Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/XSX_pvncCV0q0MHkEd3S7v1QNa8.roa
File:                     XSX_pvncCV0q0MHkEd3S7v1QNa8.roa (raw, json)
Hash identifier:          jBbi/ceedhyqppR4mrighCZFn9TfVRNKEHdvRJaYW/Q=
Subject key identifier:   5D:25:FF:A6:F9:DC:09:5D:2A:D0:C1:E4:11:DD:D2:EE:FD:50:35:AF
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0192
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/XSX_pvncCV0q0MHkEd3S7v1QNa8.roa
Signing time:             Sat 01 Jul 2023 01:30:53 +0000
ROA not before:           Sat 01 Jul 2023 01:30:53 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        220.96.0.0/14 maxlen: 14

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:53 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5D25FFA6F9DC095D2AD0C1E411DDD2EEFD5035AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:01:70:1b:b3:7c:56:2d:9e:3d:89:f5:cd:61:
                    4b:83:d6:f7:08:4c:b0:06:0a:6b:b8:68:af:a7:3a:
                    1e:69:f6:d4:7b:f8:bb:c4:dc:fa:64:a8:42:02:70:
                    49:5f:c6:09:f6:e0:c5:03:10:af:ba:cf:c3:b9:76:
                    3a:c3:c2:65:75:c9:4d:eb:32:70:6d:8b:03:57:c3:
                    c4:30:61:19:61:00:22:a1:14:10:cb:40:69:f3:b0:
                    7f:13:4e:2c:a7:9c:5a:43:35:72:46:b4:f1:89:af:
                    2c:ae:37:34:88:81:a2:34:c3:61:ab:aa:9f:e4:2c:
                    57:b7:a1:2b:25:b7:d5:22:9f:57:c9:f0:c4:01:7b:
                    16:41:b2:eb:a1:f9:af:b6:23:1c:fa:ad:d4:7e:b9:
                    a2:b2:86:2c:19:74:2a:65:85:76:7e:0f:43:be:5c:
                    58:80:3d:8b:00:2e:b3:19:15:80:7c:52:74:37:ec:
                    a6:22:76:90:9a:1f:2f:bf:8e:2c:d0:d0:fa:d0:c4:
                    c1:2f:4d:62:27:64:65:f3:01:b3:2a:2b:31:de:93:
                    18:eb:c2:bf:ca:06:c9:cd:15:b4:05:82:f0:2a:51:
                    01:19:1e:85:8b:d5:07:ca:9b:89:a6:4f:6c:01:fa:
                    11:38:df:d6:13:79:4b:8b:b2:a4:6c:a5:a5:35:65:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:25:FF:A6:F9:DC:09:5D:2A:D0:C1:E4:11:DD:D2:EE:FD:50:35:AF
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/XSX_pvncCV0q0MHkEd3S7v1QNa8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.96.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         2b:4b:4a:ee:c3:2c:59:41:b6:1c:b8:cb:35:b0:63:d6:28:cd:
         59:5b:6a:2d:96:a5:0b:37:6b:aa:20:a4:2b:cf:6c:6e:99:b5:
         f1:77:79:44:e4:a7:07:f3:26:9e:31:08:91:0b:26:e9:57:67:
         e8:03:dc:44:7a:7a:17:f5:a5:c0:7a:7f:81:c6:15:0b:34:79:
         14:4d:8f:aa:56:db:d0:8a:ae:1e:0a:10:c8:33:09:e8:14:fe:
         ac:77:74:a7:3c:6f:17:90:f9:18:2b:d0:c1:f2:06:7a:d5:65:
         5a:9a:f8:c4:47:50:89:c6:5f:c8:d1:e6:cc:13:58:78:27:0a:
         8f:cc:5d:2b:f8:fe:9d:67:89:f0:a6:34:8c:ed:e3:fd:f2:d8:
         0b:3e:2a:4b:ce:3a:fd:e1:0f:0a:35:03:d5:f6:c9:6c:ed:13:
         78:ea:fe:46:4c:29:bd:01:46:24:35:52:d4:bd:f5:25:90:82:
         10:d8:33:82:b4:b2:f4:18:a1:64:97:d1:68:6d:4d:8e:92:37:
         b2:3d:31:2e:f8:1d:2e:2b:47:6c:75:d2:44:d7:d9:40:f3:c3:
         98:75:c9:03:66:61:8d:f5:5f:b3:11:cc:83:13:a7:11:be:1c:
         2e:0f:24:57:3d:10:77:81:14:6f:3a:03:83:1b:13:b7:75:95:
         22:3f:6b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org