Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/I2TQIxtc54ou62ovdPtEXPyGCek.roa
File:                     I2TQIxtc54ou62ovdPtEXPyGCek.roa (raw, json)
Hash identifier:          y9FKkqnkGP01fnCR8lcUfPD1SPZ2PfXffNFonuIDVZc=
Subject key identifier:   23:64:D0:23:1B:5C:E7:8A:2E:EB:6A:2F:74:FB:44:5C:FC:86:09:E9
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0190
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/I2TQIxtc54ou62ovdPtEXPyGCek.roa
Signing time:             Sat 01 Jul 2023 01:30:53 +0000
ROA not before:           Sat 01 Jul 2023 01:30:53 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        220.104.0.0/13 maxlen: 13

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:53 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=2364D0231B5CE78A2EEB6A2F74FB445CFC8609E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:5d:ae:4a:4c:82:67:d5:60:00:15:09:b2:
                    47:13:b6:50:93:f8:9a:ad:58:35:af:14:cc:1c:a8:
                    d7:58:ab:a6:02:50:ed:58:9d:c0:7c:88:fb:22:8b:
                    46:e6:5e:dc:c1:9c:ab:7a:f6:bf:a7:81:2b:bd:60:
                    41:37:ae:97:23:30:12:a8:c5:99:6b:c6:6a:31:0e:
                    94:8f:56:a9:ba:02:06:f7:a7:e2:f2:d5:ff:55:0e:
                    1c:ae:bc:62:a6:5f:1b:83:ad:96:fb:49:c5:61:4b:
                    e5:dc:ff:e7:a3:0e:b3:04:81:47:dc:80:85:41:4f:
                    18:91:05:03:1d:e9:99:aa:7a:be:4e:6f:41:09:5b:
                    c4:b3:5a:d1:d5:5f:09:e4:c4:ee:dd:08:fd:12:77:
                    ae:6e:fc:19:73:63:21:cf:b9:d4:29:53:7b:6e:4e:
                    18:3b:36:15:4d:0f:11:02:2d:45:bb:d8:55:19:2c:
                    ca:00:bf:66:bc:3c:7a:05:52:f1:32:16:b9:35:0d:
                    8b:5a:f1:7d:cf:dc:5e:cc:46:03:5d:92:bd:9c:76:
                    d4:8c:cf:75:68:88:a9:6f:ab:fa:1b:a0:09:b6:dd:
                    23:d0:f5:27:80:95:e9:dd:44:28:d9:c4:da:d4:ea:
                    8d:e6:ce:24:42:2f:fa:63:6c:dc:f4:72:ec:dd:b0:
                    86:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:64:D0:23:1B:5C:E7:8A:2E:EB:6A:2F:74:FB:44:5C:FC:86:09:E9
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/I2TQIxtc54ou62ovdPtEXPyGCek.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.104.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         4d:96:59:19:76:66:10:8d:f6:70:bb:04:67:ad:a5:be:b5:89:
         ca:78:64:3d:0e:3b:b4:7b:58:58:36:06:ea:be:2a:76:f7:e5:
         5b:90:6c:3f:8d:70:2f:27:78:be:9c:47:e9:f4:d8:64:e8:42:
         3d:97:cb:f0:6f:37:13:d5:4a:55:1e:cf:f9:a2:08:45:dd:c2:
         a2:de:b8:5c:67:37:7e:76:e2:55:e9:50:1a:57:30:b5:98:25:
         b0:59:42:22:4a:57:c6:79:69:85:0b:97:66:a5:ed:45:bd:16:
         f6:64:e9:0b:03:8f:0e:9b:65:f8:4b:87:c5:0e:ee:ae:6b:0e:
         18:7f:62:21:1a:f1:7b:cd:4c:c9:91:92:c5:06:37:3d:2b:c8:
         6d:c0:b2:84:18:19:6b:16:32:f0:c3:5a:14:66:40:ee:fc:77:
         53:bf:fb:78:da:28:62:79:c1:25:b5:02:fa:6c:a5:13:8e:42:
         9f:ee:b7:0a:f0:71:ea:a6:0c:7d:e8:58:a6:38:fa:65:ff:4f:
         83:25:24:54:4f:52:b5:00:d1:bc:b3:15:08:1c:49:78:f1:a2:
         6f:d9:ee:1a:f7:00:49:d3:38:11:c5:f5:80:2d:1b:78:cd:c9:
         03:76:a4:df:cd:7d:a3:74:22:c8:be:1a:8e:13:9a:fb:97:3b:
         ba:df:1c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org