Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6EYa1BNg7W0vCmJfOk8k12osk1k.roa
File:                     6EYa1BNg7W0vCmJfOk8k12osk1k.roa (raw, json)
Hash identifier:          E9DwxQaNrVAiNtgoiOmW9MicfqjfTADK6UkB0GowEEQ=
Subject key identifier:   E8:46:1A:D4:13:60:ED:6D:2F:0A:62:5F:3A:4F:24:D7:6A:2C:93:59
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0193
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6EYa1BNg7W0vCmJfOk8k12osk1k.roa
Signing time:             Sat 01 Jul 2023 01:31:01 +0000
ROA not before:           Sat 01 Jul 2023 01:31:01 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     7684
IP address blocks:        182.48.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jul  1 01:31:01 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=E8461AD41360ED6D2F0A625F3A4F24D76A2C9359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:4f:5f:a7:46:d4:28:3b:ed:6a:dc:0c:79:
                    16:8f:b8:f6:89:a2:6e:fd:30:25:29:c8:18:21:db:
                    5c:61:63:1f:5e:64:26:91:a1:cb:54:8c:84:d5:6b:
                    40:50:4b:0e:09:27:10:60:45:78:d0:f1:05:8e:42:
                    e4:f6:61:b3:b7:97:62:2e:67:7b:88:a2:d6:66:74:
                    57:10:fc:e8:4f:f1:2d:c8:7f:08:aa:90:a2:b6:25:
                    cd:85:16:77:52:df:3f:f2:37:19:10:73:45:b5:29:
                    d7:98:1b:29:c7:99:a3:21:6b:a9:3e:79:4a:64:17:
                    80:1d:ae:b0:6f:74:88:ff:1f:51:86:7b:73:b2:da:
                    ed:73:af:05:d9:c7:82:74:2b:db:70:8c:89:54:b6:
                    33:d1:d6:3c:07:65:54:93:a1:1e:cf:57:22:8c:f7:
                    37:69:d0:e0:9c:b8:e8:9b:82:c0:0b:de:75:73:a5:
                    7f:0d:77:54:33:36:c8:27:42:bb:79:d2:06:d2:6e:
                    16:9b:b1:a9:0b:b9:7a:ed:c1:81:ca:03:67:2a:7c:
                    4b:b3:20:8a:b7:43:cd:96:d6:2d:f7:b6:2c:dc:b8:
                    b6:0b:08:32:ce:75:c0:4c:96:b2:45:e7:51:a9:e6:
                    d3:0e:d6:17:ee:a1:7d:ec:7d:5d:99:29:e2:16:c4:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:46:1A:D4:13:60:ED:6D:2F:0A:62:5F:3A:4F:24:D7:6A:2C:93:59
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6EYa1BNg7W0vCmJfOk8k12osk1k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:27:2d:d1:b8:14:c4:fc:00:90:5f:5c:6d:ef:24:a3:ea:5e:
         1f:71:ec:cd:86:f9:8c:c2:30:fe:5a:b8:07:ef:c1:68:16:22:
         d6:19:92:c8:17:27:9f:fa:da:e9:73:9e:06:93:58:3c:e1:1d:
         08:20:54:29:1b:d6:57:3d:2a:48:3b:15:1c:dd:27:62:11:de:
         4c:1c:d2:30:56:6c:5c:7a:85:ab:38:54:0d:f3:49:24:18:ee:
         4d:d9:1c:8b:88:21:d8:d2:1c:f7:bc:ea:fe:8d:55:8c:3f:5e:
         77:5c:c6:9b:32:ae:62:6d:5b:28:70:1c:9e:ed:9d:f4:d0:d6:
         36:21:b0:9f:5f:89:80:ca:e0:9a:42:e3:7f:1a:96:f5:d5:04:
         21:d7:fe:bb:fb:1b:47:b8:eb:b9:0b:2e:cb:44:22:37:fd:6e:
         ec:6b:c0:8f:19:e2:cc:77:e2:91:5b:f8:87:0c:3d:13:a3:32:
         49:ef:a0:8a:50:ad:3f:9b:68:fa:13:8f:3a:36:72:2a:73:9a:
         31:a9:97:8b:46:b7:b9:b2:a7:42:d0:c3:80:fe:b4:bf:7c:92:
         dc:4b:77:81:e2:7c:0e:2c:01:c8:71:d2:05:04:05:46:35:9a:
         ed:ba:74:f5:16:b7:7c:ee:95:d3:6e:cc:bf:3e:71:9f:7e:d1:
         d0:ca:e7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org