Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/u7h77sK_csBJu7dIu4522WUTI84.roa
File:                     u7h77sK_csBJu7dIu4522WUTI84.roa (raw, json)
Hash identifier:          KaBeXi4HW3PKyIoduqejgIG7yUW3YOmAJbxPiFqidZI=
Subject key identifier:   BB:B8:7B:EE:C2:BF:72:C0:49:BB:B7:48:BB:8E:76:D9:65:13:23:CE
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       EC
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/u7h77sK_csBJu7dIu4522WUTI84.roa
Signing time:             Fri 23 Jun 2023 04:37:59 +0000
ROA not before:           Fri 23 Jun 2023 04:37:59 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     32787
IP address blocks:        210.148.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jun 23 04:37:59 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=BBB87BEEC2BF72C049BBB748BB8E76D9651323CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:82:47:f6:ce:ce:4f:6b:9c:be:1b:d9:36:
                    d9:18:cb:9f:0c:e3:3a:0c:0a:fb:3b:00:c9:ab:ad:
                    95:d2:a9:2a:da:d0:f6:5a:ba:10:48:8f:d0:c2:7e:
                    ad:05:9c:36:e5:b5:0c:39:82:c9:51:f1:0d:dd:50:
                    ba:ad:06:5c:7f:9a:84:c1:f4:d0:b4:21:be:cc:85:
                    f1:28:15:1b:50:37:df:74:10:a1:cc:ff:d6:4a:7a:
                    d8:15:ef:34:d3:5e:7b:69:8e:59:54:6b:eb:18:9a:
                    36:3a:3e:c3:59:95:52:b3:88:9d:33:ff:af:7e:24:
                    75:f1:21:f2:01:43:f5:06:5a:3f:eb:e6:01:20:79:
                    6b:1d:07:b6:13:7b:a4:8b:a2:c9:63:36:c9:3d:22:
                    cc:aa:65:0c:6e:3b:80:66:81:56:78:9e:16:e8:e4:
                    ea:0a:ef:e4:2f:16:69:ac:c5:8a:18:5e:4d:4b:71:
                    25:5b:6f:3a:a4:5e:b7:4a:57:96:86:5f:3a:dc:ca:
                    42:da:ba:71:d1:12:10:f8:bc:91:43:32:79:5a:92:
                    cc:e4:e8:c5:94:51:f7:b8:11:8c:85:c3:b1:eb:f8:
                    24:8c:1a:e9:83:0e:51:9a:7b:d8:f0:a2:36:80:33:
                    dd:d1:44:ec:f0:c7:d2:8e:01:8b:2e:c6:b2:83:42:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B8:7B:EE:C2:BF:72:C0:49:BB:B7:48:BB:8E:76:D9:65:13:23:CE
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/u7h77sK_csBJu7dIu4522WUTI84.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.148.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:dc:a8:b9:e2:37:3a:f2:c9:e2:1a:2e:25:b1:4e:4b:99:c4:
         a0:35:a9:f4:99:de:bd:21:04:be:b6:a1:fe:67:59:4f:8c:3d:
         08:37:d6:19:1f:4d:ff:97:57:5f:7d:a5:e6:a0:ff:b1:70:f9:
         37:8b:05:d1:d0:a2:4d:d1:32:6e:2d:e9:53:b7:90:b4:d0:02:
         84:d5:b7:14:05:e3:18:f2:55:64:3c:bb:83:5d:b1:19:e3:2f:
         0b:c2:68:3c:3a:03:97:1e:ea:70:0c:67:44:c0:83:1a:c6:cd:
         ad:6a:73:3d:4c:77:ce:c9:55:25:6b:ba:ca:c7:b4:49:4d:e3:
         7a:80:f3:8e:5e:6b:eb:3c:64:1b:e5:33:88:8d:fa:09:b1:a9:
         30:97:d0:aa:15:e4:20:44:89:1c:c5:78:f2:d9:a2:28:2c:0c:
         99:f9:06:30:48:1c:3d:c6:1f:bc:d8:4e:5c:72:ca:73:f0:b1:
         0f:05:37:a4:08:4b:e8:38:a0:c4:e9:db:87:09:77:de:74:99:
         a2:80:77:fa:a3:97:c0:aa:dd:c1:00:b6:aa:52:2e:fe:6f:02:
         0c:c0:a3:6b:92:dd:67:be:71:ee:03:1c:1d:24:67:58:a3:61:
         36:38:9c:86:c1:36:50:9d:27:1f:78:50:3a:a0:d4:50:92:12:
         f5:ef:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org