Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/B07F_tbUZhqGppXESeMKYJw8sc4.roa
File:                     B07F_tbUZhqGppXESeMKYJw8sc4.roa (raw, json)
Hash identifier:          MbBZW4aV2MOh6+0OgfS7bmsRKzZrxn4Qh6QReuODjgE=
Subject key identifier:   07:4E:C5:FE:D6:D4:66:1A:86:A6:95:C4:49:E3:0A:60:9C:3C:B1:CE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       79
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/B07F_tbUZhqGppXESeMKYJw8sc4.roa
Signing time:             Mon 24 Oct 2022 02:14:15 +0000
ROA not before:           Mon 24 Oct 2022 02:14:15 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9617
IP address blocks:        61.205.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:14:15 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=074EC5FED6D4661A86A695C449E30A609C3CB1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:71:31:12:93:81:ce:53:57:1d:fc:a9:43:
                    14:e6:b7:88:e8:f3:10:2c:89:b3:2d:b2:17:75:45:
                    93:97:ff:59:8e:a3:1f:22:ca:de:b9:46:ec:11:4e:
                    43:72:40:63:0b:e2:ca:9d:c1:37:bd:6f:6f:55:70:
                    7b:c2:af:9d:ea:b1:3f:a2:41:a2:44:d1:54:4f:80:
                    e2:8b:81:76:ce:60:13:36:a9:58:94:e0:19:92:36:
                    a7:c2:d9:14:13:9e:d8:5b:08:69:85:c5:c9:0f:37:
                    1d:c9:8f:c9:4f:3f:cc:f4:16:51:70:51:85:7e:4b:
                    0c:7c:82:28:fb:49:4c:d1:69:cd:92:18:12:83:1c:
                    eb:bc:f8:3b:69:68:74:19:27:25:90:ef:bb:38:4a:
                    b1:12:6d:10:4f:4f:ee:0a:f1:73:58:41:1b:95:8b:
                    8e:05:db:29:5e:71:fe:3a:d4:63:91:fd:02:4d:76:
                    51:71:df:95:5c:60:05:40:a9:f7:48:97:bc:ab:22:
                    18:99:51:98:20:d1:fe:db:88:46:1f:17:86:3f:8f:
                    7f:93:96:db:f0:26:5a:7e:6c:5e:37:5d:56:d6:13:
                    a7:09:68:f0:fe:1a:07:a7:7e:90:b9:ab:f6:19:8b:
                    0a:14:50:ed:f4:19:e1:80:80:2e:57:b4:3e:8d:40:
                    77:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4E:C5:FE:D6:D4:66:1A:86:A6:95:C4:49:E3:0A:60:9C:3C:B1:CE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/B07F_tbUZhqGppXESeMKYJw8sc4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:fd:16:3d:48:c9:7f:95:41:4b:f4:9d:90:51:ce:2b:6b:4b:
         22:f1:51:9a:04:87:b3:8d:37:e3:60:07:02:0a:cb:51:90:49:
         5e:d8:2e:a8:87:25:1c:37:f4:a2:2f:dc:3a:60:dc:99:e8:a7:
         90:4a:0f:e9:72:69:ee:d1:fd:a5:6d:41:3a:70:89:87:c7:8b:
         c3:63:aa:cd:0c:99:53:13:52:29:33:da:f9:82:ae:c7:33:59:
         da:9b:24:13:33:bb:9e:8d:0e:5a:ca:d7:0a:c7:4d:02:d0:cf:
         65:05:64:a7:73:57:f2:6f:f3:08:c3:18:7d:4c:70:bf:58:14:
         a3:c1:94:4a:5c:3d:96:25:87:a7:a8:d5:1b:bd:52:d9:1e:c5:
         f4:b7:02:c8:30:0a:3b:3f:1c:35:79:9d:e0:74:e5:65:b4:6a:
         c6:13:07:28:1b:2f:df:59:20:42:80:7c:ea:31:22:94:65:c7:
         df:34:be:4c:54:47:1d:1e:f6:be:c2:55:cf:c4:3d:12:7c:d9:
         a1:87:a3:b6:f2:33:ad:39:17:66:d1:d5:c4:c8:e2:00:2e:4b:
         a7:ed:08:4d:8c:d8:d0:ba:02:02:c3:61:8e:92:c1:ec:99:f7:
         6e:bf:ef:22:17:f0:de:78:c4:7b:5b:0f:91:ea:30:eb:24:82:
         9d:1b:3b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org