Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/uqzy2XujrKej0Lgo-Rf13FsDkFs.roa
File:                     uqzy2XujrKej0Lgo-Rf13FsDkFs.roa (raw, json)
Hash identifier:          sHg4JanW2P9bFEU6qiiWMenY6KwQW9zjJ3UZJKywXzA=
Subject key identifier:   BA:AC:F2:D9:7B:A3:AC:A7:A3:D0:B8:28:F9:17:F5:DC:5B:03:90:5B
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       0C
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/uqzy2XujrKej0Lgo-Rf13FsDkFs.roa
Signing time:             Thu 20 Oct 2022 06:22:22 +0000
ROA not before:           Thu 20 Oct 2022 06:22:22 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        180.188.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:22:22 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=BAACF2D97BA3ACA7A3D0B828F917F5DC5B03905B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:d0:7b:ae:23:fd:aa:94:5b:8d:fb:11:19:
                    a6:7a:49:16:ee:be:ef:93:95:99:c4:65:42:d5:6d:
                    82:a9:d2:7d:53:b9:57:6e:e3:cf:50:fa:e0:1b:00:
                    e2:4d:63:e9:e2:44:99:e5:6c:dd:8a:4b:26:39:04:
                    b1:0c:0e:48:c9:b7:8a:51:76:16:74:31:bb:ef:a4:
                    42:2f:88:b1:8e:77:c2:05:e4:ba:49:68:5f:50:38:
                    33:9c:90:a3:20:a0:76:70:d2:b6:fb:4c:84:60:36:
                    e5:67:57:b3:24:cd:b8:89:45:09:20:aa:9b:2d:1c:
                    2e:e8:ef:ab:1a:e4:56:44:59:4a:11:df:7f:79:64:
                    27:1a:fe:d6:28:f5:a8:53:a1:b0:28:13:cf:a4:26:
                    f0:c7:4d:0d:dd:da:3f:f7:70:19:e5:41:4d:1c:be:
                    d3:57:c2:f9:d7:b2:4e:21:8e:64:b7:74:66:36:e1:
                    fe:bb:82:03:d7:89:c1:6d:44:97:c9:a3:b7:68:b4:
                    6d:41:1c:a2:0e:bb:c3:0f:fd:3b:f1:58:ec:70:c0:
                    29:c6:39:03:a9:01:15:96:d2:3d:e0:82:07:ee:58:
                    4b:99:b8:52:b6:55:e2:a1:ec:b5:6b:c8:43:42:71:
                    b4:dc:50:c6:01:24:ce:8a:99:5b:de:31:6f:27:3b:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AC:F2:D9:7B:A3:AC:A7:A3:D0:B8:28:F9:17:F5:DC:5B:03:90:5B
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/uqzy2XujrKej0Lgo-Rf13FsDkFs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:5b:45:e9:c7:2f:31:a9:4a:9d:42:2b:a9:43:9e:69:53:b9:
         e7:a2:95:ed:fe:21:0c:d6:0c:ea:e7:9f:0e:ae:50:d8:c5:05:
         28:ae:70:1f:81:d0:f2:bc:60:1d:8d:dd:c2:3d:c2:c5:30:dc:
         b2:1c:8b:b8:7b:d5:5f:5b:09:77:2a:61:53:1a:ff:00:f1:49:
         fe:34:5a:31:00:9f:14:d0:a8:99:34:06:ec:fd:30:8e:6b:a4:
         a1:22:9b:dd:cf:e8:ac:3c:d5:1f:73:f5:d1:0e:ed:cd:65:d9:
         63:17:f2:1f:a0:47:92:52:8d:09:c1:a2:7d:6f:28:1f:7a:3e:
         85:a2:33:3b:72:0c:1b:80:d3:d7:e3:62:3e:d6:79:b9:1e:87:
         4b:fa:1e:a2:0e:d1:c1:42:26:3f:2d:01:93:ef:21:f6:ac:12:
         93:4d:d3:0d:e4:d9:dc:e4:4e:d8:81:f0:78:f7:6f:32:26:89:
         82:1c:93:d9:6d:d7:bf:25:c8:ca:0f:40:3e:99:90:5e:12:33:
         10:ab:43:a6:94:35:cd:e7:af:1e:5a:40:ff:48:65:fb:66:00:
         19:98:20:ea:3b:65:d7:a6:0d:b9:b9:3b:7a:f3:62:db:77:95:
         0b:8e:56:6b:b8:df:5a:56:15:18:5f:9f:14:25:3a:53:f7:8d:
         2f:20:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org