Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/KJNJfMU8w0UoXVs0o_YCYdLsiFY.roa
File:                     KJNJfMU8w0UoXVs0o_YCYdLsiFY.roa (raw, json)
Hash identifier:          9JHwBLRaa02xbGGILbbdiDOpB8OYt93L5iwzbaEhkFU=
Subject key identifier:   28:93:49:7C:C5:3C:C3:45:28:5D:5B:34:A3:F6:02:61:D2:EC:88:56
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       010F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KJNJfMU8w0UoXVs0o_YCYdLsiFY.roa
Signing time:             Fri 01 Sep 2023 01:31:34 +0000
ROA not before:           Fri 01 Sep 2023 01:31:34 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        218.228.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:31:34 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=2893497CC53CC345285D5B34A3F60261D2EC8856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:43:d0:3e:10:eb:c9:46:b3:a3:c2:0a:e6:
                    cd:b0:bc:25:b7:72:d2:93:80:7b:36:a8:04:a5:5e:
                    24:de:45:9b:b1:34:fb:0f:5d:81:7b:27:fb:9c:0d:
                    93:30:00:64:f6:a6:33:42:33:44:7c:cd:c9:76:83:
                    b8:a6:38:22:9f:d5:18:de:75:34:d2:54:c9:96:d3:
                    ae:bb:c6:22:0c:20:5c:27:87:43:f3:a9:ce:40:72:
                    38:f9:10:cc:9f:b0:42:86:4b:12:1f:d8:ed:49:8f:
                    58:52:68:bf:dc:b5:1f:7d:8d:b7:f9:f0:e9:06:2f:
                    dd:65:03:76:1a:4a:ee:72:a7:cb:d5:83:df:10:38:
                    9c:82:ec:39:a0:97:86:4b:33:60:c7:82:95:b0:ef:
                    78:f0:86:6f:12:a0:1d:63:85:f2:6e:82:e1:98:d6:
                    a3:14:3c:ec:e4:f2:9d:bc:70:68:fc:2f:04:ca:3a:
                    5f:44:db:c0:ed:35:28:7e:ca:7e:da:e3:e6:52:32:
                    46:98:95:6f:4d:04:a2:9f:bb:68:6b:80:6f:61:76:
                    ad:ad:ed:12:1d:c5:56:8e:97:5d:be:86:f6:1e:52:
                    69:cb:b9:36:8f:75:f7:f6:82:33:4f:6e:ae:52:62:
                    54:58:8c:bc:d8:e9:44:77:3e:a3:43:c5:93:cc:fe:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:93:49:7C:C5:3C:C3:45:28:5D:5B:34:A3:F6:02:61:D2:EC:88:56
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KJNJfMU8w0UoXVs0o_YCYdLsiFY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.228.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:15:fa:00:d9:15:8b:74:c3:d7:b5:22:8b:fd:eb:6b:fe:83:
         69:87:8c:99:af:51:92:8a:27:59:8f:f8:ed:c7:f9:58:31:2b:
         9c:80:64:83:34:13:5d:73:84:65:d0:29:24:2f:0f:fd:65:00:
         12:04:97:65:fc:a3:c8:b8:c1:a9:ff:e9:91:8d:88:4d:3b:04:
         34:60:1a:d8:b8:8a:62:44:7c:b1:02:2f:9c:22:a3:eb:df:5f:
         6e:6a:b3:0b:e0:b8:ee:78:0f:a5:0b:a7:e8:a0:96:ba:e2:03:
         c9:32:72:eb:d3:2a:62:a4:ca:74:5f:1f:e3:f2:2e:37:e5:ed:
         46:4a:47:fa:ec:45:41:eb:a7:88:71:96:c4:e7:7f:ac:98:90:
         de:ab:8a:48:01:23:9b:b2:8d:d7:74:ff:7b:bf:9f:d7:26:a8:
         68:26:16:40:3c:57:45:84:9c:fa:43:a2:95:04:19:14:41:f2:
         25:a0:5d:2f:26:39:5c:76:95:ee:82:43:32:ba:5c:66:72:d5:
         1e:66:30:12:f2:67:ab:a3:ac:4e:33:f3:48:2b:15:2f:e9:70:
         c9:36:51:5b:c4:e1:14:4f:22:2e:fb:62:91:64:01:6e:ff:f6:
         2b:02:6a:a0:a0:6a:4c:cf:90:ba:65:22:f6:08:e4:2a:48:f6:
         e9:81:82:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org