Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/a56SynfTG1uKRS4RON03i5djPQg.roa
File:                     a56SynfTG1uKRS4RON03i5djPQg.roa (raw, json)
Hash identifier:          UbWmplnPh8xSUUquRVCPA2U2FNeXDGEWcx+yYlxLkY8=
Subject key identifier:   6B:9E:92:CA:77:D3:1B:5B:8A:45:2E:11:38:DD:37:8B:97:63:3D:08
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       4E
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/a56SynfTG1uKRS4RON03i5djPQg.roa
Signing time:             Sat 01 Jul 2023 01:31:04 +0000
ROA not before:           Sat 01 Jul 2023 01:31:04 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     7684
IP address blocks:        153.126.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Jul  1 01:31:04 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=6B9E92CA77D31B5B8A452E1138DD378B97633D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:40:0d:3a:71:2c:79:4c:80:db:e4:d4:15:a6:
                    ed:33:8e:b2:51:d3:a6:5f:04:45:db:6e:f4:4d:ae:
                    cb:64:68:f6:4e:a1:3d:26:78:7d:35:f1:b5:9b:ee:
                    b0:da:66:cf:e3:aa:c1:b7:04:35:35:28:c0:f8:9f:
                    0d:fa:e8:a1:67:b9:32:cb:6c:33:af:a0:ef:c2:9d:
                    43:16:db:c6:3d:33:e3:fa:08:d7:f5:3c:3f:9e:c3:
                    e2:3c:48:52:e6:3a:f1:42:fc:e6:6a:3f:a1:a4:59:
                    99:a5:e3:bd:41:c3:4e:11:b6:7c:bd:62:01:74:a6:
                    62:aa:3d:ae:1f:ac:48:58:df:ee:bb:a7:5a:d5:7e:
                    b1:37:0f:87:d0:0a:b6:99:4b:51:d5:af:a1:c2:2e:
                    06:15:ca:e3:6a:b1:03:d4:c0:15:65:7d:35:eb:7b:
                    92:93:16:80:0a:f5:3a:ee:11:26:3a:e1:bf:63:72:
                    4d:d3:d1:0c:7f:f2:e6:eb:a2:b4:93:ef:78:22:18:
                    31:a4:5b:4f:3d:1c:8b:31:fa:12:38:87:f8:6f:40:
                    64:dc:69:b6:74:4b:e5:e6:ed:27:92:05:f3:22:27:
                    82:c7:82:90:92:aa:26:da:6a:93:a5:45:35:5c:f1:
                    e9:cc:f5:87:84:bd:17:f6:68:f7:bb:27:e6:fa:3a:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9E:92:CA:77:D3:1B:5B:8A:45:2E:11:38:DD:37:8B:97:63:3D:08
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/a56SynfTG1uKRS4RON03i5djPQg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.126.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a4:58:4d:3a:02:2a:9f:42:78:00:e3:dd:8b:71:b0:4e:7e:dd:
         6a:04:03:84:64:c9:d9:3c:f1:5d:7d:f9:ee:c8:16:c0:c7:73:
         58:cc:81:fe:1f:15:65:10:d5:e9:c5:d8:11:3f:89:1c:74:5b:
         97:64:9c:17:c1:7d:dd:f5:2d:ea:39:f3:0d:a1:8f:48:9a:02:
         db:7d:04:32:76:bd:b3:d4:65:76:33:73:62:75:d1:cf:4e:3d:
         ec:71:11:7e:dc:d3:53:2d:af:85:99:e0:72:d4:df:00:e3:fd:
         95:7c:b5:8c:3c:ee:51:8b:45:81:d2:35:de:87:3b:32:e8:50:
         14:d3:f9:d2:b3:8b:67:96:57:30:26:38:8f:64:62:b1:57:66:
         82:07:28:b2:4f:38:42:53:b8:48:48:85:6a:10:2f:64:19:69:
         82:17:fa:f1:f9:16:52:55:c9:c6:c8:6c:51:c9:a3:4c:7e:e7:
         c6:8a:52:5d:28:70:8e:24:03:af:24:3c:22:7f:fd:7f:2a:9e:
         3c:70:97:3e:2d:df:fa:3f:6c:f5:94:0e:bd:53:1f:c8:99:09:
         fd:8e:5d:be:4d:4c:b9:18:69:04:7d:ca:6d:36:79:90:99:f9:
         84:69:9d:78:e8:fc:5e:89:51:85:f0:54:74:3c:43:0f:06:ad:
         8f:9a:71:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org