Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/YSJjvktpRVpvWyd-TyP129M4WN0.roa
File:                     YSJjvktpRVpvWyd-TyP129M4WN0.roa (raw, json)
Hash identifier:          fDp02dtTWU0CP8JWk9K1F+AjmLWzuZDq4rUcoggGeyc=
Subject key identifier:   61:22:63:BE:4B:69:45:5A:6F:5B:27:7E:4F:23:F5:DB:D3:38:58:DD
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       017E
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/YSJjvktpRVpvWyd-TyP129M4WN0.roa
Signing time:             Sat 01 Jul 2023 01:30:45 +0000
ROA not before:           Sat 01 Jul 2023 01:30:45 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        210.226.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:45 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=612263BE4B69455A6F5B277E4F23F5DBD33858DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:83:a7:de:58:b8:2d:1a:66:92:dc:35:5b:f0:
                    a8:c2:7d:3d:72:bf:51:46:de:32:ae:89:bd:cb:32:
                    7d:55:2c:e1:97:c0:db:fc:e9:d0:6a:52:89:5f:61:
                    23:bb:0f:e2:d3:64:2e:23:2b:0a:77:51:f9:ed:0a:
                    fa:1f:2d:7a:3c:9c:c2:d6:56:bd:1f:c3:8b:e3:dd:
                    c1:24:63:2e:67:6d:e9:3d:63:ae:20:ca:b5:aa:b0:
                    ff:8c:62:1f:47:7d:75:70:a1:68:6f:85:9c:f2:66:
                    e1:65:6b:04:6f:47:a1:5e:db:83:82:91:66:6e:ce:
                    4e:a3:2c:6c:0e:99:08:c5:3c:d4:43:fd:ff:ed:af:
                    69:51:a2:e4:2d:b5:bc:b9:da:40:cb:01:eb:05:e3:
                    d5:5d:ee:e1:2b:96:6c:26:46:ad:43:58:b8:8e:5f:
                    b9:00:46:ef:b8:62:f3:b5:9f:33:37:ff:4e:48:7c:
                    65:33:08:12:07:25:c0:1b:67:bb:77:42:fd:a9:ad:
                    08:ab:d0:00:b4:50:46:74:aa:d9:65:98:db:4c:16:
                    a7:53:ab:8b:63:3c:5c:7b:23:1c:38:17:41:8c:cb:
                    e0:0d:a4:24:fa:a2:75:a9:f2:28:f6:8c:6a:87:18:
                    90:59:c9:4a:04:5a:26:88:5e:09:46:01:08:7f:97:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:22:63:BE:4B:69:45:5A:6F:5B:27:7E:4F:23:F5:DB:D3:38:58:DD
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/YSJjvktpRVpvWyd-TyP129M4WN0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.226.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6c:c6:29:4f:25:da:8b:ed:23:1c:82:17:36:52:04:0c:64:bb:
         f6:20:f0:d1:bd:77:89:94:60:aa:7f:09:50:f2:fd:a9:b3:7b:
         09:fc:72:e6:de:2b:37:40:34:58:d6:42:24:63:52:85:38:5a:
         d7:30:9b:3f:00:43:bf:fb:d3:80:eb:0b:34:9d:38:e8:04:48:
         62:d2:22:16:37:88:54:77:a1:73:e3:f5:78:46:5e:58:4e:0a:
         63:fc:aa:8b:2f:69:3d:6c:05:53:6c:f0:c9:15:9e:2b:f6:02:
         cc:d6:2b:84:33:04:3f:88:04:97:3d:a6:84:18:cd:86:d1:ed:
         d4:33:b5:62:fd:ff:dc:f1:6c:8b:7f:25:67:d3:1f:8d:88:e3:
         45:f2:80:d7:84:1d:d5:6a:0c:22:9a:22:60:44:5b:81:99:1d:
         73:9e:4e:93:3f:55:aa:7e:32:39:c5:39:81:74:f9:fc:f6:6c:
         be:fe:b6:9a:63:23:2e:29:2b:be:4c:b6:32:a5:3b:5e:f2:45:
         47:4f:52:c9:10:8d:86:25:d4:bf:22:31:b3:52:cb:a7:78:bb:
         10:65:14:f2:40:04:b3:fd:2c:63:00:f1:e2:66:61:7e:ec:da:
         62:02:9e:e9:49:e9:c4:f6:95:c3:8c:71:e0:5c:45:26:c2:9f:
         da:f3:93:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org