Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/6Th4Lb_LZQfU-Jc4FuXMSenGiIM.roa
File:                     6Th4Lb_LZQfU-Jc4FuXMSenGiIM.roa (raw, json)
Hash identifier:          ZavP3bGFO8yIA57FUqyCMWlSJ2qXtfYHUXoclWdeN5Q=
Subject key identifier:   E9:38:78:2D:BF:CB:65:07:D4:F8:97:38:16:E5:CC:49:E9:C6:88:83
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0176
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/6Th4Lb_LZQfU-Jc4FuXMSenGiIM.roa
Signing time:             Sat 01 Jul 2023 01:30:42 +0000
ROA not before:           Sat 01 Jul 2023 01:30:42 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        210.132.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:42 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=E938782DBFCB6507D4F8973816E5CC49E9C68883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:ab:54:b8:33:ac:de:a8:a8:66:f4:ef:02:
                    87:53:9a:c1:5e:26:24:49:31:13:22:04:73:42:ca:
                    32:86:c2:cd:8c:e9:d5:1c:a2:c5:0f:0a:10:55:26:
                    56:7c:95:53:6c:93:cb:9c:18:14:26:90:fd:5e:70:
                    fe:b2:6a:40:6c:e6:c2:4a:68:98:50:f8:ef:f3:d9:
                    e7:50:9d:39:fe:6d:b9:3a:d3:1b:46:19:18:80:65:
                    ea:65:e8:dd:8d:2c:6a:7b:8a:de:29:6f:4b:bf:d8:
                    aa:11:82:02:49:63:e3:9f:34:97:44:45:ee:3c:e7:
                    e8:ce:8d:99:35:57:35:b4:ee:e2:ac:a8:95:e2:5f:
                    3c:bd:e5:da:12:ae:ee:57:39:55:9f:ba:8e:72:4b:
                    c0:00:22:e9:7f:30:2a:89:7d:7a:17:72:64:8a:e2:
                    4c:9e:91:a4:c9:9d:0a:36:71:e6:46:94:a3:88:0d:
                    9e:56:29:58:0e:84:19:98:c4:39:b3:0f:75:e9:bd:
                    fa:de:65:02:f8:3f:f5:9f:ac:31:54:a8:5c:a3:d1:
                    2d:d9:56:15:7e:db:a9:4f:ff:98:16:69:74:c1:bb:
                    0a:c5:fc:5d:45:a5:d0:6d:57:35:ab:02:df:5c:3b:
                    a0:1c:1d:b9:58:f1:5a:e3:3c:2b:8f:2d:45:30:b4:
                    e1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:38:78:2D:BF:CB:65:07:D4:F8:97:38:16:E5:CC:49:E9:C6:88:83
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/6Th4Lb_LZQfU-Jc4FuXMSenGiIM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:4b:b5:38:dc:17:d6:eb:f0:4c:ca:16:e1:60:40:78:95:e8:
         c8:d0:17:37:7c:1d:fa:c0:03:3b:12:2b:8e:f2:06:f8:e7:f1:
         22:f1:88:5e:a9:49:7d:5a:cf:a7:51:9d:21:a3:7a:4a:70:ca:
         61:04:ab:40:a8:94:44:dc:57:ff:ae:15:0b:58:a1:48:57:9d:
         30:d1:be:8c:1b:bd:69:0f:4a:d1:63:cc:22:6e:db:09:6d:14:
         dc:b3:32:a2:30:3d:89:38:30:4f:47:45:09:18:a9:35:cb:43:
         63:36:c6:96:72:42:02:5c:9b:84:8f:b0:16:35:81:08:f6:8b:
         b9:4e:57:09:12:ed:7f:e9:82:47:77:4e:b1:62:b1:eb:b7:3b:
         ce:75:4d:df:c4:4b:1e:02:d1:91:d4:66:9b:2b:ef:d9:c2:a1:
         8f:e9:d9:35:b7:57:2f:2c:04:83:be:24:d3:56:99:b6:b7:fa:
         93:49:1e:cc:27:5e:fc:9d:a0:74:7f:63:26:cb:fb:40:01:d8:
         c3:f2:4b:17:2b:3e:d5:7f:c8:b0:88:67:f3:45:66:de:72:8b:
         29:16:6f:23:92:af:7c:19:a9:5b:57:b6:83:54:ce:85:c8:ad:
         cd:f6:1c:48:cd:0c:ca:9a:f8:77:16:59:6f:76:12:8c:c0:7f:
         da:18:db:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org