Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/O3oJBxerKF7qXA5XfnDZZtkURiw.roa
File:                     O3oJBxerKF7qXA5XfnDZZtkURiw.roa (raw, json)
Hash identifier:          sjHzTUPMSQBTL8sVq0zLnETBQyu0FNycLRHVvLCcAtU=
Subject key identifier:   3B:7A:09:07:17:AB:28:5E:EA:5C:0E:57:7E:70:D9:66:D9:14:46:2C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0344
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/O3oJBxerKF7qXA5XfnDZZtkURiw.roa
Signing time:             Tue 25 May 2021 02:43:00 +0000
ROA not before:           Tue 25 May 2021 02:43:00 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        61.120.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:00 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=3B7A090717AB285EEA5C0E577E70D966D914462C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:b0:43:23:f2:56:35:fd:32:15:b5:b0:9f:
                    b9:93:1a:3c:73:2d:0f:de:6c:fe:bb:2a:88:2c:5b:
                    42:af:a9:9d:50:0f:ff:d7:52:f3:b3:bb:d9:cf:98:
                    ab:d8:ae:bd:cc:49:a8:ec:14:e6:ab:e9:9d:e9:71:
                    78:93:74:17:d3:cb:d7:ec:4f:fe:43:13:39:69:31:
                    1c:8f:da:eb:ea:e4:47:af:30:84:00:2d:c9:a2:a2:
                    f5:ca:04:13:6e:b0:53:da:f4:11:dc:0e:d9:9b:a1:
                    77:22:2e:10:47:29:13:1f:fa:65:a9:61:14:91:73:
                    6c:4f:ce:ab:b7:38:eb:ff:f8:a4:78:2e:6b:54:52:
                    1a:c5:4a:ac:aa:b1:fe:75:24:4d:33:17:68:e8:df:
                    12:16:71:a7:14:eb:07:84:4b:49:5d:ac:f4:09:a2:
                    17:b9:90:97:be:59:bc:e6:14:d1:0e:8f:87:08:b8:
                    3f:09:9a:22:11:e2:c1:13:4c:a7:7b:eb:10:ef:50:
                    8c:cf:97:29:51:39:7e:09:75:1b:26:27:31:3b:2e:
                    f7:6f:90:e2:ca:ea:a6:81:78:0b:57:0a:8d:8c:dd:
                    18:c8:dc:d9:f9:b8:3e:fe:c7:76:b1:75:95:5e:2c:
                    1b:7e:ff:c1:35:4f:ab:3e:c5:b7:04:a6:00:5b:f2:
                    52:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7A:09:07:17:AB:28:5E:EA:5C:0E:57:7E:70:D9:66:D9:14:46:2C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/O3oJBxerKF7qXA5XfnDZZtkURiw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         41:2b:da:79:fc:9f:f4:cc:05:ee:b6:b2:19:dc:26:3c:f4:95:
         fe:d5:82:5a:e9:72:0f:89:4c:5a:bb:1d:bc:7d:28:2f:07:ce:
         c7:5f:23:4d:76:df:37:ea:b4:10:4b:7a:58:15:f4:c8:ae:56:
         79:1f:71:18:9c:af:66:a7:93:fc:8a:04:4c:ca:51:da:8c:fe:
         68:65:91:68:39:60:2c:ef:11:7d:a6:dd:2c:5d:a4:02:e5:3e:
         33:2f:8a:7f:e2:75:ef:b8:e2:cd:95:50:3b:19:24:bd:b3:a5:
         2d:30:a9:33:9e:01:df:a6:10:c9:e4:22:0a:30:0d:cf:33:70:
         72:93:4a:c8:dd:7f:44:f9:cf:97:a7:fb:13:fc:0a:bb:1c:fd:
         38:30:81:6c:1c:4b:e9:89:92:d4:64:31:dd:ef:bc:3b:53:f2:
         ea:14:62:90:a0:7f:ea:4c:4f:de:8f:84:6e:e5:da:63:64:a8:
         22:ff:c0:47:6f:97:de:00:e7:18:de:75:58:be:dc:88:28:d2:
         3b:ed:e9:3e:44:62:04:48:b4:4b:45:27:47:a5:67:b7:b1:ff:
         57:a8:d4:e5:c8:00:07:0f:63:17:2d:3e:e2:cf:1e:d1:ec:70:
         12:c7:21:1f:21:47:ba:a8:52:4e:c1:a2:88:e3:df:fe:58:c4:
         b3:07:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org