Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/3C2XGjvgcA5QPC_zUOmhtQ7pNjU.roa
File:                     3C2XGjvgcA5QPC_zUOmhtQ7pNjU.roa (raw, json)
Hash identifier:          5Vb4XhsK8hXYyaRV6srpfXStIygBKj2GI7wr04JE9IA=
Subject key identifier:   DC:2D:97:1A:3B:E0:70:0E:50:3C:2F:F3:50:E9:A1:B5:0E:E9:36:35
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0187
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3C2XGjvgcA5QPC_zUOmhtQ7pNjU.roa
Signing time:             Sat 01 Jul 2023 01:30:49 +0000
ROA not before:           Sat 01 Jul 2023 01:30:49 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        211.6.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:49 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=DC2D971A3BE0700E503C2FF350E9A1B50EE93635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:33:36:98:e5:6c:13:bc:19:db:d6:24:be:
                    67:38:98:3b:c7:4e:a7:d4:92:f1:83:bb:61:cd:e6:
                    0c:91:ba:59:9c:9e:9c:1c:8b:c1:36:2a:74:c1:29:
                    58:f3:73:ed:5e:dc:8f:8c:00:f6:78:80:af:99:ed:
                    b5:e1:2a:5f:85:1f:6a:8b:54:ea:b2:c2:f0:01:9b:
                    3f:64:bf:8f:2b:11:ca:c7:2c:2c:96:7d:13:16:16:
                    69:46:4a:b0:45:2c:0b:14:da:ef:86:45:6c:80:33:
                    bd:01:c5:ff:45:ff:91:b2:74:84:79:7d:73:ac:b8:
                    72:7b:43:85:33:4f:44:63:47:6e:6b:d6:4d:35:00:
                    a5:3c:94:f5:62:d0:82:c3:f0:0b:13:27:a9:e9:b2:
                    ea:6c:98:66:b4:cd:89:08:c4:07:9c:e4:94:7c:20:
                    67:67:5d:87:c2:ee:c7:0e:e9:90:35:88:68:67:3b:
                    0f:50:1c:3d:76:80:6d:01:c7:c7:d4:85:e5:7c:bb:
                    2f:14:a2:88:fe:30:99:c3:16:96:9f:b0:65:35:ec:
                    0d:dc:1b:ef:82:2f:c9:8b:d7:7e:27:82:8e:84:f3:
                    21:fb:1f:fe:2a:36:5f:ea:20:c5:d0:09:20:c8:98:
                    5d:b7:96:9b:35:7f:33:64:39:02:34:46:8c:a8:30:
                    4f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2D:97:1A:3B:E0:70:0E:50:3C:2F:F3:50:E9:A1:B5:0E:E9:36:35
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3C2XGjvgcA5QPC_zUOmhtQ7pNjU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:df:f9:0a:08:dc:45:9e:2f:94:a3:77:4d:2c:5a:93:42:3c:
         2a:c1:15:28:14:e2:bd:51:47:b7:58:a2:00:e7:9c:d1:e5:77:
         bc:5b:c2:4e:80:1e:2c:a4:3c:43:3d:2c:ab:c8:48:d9:f8:14:
         6f:a4:6f:c6:93:78:77:ec:19:06:f7:c9:f1:a6:15:0e:c5:34:
         2a:0c:09:6f:27:b0:1d:6a:1d:3d:7e:bc:9d:ec:87:e8:3c:a2:
         6c:a9:fb:94:52:64:7f:ba:7e:77:2c:4d:32:3c:21:56:42:93:
         8f:ef:88:48:79:b8:33:f9:74:a0:eb:90:59:3c:7c:6e:7c:7c:
         de:57:ec:e7:dd:6c:e3:ba:56:67:c5:2f:5d:89:9c:91:5a:a9:
         fc:cf:1a:3c:fb:12:aa:c0:6e:e6:99:f6:a4:b5:33:be:af:2e:
         f5:94:92:45:31:2b:2b:34:79:90:75:54:c7:80:a8:73:f3:c2:
         64:ce:7d:d9:48:72:9c:7d:4d:d9:7a:be:c5:6f:ab:bf:3f:2a:
         35:df:bf:59:10:0e:06:17:f1:15:be:31:4d:ee:29:5c:7d:32:
         1f:ad:b6:f3:f9:61:65:38:e4:ce:f5:b6:3d:15:b3:fd:9a:6e:
         bf:95:23:09:56:09:5c:a6:2d:1f:61:8d:84:86:cc:98:f0:79:
         4d:1a:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org