Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Y5tOa6aFQBU5inYMSIJQGVoi0O8.roa
File:                     Y5tOa6aFQBU5inYMSIJQGVoi0O8.roa (raw, json)
Hash identifier:          Ow2qnAqocaQZ+GOPLxElqTARxL33AezglX/aAsH22xI=
Subject key identifier:   63:9B:4E:6B:A6:85:40:15:39:8A:76:0C:48:82:50:19:5A:22:D0:EF
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0183
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Y5tOa6aFQBU5inYMSIJQGVoi0O8.roa
Signing time:             Sat 01 Jul 2023 01:30:47 +0000
ROA not before:           Sat 01 Jul 2023 01:30:47 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        211.11.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:47 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=639B4E6BA6854015398A760C488250195A22D0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:a7:d5:77:5c:e5:4d:26:85:ee:1e:d6:fa:
                    fd:70:7e:7f:45:20:88:00:80:49:0a:bc:38:43:72:
                    0e:40:fa:37:9c:f1:a6:60:cf:44:04:4e:33:ff:4b:
                    a1:a5:dc:d7:0f:db:e4:26:82:04:ca:f8:77:b2:5e:
                    e3:db:b9:1b:9d:9a:04:6a:98:1c:a7:45:92:59:0b:
                    96:15:e5:47:86:48:1a:41:ea:78:28:3b:48:0c:24:
                    9e:1a:a7:f5:50:21:30:c3:45:90:f1:aa:45:30:c9:
                    ca:5d:7d:21:cb:0c:fc:b4:ac:80:52:24:bd:a3:d6:
                    19:16:08:8b:e8:86:5e:06:ef:d2:53:60:c4:9c:c9:
                    64:8c:7a:35:c5:1a:b2:64:7c:6a:6c:83:3e:60:1f:
                    ad:f2:e2:1d:1c:44:5c:06:f8:86:ae:d5:98:c7:fa:
                    fb:22:45:bb:58:58:40:b7:e1:88:8f:ad:52:57:77:
                    69:58:0e:ed:95:68:80:15:d6:d4:c9:94:4f:5a:cb:
                    03:63:15:c5:45:6a:dc:87:54:23:06:f3:7e:e9:9f:
                    36:4d:30:2a:50:a4:79:74:02:7f:73:db:de:c7:0f:
                    93:53:93:fe:0f:1a:9e:fc:a2:de:97:ab:a5:ed:32:
                    a9:ac:9e:31:92:98:17:51:f0:25:4f:13:32:e9:ee:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9B:4E:6B:A6:85:40:15:39:8A:76:0C:48:82:50:19:5A:22:D0:EF
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Y5tOa6aFQBU5inYMSIJQGVoi0O8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.11.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:cf:73:38:16:85:f0:9f:fa:e9:cf:19:38:1a:5e:56:bc:85:
         ed:09:9e:ae:d7:13:e5:d6:f1:ff:5a:cf:17:c8:4f:4c:15:1b:
         bc:72:48:92:98:f5:af:dd:81:c8:32:58:a2:d2:11:b5:73:b1:
         90:38:dd:43:be:c8:4e:26:4f:6e:0d:d0:f2:ab:da:79:42:18:
         22:42:35:3f:f8:d2:9d:19:c3:47:47:5b:8e:c9:67:15:12:5e:
         d8:9c:89:0d:ac:f3:37:a4:bf:17:17:b8:23:c3:1c:7e:53:7e:
         4a:cb:f3:4a:1d:0e:3f:f9:3b:3e:03:06:02:d6:fb:f2:bf:ec:
         07:19:7d:ca:7b:1a:cb:ff:71:6f:f9:13:5f:a2:34:c5:69:1e:
         32:a8:66:0b:04:92:f9:6d:a0:87:c7:7a:1f:a9:9a:7f:82:21:
         fc:5d:4a:43:0c:06:3d:e2:77:0b:1b:80:5b:65:09:d2:3a:36:
         87:58:27:10:32:50:c1:e4:7d:f7:3a:da:c8:70:84:f7:ee:25:
         4e:e8:95:d4:70:0d:ff:a6:f1:2a:e1:7b:ef:46:4c:2d:7b:6e:
         5b:2b:16:8e:41:1d:55:ed:29:22:41:79:ed:c1:25:97:17:00:
         50:9c:38:46:47:ec:95:01:55:c7:23:d7:3d:df:b0:bc:8d:f7:
         b1:a0:17:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org