Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ojyGnBzrV35z3BtCW75GOd_fZMc.roa
File:                     ojyGnBzrV35z3BtCW75GOd_fZMc.roa (raw, json)
Hash identifier:          850CIpEPpEeGK6qjztk6g9+DfoVnfXfVUr8nfugIFgY=
Subject key identifier:   A2:3C:86:9C:1C:EB:57:7E:73:DC:1B:42:5B:BE:46:39:DF:DF:64:C7
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0105
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ojyGnBzrV35z3BtCW75GOd_fZMc.roa
Signing time:             Fri 01 Sep 2023 01:28:59 +0000
ROA not before:           Fri 01 Sep 2023 01:28:59 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        220.100.192.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:28:59 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=A23C869C1CEB577E73DC1B425BBE4639DFDF64C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:2b:ba:73:1a:3c:7d:3e:a7:99:e0:2d:1b:
                    fb:af:83:3d:55:e2:6b:e5:9e:6e:0d:25:e5:ef:6f:
                    49:9b:87:75:b1:e9:2a:b6:12:df:8f:91:2c:59:e0:
                    4b:f5:19:39:07:8f:50:98:57:dd:27:d1:aa:f6:38:
                    ea:77:8e:3c:57:85:93:9f:84:81:c2:e4:04:2b:4d:
                    27:de:a5:a2:18:5a:c2:29:be:b1:02:64:b5:ec:ab:
                    6f:c4:34:73:66:e1:ed:e5:4d:f6:fa:f8:e2:85:dd:
                    51:0a:f9:09:2e:7e:ba:70:f3:b9:cf:4e:5b:5a:8e:
                    89:3d:a2:18:a4:30:85:fd:1b:af:a5:51:59:25:ef:
                    af:e3:73:79:55:8e:10:e9:cf:f0:20:02:2c:cb:53:
                    7a:61:53:8a:b6:53:19:06:07:a3:b9:05:01:04:75:
                    c3:5f:76:7a:e4:91:92:d6:6c:0d:59:64:bf:2d:bf:
                    5c:1a:59:21:e3:de:14:94:19:27:61:19:c9:94:cd:
                    33:66:f3:51:1b:f1:b0:bf:9e:23:a1:cc:16:65:a0:
                    35:82:80:6d:5a:d6:25:a9:8e:f7:9e:d0:ef:7e:d3:
                    1d:51:54:1d:82:76:08:6b:3a:18:d6:3e:7e:44:84:
                    aa:e2:40:8f:29:35:f2:05:35:7d:f9:ed:f1:54:94:
                    06:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3C:86:9C:1C:EB:57:7E:73:DC:1B:42:5B:BE:46:39:DF:DF:64:C7
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ojyGnBzrV35z3BtCW75GOd_fZMc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.100.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:ed:d9:2c:da:cf:31:57:f2:d7:04:33:69:8c:23:03:7a:ac:
         ed:8a:8d:a4:7e:25:54:d3:2e:6a:fc:99:fa:f0:9d:1d:5e:68:
         8e:86:56:d5:fc:c7:5b:3c:ec:fa:36:cb:d7:91:b9:57:30:62:
         d7:c2:32:4f:05:80:27:e2:60:76:03:3b:75:a0:c7:54:92:c3:
         2a:47:cc:44:9d:20:80:ec:58:6c:87:ea:ef:15:23:be:f9:79:
         db:c0:54:df:2d:d3:ad:92:2b:a2:dd:94:54:38:69:47:4b:0a:
         17:3a:7b:d3:15:72:8a:1e:26:2f:29:ed:3e:aa:40:b3:03:c6:
         b6:8c:fe:14:88:40:da:6d:b2:e1:50:28:c4:e5:c1:16:25:03:
         d4:e8:9c:8e:fa:ca:f6:47:e6:0f:36:e5:ae:4d:d2:2d:53:3e:
         74:f7:e1:24:ae:93:cf:c9:85:bc:d1:2e:bf:ad:40:c3:e1:d5:
         d3:59:fc:53:93:cf:85:cf:23:03:b4:62:f6:6c:93:b7:03:d2:
         b9:bc:21:e4:50:00:a7:9e:89:93:82:30:60:b7:39:b6:2a:cb:
         96:95:0f:cc:1e:34:1a:62:49:2b:9f:6e:a6:ad:c5:81:c6:ad:
         39:c0:56:a1:35:54:33:5a:30:df:2c:99:4c:c7:a5:f8:43:79:
         66:9e:62:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:26 2024 by rpki-client on console-fra.rpki-client.org