Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/dQtcjI90MG6Ahy8zfm4aBSiuIFA.roa
File:                     dQtcjI90MG6Ahy8zfm4aBSiuIFA.roa (raw, json)
Hash identifier:          vZxZibx4ncPAqtkQD2ZrWO+gAXfCZUbSuPhASvQgzXE=
Subject key identifier:   75:0B:5C:8C:8F:74:30:6E:80:87:2F:33:7E:6E:1A:05:28:AE:20:50
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0186
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dQtcjI90MG6Ahy8zfm4aBSiuIFA.roa
Signing time:             Sat 01 Jul 2023 01:30:48 +0000
ROA not before:           Sat 01 Jul 2023 01:30:48 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        211.16.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:48 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=750B5C8C8F74306E80872F337E6E1A0528AE2050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e2:13:17:db:5d:37:5b:7d:a9:b0:f6:d7:21:
                    d9:d3:a5:91:4c:de:50:bc:6b:b9:28:d9:f3:7d:0b:
                    31:9d:70:a4:fa:ba:01:01:95:58:8e:71:71:44:26:
                    e7:07:9c:fc:2a:b7:37:b7:2c:b2:5c:45:38:8b:cb:
                    68:84:e7:2c:f3:7c:63:77:ac:ca:00:46:63:69:32:
                    ed:d7:6f:4b:01:8a:f3:92:d7:be:38:55:bf:00:1a:
                    13:b1:38:17:22:0c:ab:6b:ad:62:8e:68:26:ba:3b:
                    ad:4e:68:c0:68:57:f2:7b:6d:7f:73:a0:a9:47:44:
                    fa:4f:23:0f:c4:c3:21:c6:f5:7a:c9:53:4e:38:a9:
                    4b:61:97:58:b9:01:9a:08:3c:6d:d4:37:d6:5a:36:
                    91:b8:8c:1f:8e:40:80:6b:52:d4:c8:fa:c2:c6:6a:
                    47:9a:2e:ec:34:3f:71:9b:92:b1:3e:a9:90:8b:11:
                    82:dc:ca:1a:90:44:f9:9a:04:a7:02:9d:5e:48:b3:
                    40:0f:03:94:cc:59:5e:66:ce:40:1f:e6:76:fa:78:
                    91:9e:d3:ce:7f:22:5a:e5:e1:5e:bf:ec:0e:11:d6:
                    74:7c:41:07:3f:11:06:1d:fa:fb:e3:96:e1:dc:a6:
                    34:15:84:d7:b0:8b:10:32:80:e2:e2:9c:b9:d3:ac:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0B:5C:8C:8F:74:30:6E:80:87:2F:33:7E:6E:1A:05:28:AE:20:50
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dQtcjI90MG6Ahy8zfm4aBSiuIFA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.16.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         ae:f8:f8:9d:d2:6d:fd:b1:4f:33:bf:c1:fc:05:18:92:db:86:
         0b:7d:31:51:0c:32:c2:42:35:94:34:a1:a9:8d:3a:a5:da:04:
         a0:05:d5:ae:d7:9e:f7:d8:25:db:4f:ca:1c:45:df:c6:33:21:
         23:3d:72:86:6f:ca:99:10:d7:78:35:0f:5e:91:9c:3d:19:a0:
         c6:5a:62:47:1e:50:b0:1b:7f:3a:30:44:9f:5a:18:d0:0a:d1:
         0e:b6:46:bb:22:1f:8b:00:27:45:31:ae:29:7b:25:f9:b5:86:
         27:d2:22:41:68:a9:7f:8d:2a:5a:2b:32:a6:27:69:0d:28:a3:
         92:bf:b8:05:2f:0c:62:32:ff:7b:24:64:90:65:bf:2d:99:66:
         ce:14:ac:51:f3:6c:68:85:61:fa:32:bd:9a:39:28:5f:54:23:
         f0:33:2f:04:12:80:72:b4:90:4c:51:cf:d6:44:e9:17:24:cb:
         66:0d:17:78:37:3e:7b:24:c3:cc:38:51:b9:94:9e:0e:bc:f9:
         a2:f8:42:a9:7b:10:c8:a5:1a:bb:71:41:77:20:aa:05:54:ab:
         97:d1:68:22:70:ad:a0:4e:8d:89:29:db:c8:d8:36:45:2d:4e:
         d8:64:68:8f:2c:ab:8a:13:dd:69:91:d5:c5:62:07:fa:7e:c8:
         78:6f:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org