Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20093/8_N6LLw3LdOIbUDJz_zzBu4zpbc.roa
File:                     8_N6LLw3LdOIbUDJz_zzBu4zpbc.roa (raw, json)
Hash identifier:          4tlpCexWUvsNn00K7HzRxUq3bVFViG7H72XHpRiFitY=
Subject key identifier:   F3:F3:7A:2C:BC:37:2D:D3:88:6D:40:C9:CF:FC:F3:06:EE:33:A5:B7
Certificate issuer:       /CN=711F626595BDEABE9334C61D729C4DA254CED91C
Certificate serial:       2F
Authority key identifier: 71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/8_N6LLw3LdOIbUDJz_zzBu4zpbc.roa
Signing time:             Sat 01 Jul 2023 01:28:21 +0000
ROA not before:           Sat 01 Jul 2023 01:28:21 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     131949
IP address blocks:        202.226.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711F626595BDEABE9334C61D729C4DA254CED91C
        Validity
            Not Before: Jul  1 01:28:21 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=F3F37A2CBC372DD3886D40C9CFFCF306EE33A5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9e:74:d0:3b:72:a1:c6:84:a8:58:ca:45:6f:
                    c3:1c:06:42:0e:3b:c2:87:d3:16:71:ad:7b:b1:24:
                    c1:6e:15:c7:d2:b1:8b:e6:92:ab:9f:c2:45:56:54:
                    b0:47:0d:4f:35:90:c1:37:f0:1c:16:a2:24:d7:a3:
                    5c:b4:6c:47:67:48:ce:a1:ef:02:fc:9e:4b:f3:e6:
                    d8:54:46:8e:ad:d4:c3:bc:d2:47:e7:fb:21:3e:ac:
                    1f:ad:2f:22:d6:ed:d5:6a:2a:9f:11:bd:b4:ab:f9:
                    4b:1b:d4:99:c4:83:53:09:6d:61:f1:e0:fe:59:c6:
                    7f:0a:7b:50:65:d3:a8:4c:6f:0d:4c:d4:94:a9:37:
                    ac:c1:ca:e0:12:72:ed:ec:d3:fa:0c:00:74:18:c0:
                    f1:fa:6b:a5:eb:a0:d1:4f:8b:e5:4a:c2:1b:d6:f3:
                    36:41:d7:d6:9c:f1:23:1e:3c:b1:6c:4b:a4:fa:5c:
                    ce:69:83:c4:b1:54:47:78:e3:d7:b1:1b:9e:4d:7e:
                    42:7a:47:47:87:97:f7:59:95:b9:8f:17:f5:85:bc:
                    ef:da:4f:b1:b6:03:b3:e6:29:3c:c2:64:94:67:f0:
                    42:5a:b7:12:7b:89:d3:79:80:64:4a:cb:26:54:2e:
                    18:91:28:5a:65:af:5a:9b:cd:0d:c3:8c:22:5e:2f:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F3:7A:2C:BC:37:2D:D3:88:6D:40:C9:CF:FC:F3:06:EE:33:A5:B7
            X509v3 Authority Key Identifier:
                keyid:71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/8_N6LLw3LdOIbUDJz_zzBu4zpbc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:fd:59:80:98:b1:e1:d0:d0:d5:a5:92:f7:a8:88:54:18:a1:
         f2:9b:11:53:55:75:37:ea:0f:6f:50:a9:6c:e6:ff:51:36:cf:
         b0:5b:8c:2f:22:02:14:cb:e8:5b:3a:4d:8e:77:52:67:eb:da:
         c0:a0:6d:24:09:c6:10:e9:f6:0a:a1:b6:56:c2:9e:c5:64:4b:
         fb:13:17:59:59:62:d9:5b:22:c6:1c:80:93:f4:4e:b6:30:b2:
         14:89:af:9d:5b:cc:4b:3c:09:d8:d3:0f:1a:2a:71:bd:aa:5b:
         4e:05:3a:8a:a0:2a:49:03:42:46:81:b3:d4:32:8f:66:fe:44:
         a4:af:50:26:30:fc:e0:79:81:09:ca:57:89:c3:90:38:47:e3:
         ce:02:c1:21:02:29:d6:84:e0:66:64:7d:93:09:77:2a:da:c4:
         5e:21:d3:65:41:28:83:3d:91:0c:8d:a8:66:d8:c8:89:a1:f5:
         e3:23:a9:75:c6:61:df:8e:29:27:42:b3:9f:d7:3e:55:20:d3:
         c6:33:e3:bf:03:6b:c7:ee:e6:63:d7:24:1f:be:7c:a8:6c:e7:
         59:23:6f:b5:e7:c6:4d:e3:4e:a6:1e:c0:1d:28:5a:69:d7:13:
         f0:1e:4e:50:66:d6:2a:e2:e0:46:90:d2:38:f8:de:f0:2a:e0:
         00:07:fa:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org