Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/tnR_e7Ru4sx9FE80AlUp-zDMxds.roa
File:                     tnR_e7Ru4sx9FE80AlUp-zDMxds.roa (raw, json)
Hash identifier:          11LbPnOZA1Yj2KqccugCewoA/FluZuOiwxjyyPyXa+w=
Subject key identifier:   B6:74:7F:7B:B4:6E:E2:CC:7D:14:4F:34:02:55:29:FB:30:CC:C5:DB
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       034F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/tnR_e7Ru4sx9FE80AlUp-zDMxds.roa
Signing time:             Tue 25 May 2021 02:43:04 +0000
ROA not before:           Tue 25 May 2021 02:43:04 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        61.211.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847 (0x34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:04 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=B6747F7BB46EE2CC7D144F34025529FB30CCC5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:20:ce:c1:fd:ce:d1:30:2b:ef:6e:8d:9c:
                    f1:c8:3f:f8:b4:38:5d:7c:95:9c:9e:3c:db:a9:e8:
                    7b:b5:4a:e3:9e:71:91:e0:b8:3e:ee:3e:33:42:6b:
                    ba:92:76:0b:0f:ef:8b:9d:72:9f:4b:f2:f1:c2:d0:
                    9e:cb:84:a8:ec:bd:79:8a:01:47:87:da:9f:96:54:
                    d8:bb:c4:4f:43:43:3b:01:fc:6b:00:f0:76:b4:9f:
                    a4:96:f6:b8:b7:41:58:01:d5:08:85:2d:05:36:30:
                    ed:ea:1e:cf:98:57:a6:9f:72:54:51:c7:11:2f:93:
                    c9:de:98:41:0c:1b:6c:de:d6:02:b6:60:e2:92:78:
                    91:35:32:56:d4:b6:31:a6:c3:82:3e:cc:18:02:ad:
                    90:98:0e:57:ab:c7:f7:91:b9:92:35:78:d4:19:59:
                    c6:e6:b1:79:09:16:b5:16:5a:a6:ef:2e:49:76:13:
                    fa:62:9b:af:e7:63:02:34:42:af:b0:cc:71:bc:2f:
                    cc:32:59:c5:fb:8a:97:1a:d2:04:11:1c:f9:cb:bd:
                    74:72:7b:15:5b:c7:b9:75:e6:1f:d4:2d:9e:a9:3b:
                    37:7a:4d:3d:a8:9d:49:6b:10:ca:be:71:8f:f3:e2:
                    9d:c5:3e:33:ed:c1:52:35:88:ad:d3:39:aa:1d:b4:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:74:7F:7B:B4:6E:E2:CC:7D:14:4F:34:02:55:29:FB:30:CC:C5:DB
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/tnR_e7Ru4sx9FE80AlUp-zDMxds.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ba:f3:f5:42:a5:07:ac:b0:0e:91:dd:7b:e1:4f:27:61:8a:b5:
         6b:d1:05:b1:ad:8a:da:e8:8a:54:64:5c:b6:d8:cc:4c:84:9d:
         8e:2e:53:97:54:14:63:33:f0:de:d6:90:29:a6:96:c2:65:e1:
         92:d0:b9:4f:30:b6:bf:50:af:30:cd:0f:e8:19:d1:7a:ed:5f:
         cf:c2:c0:cf:8f:3d:bb:f2:1b:75:41:45:0e:d1:80:2b:9c:09:
         5d:36:ab:46:a5:60:b0:c9:97:21:2d:33:de:8e:16:c1:c5:47:
         bb:6f:e1:eb:95:74:4f:fe:1c:30:f3:33:7d:20:c4:9f:71:42:
         95:d3:2c:a6:c8:d0:98:4b:f5:9e:2f:e4:22:1c:13:98:66:60:
         2b:4c:a9:ef:ea:04:ce:80:4d:0b:f4:ed:af:a1:0a:93:74:6e:
         af:67:17:be:73:e2:72:d8:88:de:b5:b6:20:4c:e0:0c:cf:a2:
         97:f1:8c:0f:fc:3c:0a:79:f1:0e:61:48:5b:d9:68:81:84:e2:
         dd:8b:99:d6:8e:38:0f:94:4a:be:cc:26:cd:24:27:12:e1:e3:
         b6:40:4a:a9:d2:47:4e:d2:13:da:a3:dd:68:08:59:21:7a:dd:
         2f:1f:9b:96:cf:09:54:22:17:3b:85:64:4d:48:c0:81:b4:df:
         14:0f:b4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org