Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/XI8yE8k1y8tuz1fEanZKNCIe5ms.roa
File:                     XI8yE8k1y8tuz1fEanZKNCIe5ms.roa (raw, json)
Hash identifier:          orhcH5w4FkhCLb7+44lraNHuXS6Rr6ourpYptvvn828=
Subject key identifier:   5C:8F:32:13:C9:35:CB:CB:6E:CF:57:C4:6A:76:4A:34:22:1E:E6:6B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       011D
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/XI8yE8k1y8tuz1fEanZKNCIe5ms.roa
Signing time:             Fri 01 Sep 2023 01:31:40 +0000
ROA not before:           Fri 01 Sep 2023 01:31:40 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        220.210.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:31:40 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=5C8F3213C935CBCB6ECF57C46A764A34221EE66B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a7:5a:d9:c6:2d:b3:a4:9a:19:f6:44:34:01:
                    fe:9a:59:86:20:2a:f5:5c:bf:24:33:3d:d0:7d:46:
                    72:ac:66:1a:ff:88:a5:84:43:46:3a:f0:51:27:f2:
                    ab:d6:4d:1f:f0:fd:09:0c:28:8b:21:8a:be:4b:32:
                    2f:8f:76:a4:5c:ea:dd:f1:69:21:27:5d:f3:40:2f:
                    29:44:78:87:b3:f5:14:05:2d:77:d3:81:cf:78:16:
                    47:00:0d:9b:cb:07:cb:3b:d8:89:8e:45:d4:f3:4e:
                    a0:f6:b0:de:f1:3f:31:94:10:03:5d:a9:a2:e1:e5:
                    40:40:8d:e0:31:ea:23:ab:01:e7:29:06:28:01:03:
                    79:31:b7:12:3f:11:39:2a:ca:ba:69:d8:fd:99:ae:
                    c4:ab:57:92:d6:3f:26:9b:f1:c6:62:cf:fd:fb:97:
                    63:c4:95:e0:53:45:10:d3:6e:ae:3d:6a:03:85:af:
                    28:bc:58:0c:17:5e:5d:fd:0e:b2:7a:28:57:75:bc:
                    69:28:7c:46:fe:6a:aa:cf:6e:62:8d:cd:23:21:c6:
                    4c:8f:3c:19:45:39:d5:61:a4:e9:a6:84:9b:ea:73:
                    8d:57:12:51:15:f6:d3:bd:16:e2:fa:02:e5:72:36:
                    a8:b0:41:ba:83:5e:52:69:d6:46:6c:9b:66:85:bc:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8F:32:13:C9:35:CB:CB:6E:CF:57:C4:6A:76:4A:34:22:1E:E6:6B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/XI8yE8k1y8tuz1fEanZKNCIe5ms.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         82:e3:91:be:4d:4a:f4:db:0b:a6:62:48:fb:3d:81:ca:59:9e:
         ea:c7:29:ed:2f:e9:87:bd:c4:02:ab:bc:99:15:a8:96:85:f3:
         dd:4f:ea:70:c6:7e:3a:d9:b6:61:65:e6:2a:54:4b:c6:d3:e5:
         57:66:91:6f:12:e9:63:72:b8:d6:74:2a:1f:b2:13:bc:9f:d1:
         e9:fd:97:3d:78:56:d5:3a:54:ad:e5:e6:26:3c:89:64:14:93:
         e4:81:08:f6:d1:9f:87:aa:17:d1:12:9a:2e:01:15:f7:e4:51:
         1c:51:c8:2c:18:20:51:b1:61:97:bf:59:99:22:69:4f:2e:45:
         71:f4:5a:ee:28:a3:1f:1c:f6:55:4a:db:95:41:35:11:91:24:
         ad:be:93:2f:72:27:17:fe:28:1c:f9:ec:4c:d6:79:e9:54:cb:
         ef:e6:9b:e8:ae:06:f5:67:a3:54:c6:ba:c6:5d:64:96:47:79:
         c3:6f:c7:0e:4a:9a:99:c2:f4:d6:63:2f:1f:51:ce:80:0a:78:
         22:94:fb:09:8a:b9:38:e5:73:8f:1f:ca:22:5f:5b:d1:68:30:
         79:45:1f:d2:4c:59:37:af:bc:6f:0d:97:c1:4e:fc:f8:f0:37:
         fb:4b:d3:74:ef:58:c7:7d:4a:ec:6f:2d:1e:87:70:82:c8:a3:
         40:31:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:26 2024 by rpki-client on console-fra.rpki-client.org