Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/s18VDN26OrVQ4r-GY_8jQ7b4Rzs.roa
File:                     s18VDN26OrVQ4r-GY_8jQ7b4Rzs.roa (raw, json)
Hash identifier:          snUIXxs/EKDDDV8EWqfb2RVZGrDEoY7oDdeFYrIcPE0=
Subject key identifier:   B3:5F:15:0C:DD:BA:3A:B5:50:E2:BF:86:63:FF:23:43:B6:F8:47:3B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0323
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/s18VDN26OrVQ4r-GY_8jQ7b4Rzs.roa
Signing time:             Tue 25 May 2021 02:42:51 +0000
ROA not before:           Tue 25 May 2021 02:42:51 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        42.127.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:51 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=B35F150CDDBA3AB550E2BF8663FF2343B6F8473B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2d:81:50:e9:c1:68:bf:81:02:0d:ea:ae:9e:
                    d5:b7:f8:54:de:ce:a3:dd:c7:3e:af:bf:4f:11:04:
                    d2:7e:00:74:5f:35:1b:9d:d1:9e:d7:16:6a:8a:24:
                    99:a1:03:00:68:69:22:59:4c:a1:a6:d4:50:4f:b6:
                    22:fb:fc:31:96:5c:db:e3:ce:0f:db:74:77:9e:58:
                    a7:01:0f:25:b5:75:53:d0:51:b2:64:00:c9:c6:61:
                    f0:e0:1f:dd:c2:83:74:a4:78:36:06:24:a2:10:92:
                    74:39:6d:97:6c:f8:3b:46:5e:e1:77:16:c8:a9:34:
                    67:27:65:da:60:d0:16:32:52:a7:f1:90:47:51:79:
                    10:a4:b4:9d:fc:df:87:da:1f:3b:c9:f9:48:47:51:
                    a4:74:96:d2:e0:81:28:b2:86:94:57:6d:82:7a:c1:
                    0d:9e:c0:d0:f1:2c:c8:bc:b3:66:de:b7:a7:d8:3f:
                    34:1c:a6:68:dc:a9:88:d2:32:ae:ae:7e:2d:69:e9:
                    0c:9d:d6:55:3e:7b:34:61:cb:f2:13:23:de:b0:6d:
                    0e:ec:07:9f:0e:5b:f2:f2:ed:b0:a0:c6:54:b3:24:
                    65:f8:c3:e3:a5:f7:cd:0e:ee:22:63:81:36:0f:e6:
                    c5:f1:8d:98:dd:fb:87:ef:d2:18:d0:eb:61:76:ea:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5F:15:0C:DD:BA:3A:B5:50:E2:BF:86:63:FF:23:43:B6:F8:47:3B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/s18VDN26OrVQ4r-GY_8jQ7b4Rzs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.127.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:48:b8:8c:a1:de:50:0e:86:4e:a9:70:05:39:3d:c0:d1:ac:
         97:3f:65:42:45:97:96:f2:41:c7:a5:23:d0:af:1f:1f:df:12:
         28:eb:bf:e8:db:11:fb:51:96:39:b0:32:4e:00:77:fa:15:ee:
         2e:93:d4:57:32:2b:de:33:b3:e6:2c:6f:6e:a2:e2:9d:7f:34:
         c6:c0:8d:b3:fb:79:b9:3c:97:89:3c:bb:53:75:cf:8e:47:b1:
         1c:2c:43:11:f7:41:15:4f:4c:02:32:33:2f:61:14:b2:a4:c0:
         27:e2:d9:a1:95:f6:50:83:7b:6e:3d:8e:58:69:6a:8f:15:99:
         8c:cc:0c:c2:b2:44:e9:ff:02:4c:e4:5f:ac:82:1b:c8:55:a8:
         68:07:ce:c9:12:bb:93:b3:d4:b8:11:c8:8b:b0:c0:ff:14:3b:
         c9:a8:77:a6:f2:48:b9:55:dc:4b:93:99:96:4d:4e:57:e0:ec:
         27:f4:e0:9f:0a:4a:8e:f6:32:bf:ba:f8:7c:4b:28:90:bc:2e:
         c3:68:6f:36:96:a2:3b:3f:bf:95:d8:3f:bc:20:69:81:3a:7c:
         b9:4a:aa:90:0b:78:8e:0f:0d:f6:03:a5:01:fa:ed:9f:12:f0:
         85:f3:3f:8e:1f:81:7c:2a:84:7c:09:24:58:26:31:07:9d:48:
         82:1d:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org