Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/umh7B65i3w1Kw8kFi_Lxxrunen8.roa
File:                     umh7B65i3w1Kw8kFi_Lxxrunen8.roa (raw, json)
Hash identifier:          ZnNzue76RbkuGQnH1E4vLrCRp2PMToQSmJreZdFR/40=
Subject key identifier:   BA:68:7B:07:AE:62:DF:0D:4A:C3:C9:05:8B:F2:F1:C6:BB:A7:7A:7F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       B4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/umh7B65i3w1Kw8kFi_Lxxrunen8.roa
Signing time:             Mon 24 Oct 2022 04:34:55 +0000
ROA not before:           Mon 24 Oct 2022 04:34:55 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        211.19.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:34:55 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=BA687B07AE62DF0D4AC3C9058BF2F1C6BBA77A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:10:77:7a:d9:f2:e6:65:bf:1e:2b:f0:11:
                    26:0b:19:01:28:1c:ee:12:58:76:86:39:51:f4:6d:
                    aa:28:bb:ec:c3:f0:53:f7:c8:6b:c8:cb:cd:db:5e:
                    26:98:0d:8b:b7:3e:f6:02:97:67:ef:b6:db:ef:2f:
                    46:8d:2b:06:fa:ce:da:a1:02:a1:da:e3:ad:b6:01:
                    83:e5:e3:e9:73:7c:c5:aa:94:3b:75:5b:81:46:71:
                    d7:2d:3f:11:99:73:dd:2c:92:83:5e:04:2a:85:80:
                    6e:36:14:20:f1:10:55:5d:f3:89:a0:d9:13:58:ca:
                    08:2d:09:23:72:ba:5e:cb:f8:08:44:b0:6c:56:e4:
                    4b:d4:3e:d8:4b:e9:fc:10:d3:a8:3e:46:fd:c0:2b:
                    a8:87:73:d4:0c:49:66:30:89:da:c4:3d:ea:5d:1b:
                    0e:02:3c:a1:1a:db:98:97:be:39:96:46:52:63:92:
                    61:9c:0a:22:85:db:d5:1c:f5:cb:25:ed:65:17:68:
                    2e:e5:fd:4e:d1:7f:2e:00:0d:b3:02:04:c2:e7:d1:
                    6a:fb:7b:31:1c:ec:3a:7c:d6:d0:e7:20:7b:b7:39:
                    62:f9:b3:41:25:d6:52:89:49:af:fa:68:87:78:73:
                    3c:ff:c2:6c:f6:22:47:78:fc:7d:77:86:86:1a:8f:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:68:7B:07:AE:62:DF:0D:4A:C3:C9:05:8B:F2:F1:C6:BB:A7:7A:7F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/umh7B65i3w1Kw8kFi_Lxxrunen8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.19.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e2:ac:f3:f0:7a:36:fb:3e:32:1a:1d:c8:2b:52:4a:8b:3d:a2:
         71:b5:57:b3:ba:99:00:8b:db:49:d7:be:dc:94:11:94:68:6b:
         5b:30:2c:49:5c:1d:d5:89:d8:bb:90:10:6c:75:6b:52:f0:5c:
         b3:81:cb:98:d4:9e:6b:ce:6e:e3:48:00:0d:12:c1:bd:08:a0:
         43:c8:0f:4c:2e:f9:88:14:4b:9b:14:62:53:f3:4d:07:ab:2b:
         40:34:96:f3:ac:56:12:f7:1c:fa:74:f8:d6:9b:ba:53:ea:4c:
         0d:67:ec:d3:c0:47:52:32:04:db:16:af:47:16:a5:1b:f2:f4:
         0c:11:58:13:f5:67:f1:2f:e3:f5:4e:cf:9a:ea:76:67:dc:71:
         54:87:d5:27:77:ac:94:56:50:67:e4:88:9a:79:61:9d:7f:df:
         17:98:c2:e4:73:a6:b5:43:fe:fd:8e:64:20:5d:fd:f7:92:23:
         c0:52:6b:55:c6:2a:bb:4c:12:be:36:d1:8b:e8:b8:24:25:5b:
         47:ce:f4:1e:38:d7:0b:e8:71:aa:26:ca:94:c7:5c:6c:d0:5f:
         27:a6:ae:08:07:11:4b:cc:80:b3:e7:0c:15:3b:e0:d2:ac:b5:
         c4:c3:f6:7a:bf:71:a3:d4:1e:0c:0e:19:69:a0:98:6b:2c:74:
         1f:24:9a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org