Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/orPv_ujdAuk5tAsUrqVCYiPK0tQ.roa
File:                     orPv_ujdAuk5tAsUrqVCYiPK0tQ.roa (raw, json)
Hash identifier:          EmlGob4nGjGNEcDyxvZpDmb0KheZ0LWQZPhJOEMqF58=
Subject key identifier:   A2:B3:EF:FE:E8:DD:02:E9:39:B4:0B:14:AE:A5:42:62:23:CA:D2:D4
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03D7
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/orPv_ujdAuk5tAsUrqVCYiPK0tQ.roa
Signing time:             Sun 01 May 2022 01:33:02 +0000
ROA not before:           Sun 01 May 2022 01:33:02 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        219.124.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:02 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=A2B3EFFEE8DD02E939B40B14AEA5426223CAD2D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:78:0f:61:d0:13:2c:4b:fa:0a:f3:bc:f7:
                    21:ca:91:d3:97:59:20:26:0d:67:52:a9:eb:73:93:
                    42:0a:6e:e2:a3:95:94:78:d7:86:aa:74:5e:30:57:
                    f2:92:29:8e:c3:04:d9:98:ee:a5:5c:e9:de:82:06:
                    25:57:46:a1:fb:d6:66:d9:1a:aa:7b:75:56:00:90:
                    fb:36:bc:19:fc:68:7a:3c:d5:94:e6:7e:38:17:99:
                    58:2a:72:a9:c6:fd:e5:36:88:30:5d:0f:cd:ea:28:
                    67:e9:e9:e4:21:bf:a2:ce:1a:06:f4:9c:39:b4:56:
                    03:fd:30:03:68:ec:e7:a6:b7:c6:90:c5:bf:3a:ad:
                    42:68:a4:be:7c:10:8b:e3:95:6a:ff:e3:a6:c0:37:
                    72:e8:69:46:92:da:86:c2:8e:df:48:79:a1:94:44:
                    1e:c3:bb:ce:c2:1b:35:da:72:87:e1:68:01:79:12:
                    e7:fb:0e:5f:02:95:a1:96:5f:2f:62:0a:af:bc:91:
                    b6:41:58:79:a6:8d:48:78:04:8c:e3:39:47:c9:12:
                    01:4a:e4:2b:2b:d8:50:9d:4d:11:40:d7:a8:ef:8a:
                    76:8e:d4:16:a8:b3:6c:43:1e:96:55:66:07:21:a3:
                    0c:79:a5:60:06:95:16:5f:98:b0:00:ee:5c:db:49:
                    4c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B3:EF:FE:E8:DD:02:E9:39:B4:0B:14:AE:A5:42:62:23:CA:D2:D4
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/orPv_ujdAuk5tAsUrqVCYiPK0tQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:0d:bf:56:8b:fa:9c:f6:96:27:cf:44:a0:ca:64:53:f4:97:
         1e:e0:5f:ad:5b:6c:e5:ed:ec:28:03:b7:5f:aa:87:a1:2e:a3:
         81:51:41:d1:02:fa:f1:50:c4:fe:dd:79:fb:dc:28:2d:18:20:
         e3:49:96:39:d5:0f:e2:24:60:69:a6:e4:71:87:48:9d:50:b3:
         c0:87:4a:86:b0:69:0e:f5:b2:4c:b3:1d:70:84:2f:44:07:00:
         14:6e:c3:2e:d8:ee:a0:1e:23:78:8e:f7:97:89:08:f3:e4:47:
         1a:79:28:79:76:18:82:ed:11:b1:5c:29:0c:b7:cf:0a:b6:3d:
         56:bc:5a:ca:0f:5a:78:9a:7a:80:10:7f:f7:6d:58:71:e5:5a:
         21:64:58:b5:3b:45:87:2e:b7:21:8c:8b:00:e1:44:6d:b9:13:
         a5:49:54:29:3f:ae:dd:40:b2:83:12:7a:71:1d:08:f3:b4:51:
         d1:69:d4:36:77:ff:54:4e:64:ce:fe:db:07:c8:0a:d9:0a:c5:
         cb:b3:59:f6:84:78:52:44:7c:68:cc:2e:49:75:58:3f:f2:90:
         01:00:4c:f6:a4:b8:b2:cf:65:e9:a8:01:19:12:ae:43:5f:f5:
         12:59:74:08:45:83:cd:a9:5c:3b:f1:85:95:f9:b5:c2:9d:eb:
         3f:29:3e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org