Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/ArMWhDPEyb_HZ_p1YEvi_Kn8CEg.roa
File:                     ArMWhDPEyb_HZ_p1YEvi_Kn8CEg.roa (raw, json)
Hash identifier:          M/RNQ4qTUguOmAicuhpRdgDBDzKrvZj6rxf3avlT1s4=
Subject key identifier:   02:B3:16:84:33:C4:C9:BF:C7:67:FA:75:60:4B:E2:FC:A9:FC:08:48
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0194
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ArMWhDPEyb_HZ_p1YEvi_Kn8CEg.roa
Signing time:             Sat 01 Jul 2023 01:32:08 +0000
ROA not before:           Sat 01 Jul 2023 01:32:08 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        221.184.0.0/13 maxlen: 13

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:32:08 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=02B3168433C4C9BFC767FA75604BE2FCA9FC0848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2a:07:e1:0b:1d:b2:31:f5:ec:85:2c:d0:11:
                    53:54:d7:5f:79:90:12:91:ac:82:fe:0a:d5:1e:3b:
                    e4:4c:40:69:e4:7d:2d:48:fd:c3:d4:62:fc:a8:2f:
                    fb:74:ad:0a:fa:29:0f:db:3c:21:61:7c:54:1c:2b:
                    a1:1a:f3:36:32:ed:01:e0:96:10:cc:b8:dc:9b:52:
                    25:40:5d:f0:9c:9e:70:74:4b:7c:e2:a0:37:ed:bf:
                    13:47:18:ff:d1:40:e1:a3:db:cc:9d:00:1f:40:25:
                    bd:69:5a:23:73:c3:dd:0a:af:bc:df:13:f7:bc:be:
                    e6:0b:89:bb:57:a9:91:37:6e:0c:9a:59:8c:40:79:
                    af:99:85:c4:a4:f1:61:f9:75:3a:c8:18:d9:48:85:
                    ef:75:9a:89:25:21:88:a7:1f:6d:5c:be:7e:fd:c1:
                    ad:25:44:c7:ee:76:7d:7e:5c:4b:46:8c:28:df:aa:
                    08:48:53:12:aa:54:c1:43:56:72:4c:c8:59:63:97:
                    68:cc:b0:44:e6:5a:ee:aa:8f:3e:10:78:bf:60:f8:
                    05:73:c8:df:7a:bc:24:65:19:aa:5a:ae:2c:64:23:
                    ab:68:ac:74:47:ad:d7:1e:5b:1d:7a:53:21:a4:43:
                    47:18:1f:bb:50:a1:bc:d3:c9:5c:9b:76:04:5d:7d:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B3:16:84:33:C4:C9:BF:C7:67:FA:75:60:4B:E2:FC:A9:FC:08:48
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ArMWhDPEyb_HZ_p1YEvi_Kn8CEg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.184.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         55:22:11:e7:5c:a7:23:ac:d9:43:2d:29:c3:c2:2d:fe:49:6c:
         a8:9b:8b:79:d4:44:38:17:73:a0:3a:bc:d4:22:a0:aa:cf:26:
         f2:2d:f4:97:b1:11:b7:e8:e3:54:9d:06:54:cc:53:45:57:66:
         d5:e2:69:38:3d:3f:b3:e1:7b:60:55:be:bc:e9:39:6b:49:1f:
         0c:7c:f2:21:bf:87:0f:92:2c:d1:d4:a9:50:81:53:44:1f:49:
         7f:db:4f:ea:30:e6:34:c2:3d:0b:aa:e4:bb:a4:6f:15:61:35:
         e9:f8:60:00:55:9c:92:ce:41:a6:75:7d:78:da:53:f5:ea:bc:
         f2:1a:38:5f:90:89:8f:e4:96:9c:86:f4:ce:7a:7f:b2:06:8a:
         dc:a0:e2:0e:4c:17:30:43:66:53:a4:36:0e:6d:20:43:04:a7:
         31:cb:e5:5f:6a:52:2c:2d:73:c5:08:24:0f:18:6e:8e:44:07:
         52:2d:cc:44:0c:32:fa:85:bd:18:23:0a:b1:f3:42:d7:46:a0:
         d5:39:84:37:e6:c4:25:4e:ad:b7:88:87:98:e7:ca:e4:65:ea:
         c0:2f:08:9a:1b:ff:a5:6a:1e:04:96:88:46:f6:1d:cd:2a:e3:
         69:7e:fe:32:7b:57:20:eb:50:b4:c9:b5:54:38:8d:c4:e3:e9:
         c0:4a:7f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 04:12:40 2024 by rpki-client on console-fra.rpki-client.org