Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Edwahj4bJXf3FohkjGyU1nwAaUM.roa
File:                     Edwahj4bJXf3FohkjGyU1nwAaUM.roa (raw, json)
Hash identifier:          dUNtF/YrmRdFe70j2UduOv76/80tTsczfmu1ULdYDw0=
Subject key identifier:   11:DC:1A:86:3E:1B:25:77:F7:16:88:64:8C:6C:94:D6:7C:00:69:43
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0154
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Edwahj4bJXf3FohkjGyU1nwAaUM.roa
Signing time:             Mon 01 May 2023 01:28:14 +0000
ROA not before:           Mon 01 May 2023 01:28:14 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        61.112.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:14 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=11DC1A863E1B2577F71688648C6C94D67C006943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:75:ac:44:6e:ce:04:8c:23:9e:8d:30:de:
                    c3:3e:c3:85:22:44:cb:b0:13:8b:97:0d:0d:94:2f:
                    c9:0d:36:e5:0a:90:f4:eb:52:a6:f3:3b:9b:04:4a:
                    de:09:4c:00:49:0c:35:78:7b:7c:39:d6:89:12:d7:
                    ec:72:fe:c3:ac:cf:f7:d3:60:22:66:1b:0f:44:4f:
                    5d:3e:16:99:4e:57:65:37:7e:a5:a2:1c:6b:81:79:
                    e3:c8:7c:0f:85:6d:81:6c:8c:57:a5:1d:0b:81:df:
                    67:9f:ea:38:8e:2d:96:8d:fa:ae:31:e6:f8:a8:ec:
                    81:79:36:78:ed:82:a8:ba:d8:cd:e8:0a:50:28:80:
                    cf:9d:cb:2a:9b:b5:e1:10:89:1f:da:14:f6:5b:6a:
                    e1:6f:9e:38:b9:2a:e6:3e:ca:ea:e9:34:56:98:46:
                    7b:ef:af:a4:99:39:5f:bc:32:aa:01:1d:ea:b3:51:
                    ac:2d:27:ec:88:33:9f:96:5b:a3:80:bd:7a:7b:1f:
                    c5:2d:7e:a1:f5:93:5d:22:b1:5c:3c:e1:d0:0f:e3:
                    77:b9:36:86:3c:31:60:9e:91:08:85:a3:24:48:1b:
                    da:b2:4a:a4:d8:76:bb:41:bb:f9:91:0b:86:f6:82:
                    17:ec:26:95:df:91:bb:7f:6f:aa:3b:6b:58:fe:75:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DC:1A:86:3E:1B:25:77:F7:16:88:64:8C:6C:94:D6:7C:00:69:43
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Edwahj4bJXf3FohkjGyU1nwAaUM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.112.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         17:fb:9a:7f:94:ad:a3:69:6e:5e:e1:df:48:d7:37:47:5d:27:
         73:29:2d:24:d8:84:f8:8e:23:09:3a:e7:ef:47:7b:09:8c:68:
         a1:88:9c:5c:cf:91:74:3c:1c:dc:28:19:50:65:0d:f2:da:15:
         34:05:10:aa:ee:83:0d:58:0f:30:76:b3:34:a9:fa:1a:66:54:
         b1:a3:40:e3:a5:6d:cb:33:04:fe:d9:ea:d2:bf:c8:62:05:d6:
         39:57:14:dc:54:4e:12:bb:cc:d0:00:7c:c1:d2:52:75:17:74:
         f2:98:84:7c:a4:df:33:ef:b2:43:3d:76:fe:18:06:1f:2c:8d:
         f3:07:37:4c:a7:fd:cd:c9:59:63:39:5a:f0:0b:7c:34:86:19:
         0c:81:75:56:13:a7:d8:e9:b9:f5:ae:d7:fe:a4:52:8e:c6:1b:
         56:14:51:28:bf:83:95:db:19:f0:04:84:9e:17:82:52:50:74:
         68:d0:2f:04:a4:b8:c0:cc:85:08:67:26:09:11:04:c7:dc:87:
         42:7c:3a:b6:5d:94:74:93:65:0b:15:65:1f:4e:f6:34:3b:8e:
         56:a4:b4:c8:ec:23:ca:05:79:dc:bd:57:3b:81:ac:80:a0:f8:
         95:da:65:7f:b9:bc:a1:d6:3b:78:b9:7c:c9:fd:db:49:6c:de:
         34:5f:d7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:21 2024 by rpki-client on console-ams.rpki-client.org