2b:b9:1d:7a:5b:05:08:a4:ab:d6:d9:ae:9e:
                    da:98:90:11:2f:f5:48:b7:19:a0:18:1e:81:02:50:
                    7f:ed:9b:dc:1b:dd:92:16:d0:5b:b5:ea:a1:fb:d2:
                    6d:52:e5:bc:71:5b:ef:80:29:21:ad:99:f9:84:a4:
                    64:30:bd:7c:d8:a0:ca:c1:66:31:a5:6f:a5:08:16:
                    3b:ab:84:d0:a0:9f:d8:8d:6b:f3:82:d7:b5:2b:2f:
                    6b:d8:b8:6f:55:6e:7b:35:cf:46:b3:f9:9f:5f:83:
                    8f:c9:71:41:38:56:b6:30:a4:fb:71:05:3e:87:f4:
                    51:75:e6:ac:52:f9:cb:4a:8f:d6:3b:f2:9a:f8:56:
                    09:31:c7:01:da:66:9b:35:8f:0a:7a:54:99:40:03:
                    66:26:22:46:0d:76:ed:eb:50:f4:c8:20:51:3b:20:
                    ca:ec:b6:ce:31:9b:51:1c:8b:14:61:66:85:ac:77:
                    76:5b:34:52:1f:07:26:14:81:6e:f1:eb:1b:6a:96:
                    88:16:a0:ec:be:9b:1f:7c:7b:03:1a:25:dd:82:0f:
                    0f:44:0e:96:ca:09:8f:0e:2a:87:22:57:db:da:e0:
                    db:01:37:7a:51:9c:69:5e:32:72:81:fb:e6:8d:d0:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A0:45:BE:C2:81:E6:09:AA:90:9F:81:EE:70:2E:01:4E:F9:04:7D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/GKBFvsKB5gmqkJ-B7nAuAU75BH0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:93:c9:bc:10:a2:85:91:fc:b6:22:52:af:8e:94:c1:47:be:
         38:d6:cb:2d:98:ba:29:0c:e4:78:94:fb:1c:29:cd:18:41:26:
         b5:60:bf:54:1a:39:aa:d1:20:f0:f8:1c:62:fe:b8:8d:c7:fe:
         1d:62:52:f0:55:a7:33:42:52:1c:9b:31:0c:6a:14:3a:27:c6:
         a0:5d:08:fb:0f:ef:74:de:1d:67:9c:d7:89:28:89:71:00:ed:
         5e:a8:1f:37:ec:32:38:8c:5a:78:6d:bd:a7:d4:b1:69:81:2c:
         f0:93:25:19:3d:35:c1:c8:bb:d8:82:c6:39:7f:4a:50:e6:8e:
         72:07:31:34:b1:4b:75:27:b2:3e:9d:28:ad:68:c9:2e:be:c2:
         e4:a8:d6:b4:1f:a1:ae:8c:51:e2:b2:2d:23:8f:52:8b:94:9e:
         ad:3a:11:21:86:5e:9d:a8:c8:b0:5f:69:ac:54:4c:f1:fb:ef:
         51:6c:44:4f:d0:df:dc:92:32:28:da:cd:be:75:87:a9:06:20:
         2a:ef:f3:7e:49:8d:e4:f0:25:b4:a8:6d:31:76:ab:1a:a7:dd:
         44:0f:5a:c6:09:10:45:83:01:fa:e8:e7:92:57:c0:75:42:29:
         a5:64:fc:be:e1:92:ba:11:d4:e6:62:cb:c4:b6:a4:5a:ed:05:
         da:eb:b4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org