Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/YctLqY-IPSF6mfZ3sku25OBhZZ8.roa
File:                     YctLqY-IPSF6mfZ3sku25OBhZZ8.roa (raw, json)
Hash identifier:          +hM7TcbUasSLtkU4sncaJd+wdN/UXXHA/AfsdzaL1eE=
Subject key identifier:   61:CB:4B:A9:8F:88:3D:21:7A:99:F6:77:B2:4B:B6:E4:E0:61:65:9F
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       EB
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/YctLqY-IPSF6mfZ3sku25OBhZZ8.roa
Signing time:             Fri 23 Jun 2023 04:33:57 +0000
ROA not before:           Fri 23 Jun 2023 04:33:57 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        163.140.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jun 23 04:33:57 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=61CB4BA98F883D217A99F677B24BB6E4E061659F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:9d:e1:85:1a:c3:00:46:98:b9:23:55:d7:
                    49:6c:89:52:8b:5f:a1:31:36:07:4f:b1:77:fe:82:
                    5c:95:c9:be:5d:2e:6e:74:8e:50:c1:44:77:6d:96:
                    28:6f:80:f2:44:c2:32:0e:1b:22:15:3d:32:3a:bc:
                    05:29:74:53:a6:3c:8c:06:e5:5b:13:53:7a:16:0d:
                    4d:99:83:a3:cd:4e:8a:c8:76:84:9c:64:10:8c:26:
                    61:42:71:4a:98:a4:ca:f7:d4:85:da:54:d9:98:13:
                    04:4e:46:88:a6:f7:c8:d7:d5:41:51:06:fe:0a:4c:
                    a4:9b:8b:52:f8:b3:81:e4:55:36:ae:f9:e9:a1:03:
                    75:e2:6c:2b:5d:9d:70:37:e9:47:cb:af:91:55:cf:
                    1c:18:26:07:c1:f9:3b:41:6c:e3:9a:15:f3:3d:9b:
                    cf:a4:c1:ca:d2:d4:92:dc:c1:9b:b4:b4:01:f1:9d:
                    4e:2e:c9:2f:12:27:23:bc:87:e8:dc:88:a9:63:60:
                    ae:33:ad:86:91:74:ca:42:75:ba:d6:6d:77:03:7c:
                    66:ee:2a:0f:9a:b6:34:7c:e9:ed:5e:40:72:91:c4:
                    ad:4c:52:2f:c1:86:52:44:d8:92:e5:9b:80:32:ed:
                    65:76:82:9b:79:8e:0c:22:1f:e6:8e:15:6f:8a:ca:
                    01:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CB:4B:A9:8F:88:3D:21:7A:99:F6:77:B2:4B:B6:E4:E0:61:65:9F
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/YctLqY-IPSF6mfZ3sku25OBhZZ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.140.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:2d:d8:be:6b:3d:9e:57:3e:7c:16:31:73:81:f5:50:44:a6:
         e8:f4:33:1d:33:b0:d9:3d:92:8e:2c:8d:db:81:02:40:30:f5:
         53:99:a9:92:d9:a4:e0:c9:ae:d2:06:d3:50:ae:0b:42:a3:3f:
         60:65:34:c9:ed:88:e6:6b:39:2f:b9:08:68:f5:2d:d7:4c:5e:
         44:7b:7d:4f:a2:c5:39:d3:e5:1e:6e:4f:1c:e7:19:e9:b9:68:
         5c:28:a7:f4:3b:6d:06:27:00:ea:89:03:5a:32:d4:0f:ab:f1:
         82:ae:1a:a7:c1:90:d8:4c:c1:38:5d:9f:cb:15:f9:d7:ac:22:
         14:46:36:eb:b5:ea:bf:af:19:7f:14:12:13:0e:c3:28:d0:af:
         9c:ba:ae:94:53:df:4f:2b:60:65:81:61:04:63:45:76:7c:bc:
         70:de:76:d3:f4:c8:a1:cb:14:4c:b1:c0:b4:37:9e:ec:d7:d7:
         64:ee:aa:87:c5:a4:5b:25:25:a0:ee:e6:0b:f6:1e:dc:7a:79:
         69:5c:3a:bd:d8:01:45:12:df:11:eb:9c:e8:85:00:b1:73:4f:
         d5:b9:10:3c:73:c3:d9:5d:71:45:60:62:70:24:f6:a1:16:dd:
         30:c8:d7:42:50:eb:5f:c8:2f:71:81:dd:17:bd:81:b0:df:b4:
         df:8d:29:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org