Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/4w_NNHMMjPdkU2l3dVEXOpqu6NA.roa
File:                     4w_NNHMMjPdkU2l3dVEXOpqu6NA.roa (raw, json)
Hash identifier:          s4C/nBREsXqusCRqmb821FnR3f59WYr6XwoTtNfwYB8=
Subject key identifier:   E3:0F:CD:34:73:0C:8C:F7:64:53:69:77:75:51:17:3A:9A:AE:E8:D0
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       016E
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/4w_NNHMMjPdkU2l3dVEXOpqu6NA.roa
Signing time:             Sat 01 Jul 2023 01:30:39 +0000
ROA not before:           Sat 01 Jul 2023 01:30:39 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        153.240.0.0/13 maxlen: 13

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:39 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=E30FCD34730C8CF7645369777551173A9AAEE8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:82:34:01:8b:06:05:ac:77:4d:19:8c:5f:
                    75:89:dd:ac:7d:9e:30:6e:4f:bc:d2:1f:ec:60:63:
                    83:83:7e:bb:a3:a9:c1:6b:75:dc:d2:1e:47:5a:95:
                    fe:2a:c1:fc:f9:08:0a:c0:8e:44:e0:75:41:2b:c2:
                    1b:5e:59:bd:eb:25:b0:25:80:8e:07:f5:ad:f2:6e:
                    e4:b2:ef:bb:5d:33:71:90:b1:bd:21:f7:32:c2:d8:
                    26:13:88:8e:90:56:63:f4:84:5d:bd:6e:2d:54:c5:
                    a4:cb:5e:f3:cd:e8:e3:01:e3:74:cc:f4:da:56:41:
                    c7:20:44:db:1a:67:87:66:dd:88:ca:f1:a5:0f:23:
                    cb:b3:5f:d3:e1:ee:77:70:85:97:25:2c:ca:8d:06:
                    63:f1:6c:65:80:7f:ec:e2:04:71:cc:cd:d7:f4:ae:
                    41:7a:00:59:27:7b:4a:5a:d0:18:99:da:a4:1f:2a:
                    0b:11:2a:bc:e1:ad:30:fd:e2:5a:98:a4:7e:60:9e:
                    76:e0:81:3f:a0:51:b2:44:ba:3d:42:42:ee:60:ea:
                    be:fc:38:6b:a0:87:d0:91:40:33:d1:58:62:04:a1:
                    58:df:4a:95:26:e9:53:fc:cd:9c:10:f6:d7:d3:1c:
                    1c:4a:be:59:f7:38:51:03:6b:6b:e7:f0:b5:99:72:
                    01:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0F:CD:34:73:0C:8C:F7:64:53:69:77:75:51:17:3A:9A:AE:E8:D0
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/4w_NNHMMjPdkU2l3dVEXOpqu6NA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.240.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         47:34:05:fa:ce:c0:b5:33:f8:68:b6:03:b3:2c:c1:f3:37:b2:
         56:1b:03:6c:51:7d:0d:ea:39:21:d1:89:0b:af:3b:12:7e:b5:
         11:7e:90:0a:d2:ab:de:27:47:a5:98:8a:9f:af:af:d4:7e:89:
         ee:32:6f:e9:3a:e0:0e:b0:3c:36:b0:02:27:35:e2:42:54:db:
         24:de:af:4f:3f:2c:d7:39:4d:b4:78:6f:37:8a:27:0c:c5:25:
         35:d6:e3:c1:3a:db:76:26:88:21:85:67:22:26:aa:00:3f:01:
         41:f2:4f:68:d8:db:3f:fa:d1:7e:f4:c2:56:61:4c:a4:30:c6:
         e8:1e:51:43:3c:7a:35:20:07:97:33:6c:9b:8a:c9:86:33:77:
         b6:ad:95:90:bb:20:bf:41:46:d8:b6:ff:5c:aa:26:c2:13:57:
         e8:39:85:e3:3b:d4:e1:a5:b2:4b:b9:72:43:af:ec:6e:de:a0:
         14:5b:04:44:67:01:34:6f:2b:6c:b9:5f:23:4c:d3:21:e0:4f:
         a7:8f:73:64:54:a9:3e:83:82:9b:93:a9:ef:0a:e2:86:85:74:
         ae:b7:94:fb:1d:7b:29:9e:2e:ed:a4:e7:92:94:de:b5:89:30:
         24:e8:08:2e:79:fe:28:64:2e:63:7a:c3:24:79:4a:91:ed:89:
         39:ed:87:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org