Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/6Y2zmnR2Uu-8xsrntDQ1m82YAfc.roa
File:                     6Y2zmnR2Uu-8xsrntDQ1m82YAfc.roa (raw, json)
Hash identifier:          Daw3L+eC1ErjMx2Bq2wkKeDHWXqVAZsiMQUxoDKsTJc=
Subject key identifier:   E9:8D:B3:9A:74:76:52:EF:BC:C6:CA:E7:B4:34:35:9B:CD:98:01:F7
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       77
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/6Y2zmnR2Uu-8xsrntDQ1m82YAfc.roa
Signing time:             Wed 01 Nov 2023 01:28:42 +0000
ROA not before:           Wed 01 Nov 2023 01:28:42 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     7521
IP address blocks:        210.173.186.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 01:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Nov  1 01:28:42 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=E98DB39A747652EFBCC6CAE7B434359BCD9801F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:ef:dc:90:6c:ff:fd:aa:06:62:61:24:9c:
                    19:03:99:e5:fc:0f:b7:65:97:35:8b:6e:90:46:65:
                    b8:96:30:0e:6d:85:1a:1f:82:39:ca:c8:7b:13:bf:
                    5d:3f:f3:2f:dc:05:20:9e:23:be:bb:60:84:42:c5:
                    2f:28:9b:77:8c:4e:f9:60:86:68:c2:34:8b:1f:47:
                    1b:c4:14:0c:04:91:7e:1b:8a:b0:b7:90:6d:1f:52:
                    5b:19:a3:f0:26:56:47:5c:2a:1f:16:2a:b1:b5:5a:
                    85:d2:66:4b:fe:ae:a1:03:e7:e9:12:06:b2:cc:c8:
                    a4:2d:ac:09:3f:8c:35:ac:4b:ad:eb:bb:3b:a3:1f:
                    9c:da:76:da:eb:53:6f:ef:9a:81:a4:2a:13:51:74:
                    0e:a3:57:e0:85:1a:9f:82:70:00:ec:53:be:27:8d:
                    14:5d:cc:41:61:d0:af:7a:d5:17:92:ea:93:f3:18:
                    fb:85:9e:2e:6e:a9:9d:5b:41:10:a7:b9:35:18:8a:
                    e1:2d:c1:31:8f:10:22:4d:61:68:13:33:5c:ec:0a:
                    42:5a:1d:1f:4a:7e:a9:5d:97:c2:72:6f:6a:72:9d:
                    9e:35:c6:3f:cc:be:f2:5c:82:71:08:3c:38:b7:5c:
                    b5:ff:b4:36:66:0a:b6:51:3f:c2:ba:47:07:7c:67:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8D:B3:9A:74:76:52:EF:BC:C6:CA:E7:B4:34:35:9B:CD:98:01:F7
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/6Y2zmnR2Uu-8xsrntDQ1m82YAfc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:ac:8f:b0:cd:f0:a3:12:a4:4a:96:d1:c7:33:22:79:a5:7d:
         5b:2e:99:5d:1c:e7:2e:a3:73:ee:80:21:74:58:37:2e:54:6e:
         a8:d3:71:d5:7d:7c:fd:60:9a:61:67:79:eb:57:74:c2:fe:4d:
         26:ee:7e:c1:37:66:4e:7a:ac:0d:d5:62:63:11:eb:08:7e:85:
         a0:4f:ba:c5:c1:9c:9c:15:d9:b8:04:ad:1b:7a:f3:7d:49:2f:
         46:2a:66:ef:ef:cc:84:b8:14:ec:4d:3a:5e:3c:4e:de:76:2f:
         ee:01:22:30:d9:b5:94:65:4c:00:41:22:7d:e7:10:41:1a:0a:
         62:42:43:a9:aa:45:90:55:c0:57:ba:8a:3c:f7:d4:97:02:d6:
         33:3b:64:5a:50:f6:10:88:7c:0e:b3:4b:3f:e9:3a:33:8e:52:
         0b:c2:1d:49:15:74:31:67:75:3f:76:a6:46:0e:af:44:8e:60:
         c1:96:d4:67:9b:83:f9:4f:bb:27:53:0d:ff:f5:43:7a:35:39:
         a9:66:01:7f:57:1d:9e:6d:3f:1f:b5:e8:19:f5:ac:8d:55:b7:
         a2:d6:00:df:38:d1:49:3d:b8:75:aa:ed:67:40:21:e3:ce:36:
         14:0b:1c:77:c3:66:5d:b5:42:38:63:55:57:17:83:9b:d4:98:
         90:d4:3a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 04:40:47 2024 by rpki-client on console-ams.rpki-client.org