Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/-urmvT75xe0HUKtu7O-qvnoKd34.roa
File:                     -urmvT75xe0HUKtu7O-qvnoKd34.roa (raw, json)
Hash identifier:          rPzR/rmlvEuryFCnvt+vOOyOFGJ5PCsH1Clg0rb2J/w=
Subject key identifier:   FA:EA:E6:BD:3E:F9:C5:ED:07:50:AB:6E:EC:EF:AA:BE:7A:0A:77:7E
Certificate issuer:       /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
Certificate serial:       12
Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/-urmvT75xe0HUKtu7O-qvnoKd34.roa
Signing time:             Wed 16 Jun 2021 02:38:07 +0000
ROA not before:           Wed 16 Jun 2021 02:38:07 +0000
ROA not after:            Wed 15 Jun 2022 01:30:03 +0000
asID:                     17948
IP address blocks:        218.219.144.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
        Validity
            Not Before: Jun 16 02:38:07 2021 GMT
            Not After : Jun 15 01:30:03 2022 GMT
        Subject: CN=FAEAE6BD3EF9C5ED0750AB6EECEFAABE7A0A777E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:fc:be:d2:e7:d0:c3:ac:0e:4d:d5:00:a5:
                    a7:f1:40:fc:a9:e4:33:b8:64:d3:7f:70:39:88:73:
                    7c:5b:05:64:a8:91:7c:50:45:ef:c2:8f:30:4c:48:
                    5e:3d:d3:db:60:44:6c:4f:da:8c:68:de:74:33:dd:
                    79:18:fc:65:bb:f0:0e:f0:84:0e:48:82:aa:b7:dd:
                    fb:09:ca:1c:0d:c4:8c:0f:2f:6c:9b:13:16:27:fa:
                    16:6a:78:40:71:03:8c:cc:90:6c:7c:dc:ad:9e:58:
                    c3:29:f0:c7:e2:72:49:7b:60:c7:54:33:3b:8a:93:
                    e6:f7:a3:cb:39:80:12:9b:b6:aa:25:40:c7:70:9c:
                    83:36:f8:fe:79:4e:50:e5:25:eb:1d:2f:c2:e2:a9:
                    cf:03:d8:c3:92:72:90:5c:d9:8c:4f:af:c3:f8:98:
                    af:54:62:bb:cb:21:12:49:d8:75:16:7d:99:fd:a9:
                    48:0a:d0:97:46:0f:32:9c:15:7c:37:e1:c7:f0:80:
                    d2:d0:3e:84:02:89:e1:43:8a:bb:fb:e2:1a:be:c3:
                    2f:70:a5:2a:4b:49:08:da:cd:49:52:2e:b3:7a:1c:
                    59:14:bb:96:4c:5a:18:7a:22:cf:7d:15:9d:2e:df:
                    2e:59:1a:2a:ff:d4:d3:a9:ff:00:c4:29:3e:bc:84:
                    79:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EA:E6:BD:3E:F9:C5:ED:07:50:AB:6E:EC:EF:AA:BE:7A:0A:77:7E
            X509v3 Authority Key Identifier:
                keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/-urmvT75xe0HUKtu7O-qvnoKd34.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:64:09:5b:8c:b0:fe:5e:7b:d2:78:ef:1f:e0:3b:8c:7e:f9:
         42:44:3d:9f:f4:72:a5:2a:e9:ab:05:e2:90:85:43:1e:13:fd:
         66:e6:5b:3a:6e:82:66:e7:cb:f7:2b:20:68:5a:df:2a:e0:1b:
         46:da:4d:96:f8:0a:1d:96:19:ba:0d:a4:5b:c1:05:30:02:f4:
         50:85:e8:7c:95:09:de:ab:e8:44:02:b3:5b:fc:15:3e:8c:7c:
         bb:48:87:6d:a8:a2:1c:83:c7:da:6a:d4:98:ff:51:c5:86:d6:
         92:46:08:49:83:9e:ce:37:ac:19:7f:1f:5e:86:9b:21:6e:9f:
         c6:f9:13:84:bb:a8:84:ff:11:16:72:38:e3:99:7b:68:a6:94:
         86:55:dd:df:cc:81:5c:5b:59:97:d5:7e:44:1c:83:f9:07:9a:
         17:c8:bc:9d:38:1c:64:ea:95:de:e0:83:32:5f:90:4f:60:ec:
         ff:3e:3e:13:ed:df:76:ce:86:6f:02:60:91:df:af:d2:ef:33:
         17:64:94:b0:20:f3:66:ab:0c:9e:bb:45:4d:64:67:50:38:95:
         8e:f9:21:ca:53:35:9f:19:23:d6:5e:20:7a:9c:e5:05:51:3c:
         bb:43:8d:5b:f8:79:db:98:58:f1:6e:5e:f9:e1:01:9d:2c:1e:
         2a:e2:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org