Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/yuEb3Nk2Z4NNEry08PmKs_EEG-Y.roa
File:                     yuEb3Nk2Z4NNEry08PmKs_EEG-Y.roa (raw, json)
Hash identifier:          xf1aiRY9zT4EOO16+vZ0mIvM8F/d+ECcfGAABMD3n78=
Subject key identifier:   CA:E1:1B:DC:D9:36:67:83:4D:12:BC:B4:F0:F9:8A:B3:F1:04:1B:E6
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0173
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/yuEb3Nk2Z4NNEry08PmKs_EEG-Y.roa
Signing time:             Sat 01 Jul 2023 01:30:41 +0000
ROA not before:           Sat 01 Jul 2023 01:30:41 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        202.234.192.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:41 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=CAE11BDCD93667834D12BCB4F0F98AB3F1041BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:29:b5:62:79:4b:2a:04:24:d7:ab:b4:87:
                    88:6d:1d:3d:b9:af:ea:39:b8:62:be:0a:83:51:3a:
                    28:63:46:e5:4c:d5:bb:b0:3d:43:e5:9b:4e:e2:ba:
                    9e:d6:69:fd:6f:c6:95:a0:4d:26:21:ce:1b:0d:ad:
                    47:10:a3:9e:44:fe:f1:ff:b2:6c:c7:3a:90:8e:86:
                    80:9b:17:91:25:2a:ce:76:06:9d:a9:14:50:e2:1e:
                    fc:c9:b6:8b:0d:be:3b:7e:8a:1f:c7:03:6b:7a:cd:
                    8c:3f:eb:f6:f3:d8:a7:4d:49:7b:4c:1a:10:b2:96:
                    74:a8:ba:08:6f:6d:d8:1a:e9:24:50:db:69:98:ff:
                    66:c4:ef:58:6f:ef:d2:74:03:8d:4b:81:cf:45:e6:
                    45:0f:99:7d:f0:7a:22:a5:78:3b:88:a9:cb:ad:5d:
                    12:35:8e:c1:34:c3:33:a7:9a:be:5d:19:71:c1:a1:
                    3f:e8:6d:3a:9d:da:88:c2:7e:16:b0:46:5c:bb:3a:
                    b8:61:46:05:9f:be:79:e8:2b:ac:33:17:22:6f:f4:
                    21:b9:29:53:c0:e5:1f:cc:0b:b1:95:15:1e:cc:ef:
                    7b:1e:0b:fa:e4:7f:1f:f3:2f:06:49:c7:eb:73:88:
                    73:5b:68:20:7d:3b:71:26:1b:8a:b2:b8:8f:5e:c7:
                    53:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E1:1B:DC:D9:36:67:83:4D:12:BC:B4:F0:F9:8A:B3:F1:04:1B:E6
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/yuEb3Nk2Z4NNEry08PmKs_EEG-Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.234.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         13:f4:26:91:9c:8c:95:c6:99:82:20:b2:8a:c0:d7:0c:96:e9:
         7b:0e:df:b7:96:8f:7e:f8:59:4a:90:f5:bf:8d:71:81:5f:50:
         d7:d9:7f:e4:fc:ab:a8:e5:16:2d:1a:91:9e:5d:28:95:09:fa:
         19:36:fa:81:c3:88:f3:2a:ab:c2:79:7b:23:0b:71:15:79:2f:
         cc:15:54:ad:7e:c7:f9:fe:8f:c1:be:4d:9f:a1:a0:7a:e5:55:
         a0:d7:3e:04:eb:aa:24:b1:83:c4:4a:c6:2a:63:65:aa:6f:65:
         4c:46:09:59:1d:98:ce:35:7d:7c:1e:a1:59:d8:c6:3d:7e:a1:
         bf:91:df:01:32:ed:de:7c:70:72:0a:f1:b7:c6:a1:9d:85:7d:
         ad:dd:72:bc:21:72:55:57:18:42:1e:33:df:71:c0:5b:bb:8f:
         9c:ad:b7:3a:21:87:04:3e:9b:61:f9:7f:77:8a:7d:c6:86:b4:
         16:6d:0d:c3:a6:43:30:61:dd:4c:e6:fe:d3:94:48:36:81:49:
         ab:6b:88:a8:e1:cb:06:3c:28:fe:d0:96:6a:33:03:6f:b2:54:
         8e:7b:fe:b7:47:46:59:11:2f:d3:1d:cb:24:b3:30:bb:e3:a1:
         b8:dd:74:dc:c8:85:9d:3b:ba:4d:c3:25:c0:76:81:36:94:82:
         16:d0:a6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org