Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/9sPsYvvGYqnEtEZO7FwO6-CYr78.roa
File:                     9sPsYvvGYqnEtEZO7FwO6-CYr78.roa (raw, json)
Hash identifier:          WbOZP9k5WFp6RiXmxtBNd0WXf1zbHoDM7HYSGL+EBMQ=
Subject key identifier:   F6:C3:EC:62:FB:C6:62:A9:C4:B4:46:4E:EC:5C:0E:EB:E0:98:AF:BF
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01CD
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/9sPsYvvGYqnEtEZO7FwO6-CYr78.roa
Signing time:             Wed 01 Nov 2023 01:31:16 +0000
ROA not before:           Wed 01 Nov 2023 01:31:16 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        210.188.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 01:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:16 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=F6C3EC62FBC662A9C4B4464EEC5C0EEBE098AFBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:05:58:24:6a:4f:09:46:47:ed:83:58:54:
                    7f:6e:39:23:89:47:ad:15:3c:44:96:f9:25:d8:0e:
                    7c:93:6c:ba:f6:95:9a:81:20:9a:1a:30:99:db:10:
                    99:02:03:c1:ec:50:07:90:e7:8e:d1:28:9c:8e:c7:
                    3e:7e:57:62:cd:39:28:00:41:af:c8:86:64:8f:e8:
                    02:0a:1d:7d:04:71:2c:92:99:90:22:34:6d:dd:72:
                    f9:17:f9:f6:f7:9d:62:4e:2f:65:52:90:b6:f7:c3:
                    57:35:8c:e0:39:86:1a:3d:66:8b:76:c2:af:1c:aa:
                    5d:49:37:b4:9a:8b:59:47:79:e1:6a:eb:18:50:20:
                    28:de:4b:e5:4d:19:2e:66:67:09:bc:09:a5:fd:fe:
                    96:f9:7b:24:cc:0e:6c:a7:c3:78:bb:ee:c5:e2:8b:
                    84:b9:2e:f4:66:9d:b7:d2:40:97:d9:fc:2b:f5:bb:
                    65:8e:4c:44:7b:c0:9d:c3:59:4f:3d:2a:02:56:1b:
                    97:e8:ff:51:9a:61:e1:dd:4e:15:da:f5:2f:3c:d3:
                    75:2f:2e:24:10:f2:3f:db:4f:f1:1b:4f:61:6c:76:
                    17:75:ed:d4:b7:f1:19:d0:b7:6b:14:fe:77:ce:6b:
                    e1:d1:74:be:81:55:8e:e3:1d:5c:ad:95:82:c7:19:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C3:EC:62:FB:C6:62:A9:C4:B4:46:4E:EC:5C:0E:EB:E0:98:AF:BF
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/9sPsYvvGYqnEtEZO7FwO6-CYr78.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:91:a9:7c:b2:49:43:22:24:b0:00:5c:b4:31:31:cf:c5:a6:
         56:c1:b7:b0:4f:b3:76:fe:f8:ea:24:8e:fa:01:a9:04:30:3b:
         0e:31:79:c1:f8:0d:02:b7:55:88:c3:cd:f5:b8:4d:99:d3:ea:
         d9:24:b7:cb:44:04:28:cb:d2:14:c3:5d:3b:93:9e:58:8a:5e:
         a6:3f:bd:c2:3c:32:e5:dc:2d:f3:d7:19:e2:7f:20:c4:ee:a0:
         fb:fb:3a:3f:54:13:63:5e:58:47:03:d1:28:c5:db:76:18:ec:
         3d:bf:cb:a3:95:48:0f:62:c0:55:f6:1c:ed:f6:50:a5:e5:d7:
         42:f8:db:fd:7b:69:23:ba:82:07:40:5e:64:bd:a0:6a:56:2f:
         5d:d7:9e:b6:2d:4f:03:6b:06:69:1d:2a:68:73:41:1e:d2:9b:
         02:49:ba:f5:05:b9:32:40:0a:1d:42:ad:fe:f9:64:32:be:ea:
         12:8c:61:53:e1:00:ce:0c:ba:a1:0f:50:24:b6:07:b0:d6:77:
         65:ff:42:34:12:ed:c0:2a:c1:98:5c:b4:bb:73:09:d6:57:f7:
         6e:87:01:83:3d:50:32:e8:f3:17:5a:2b:bd:46:e2:0e:19:12:
         4d:64:b6:be:13:53:6b:49:91:38:d9:f5:1b:a4:de:db:8a:25:
         a2:96:fe:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 04:40:47 2024 by rpki-client on console-ams.rpki-client.org