Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/UiJSLXdz04IMiu__XxCOhjUcfC8.roa
File:                     UiJSLXdz04IMiu__XxCOhjUcfC8.roa (raw, json)
Hash identifier:          oVgrcS0Dji+XiluOptZEXGgCQh9JOBYF/LRzYcOhnY8=
Subject key identifier:   52:22:52:2D:77:73:D3:82:0C:8A:EF:FF:5F:10:8E:86:35:1C:7C:2F
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0172
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UiJSLXdz04IMiu__XxCOhjUcfC8.roa
Signing time:             Sat 01 Jul 2023 01:30:40 +0000
ROA not before:           Sat 01 Jul 2023 01:30:40 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        202.191.16.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:40 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5222522D7773D3820C8AEFFF5F108E86351C7C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:aa:e7:01:4b:63:92:46:39:3d:ef:c4:4e:
                    3f:9d:24:c6:2f:a8:9d:7b:9d:55:c3:b3:59:b5:a9:
                    3a:f2:25:ed:60:54:aa:a1:d8:e7:6d:3e:14:d1:7a:
                    dd:88:ea:e1:47:cf:cd:5d:e2:6b:34:65:7a:71:a9:
                    e2:92:a0:6a:57:1d:10:4d:8a:06:41:a7:33:a1:6c:
                    4d:91:77:fc:d6:ef:4a:5e:5f:8f:2e:9d:06:d4:85:
                    8e:1a:29:f4:23:bc:c8:3f:a4:33:65:00:8c:26:81:
                    95:7e:47:38:4f:d4:93:e5:cd:b4:0b:21:5a:cd:31:
                    93:19:ee:5e:26:5e:59:59:b4:03:55:da:11:52:aa:
                    9c:66:9b:19:2f:73:b9:64:9a:ca:ff:7e:6f:bf:98:
                    8c:58:13:28:10:72:08:70:cd:80:43:ce:5d:2d:55:
                    5c:5c:18:05:41:66:0f:c1:b0:7e:25:31:6d:56:ad:
                    2c:a0:19:75:ff:fc:e3:28:4e:59:5c:ab:6e:6f:8d:
                    2e:31:9b:b2:6e:78:9f:c7:ac:81:84:65:12:01:b9:
                    80:e7:a0:e4:cd:f6:61:d9:79:17:0d:ec:ae:6d:f4:
                    43:34:b8:d5:ea:c7:62:85:33:76:48:51:b3:e3:a5:
                    fb:76:54:74:03:25:eb:d7:92:24:b6:b2:fd:92:47:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:22:52:2D:77:73:D3:82:0C:8A:EF:FF:5F:10:8E:86:35:1C:7C:2F
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UiJSLXdz04IMiu__XxCOhjUcfC8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.191.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:9d:08:6b:7d:40:57:b9:39:ad:03:26:42:73:2f:74:94:f4:
         4e:95:48:bd:97:fa:0b:34:d9:db:12:e8:d4:59:40:ce:b7:e7:
         ad:09:e3:3e:08:7f:1b:97:80:d0:7e:ae:be:0d:cb:0f:34:cd:
         96:19:9a:a7:e0:55:88:9f:59:d5:97:57:d2:4c:5a:21:30:28:
         c3:df:db:01:1c:4e:8e:90:3a:8b:47:49:cb:e3:38:81:74:66:
         b8:a1:42:bf:91:69:3f:71:3b:61:45:17:96:ea:e2:38:f7:88:
         13:9a:ba:fe:13:68:88:a9:cc:ec:66:c7:d1:eb:aa:c6:d1:c2:
         f1:b8:7a:b2:c8:14:fd:d6:8a:fd:7d:1c:05:8e:37:0e:26:29:
         74:c5:3d:c9:d5:6f:91:29:90:96:9a:6b:24:3d:c7:ce:d7:94:
         90:fd:33:1f:84:d1:52:38:7b:93:05:50:0f:cd:87:57:73:9e:
         58:ff:43:cf:8d:29:aa:94:90:cd:0c:4a:3f:06:6b:e3:3f:48:
         20:fc:5c:3e:9b:ee:90:fe:d9:82:3d:56:a2:ff:af:81:04:e0:
         92:47:95:06:23:99:55:a0:a9:8e:f7:fa:23:ef:dd:6a:ea:49:
         a5:bb:16:10:5c:7e:4f:eb:f5:0d:99:9a:22:fd:53:54:10:a6:
         51:c0:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org