Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30376/epGSGtJMsGgD7JhIs2JH9PpfEyY.roa
File:                     epGSGtJMsGgD7JhIs2JH9PpfEyY.roa (raw, json)
Hash identifier:          8azvIju4DBBFMPPoxGJb4KR7n/RzlXmX1bIr1fCq09w=
Subject key identifier:   7A:91:92:1A:D2:4C:B0:68:03:EC:98:48:B3:62:47:F4:FA:5F:13:26
Certificate issuer:       /CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
Certificate serial:       1F
Authority key identifier: E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/epGSGtJMsGgD7JhIs2JH9PpfEyY.roa
Signing time:             Sun 01 Oct 2023 01:30:27 +0000
ROA not before:           Sun 01 Oct 2023 01:30:27 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     24277
IP address blocks:        2407:58c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
        Validity
            Not Before: Oct  1 01:30:27 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7A91921AD24CB06803EC9848B36247F4FA5F1326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:4f:85:0d:4c:a5:89:ab:03:b7:03:17:2d:
                    be:b5:70:1d:6c:ed:e9:bd:84:08:5f:48:06:31:a4:
                    4d:43:79:bb:16:e1:5e:03:b2:61:ae:32:53:0a:f5:
                    39:2f:81:5e:71:d8:07:38:a2:35:4f:be:ba:ac:22:
                    b2:17:95:95:9c:e9:e3:ac:ec:23:01:52:e5:6d:73:
                    f4:4c:fb:4a:87:b5:4d:10:4a:d6:ae:c0:46:63:1a:
                    ef:6a:66:6d:df:14:44:33:b8:30:5a:a8:10:54:01:
                    3d:99:cc:f2:57:bc:61:d8:6d:3b:1a:07:64:50:52:
                    ed:3a:48:6a:b7:96:93:61:99:d1:31:ab:cb:70:c6:
                    b7:bd:a1:c8:7b:15:07:e7:cf:5d:51:c9:51:7e:03:
                    cd:b5:3e:c6:1b:7a:53:a7:06:0b:8f:67:fd:b7:ee:
                    ff:2c:b9:9e:6b:ec:00:b8:35:2d:93:e6:62:18:88:
                    77:1a:03:1c:00:90:20:10:7e:c7:b3:af:ac:bd:34:
                    75:fc:b5:b1:75:74:e0:9a:86:ef:d3:9f:d4:57:5f:
                    3b:19:02:81:6b:9e:c0:d6:20:8b:2e:c1:45:55:22:
                    81:1b:f7:f0:ad:22:3d:e8:2b:c7:be:a3:83:20:65:
                    37:fa:d7:9d:ca:9e:6e:45:ec:19:ca:5f:b6:c5:76:
                    25:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:91:92:1A:D2:4C:B0:68:03:EC:98:48:B3:62:47:F4:FA:5F:13:26
            X509v3 Authority Key Identifier:
                keyid:E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/epGSGtJMsGgD7JhIs2JH9PpfEyY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:1e:57:39:41:f3:f1:06:c0:ff:32:76:3d:d3:9f:1a:38:fd:
         4a:cf:71:11:33:0d:3a:74:ca:c3:f2:8e:9e:45:1f:13:30:07:
         62:8d:d1:0e:90:a3:2b:8b:f1:10:c2:1b:e5:d3:e7:6e:69:48:
         35:a8:86:5f:69:3b:9e:8e:c5:ea:1a:f4:61:b1:87:32:c6:f0:
         37:80:93:3c:70:c9:77:c7:07:51:2a:33:cc:de:15:d3:fc:e4:
         cb:ad:22:cd:08:68:f3:f6:bc:10:1e:91:6a:2d:b8:31:79:fb:
         6f:1d:d1:2b:92:b9:b4:1d:35:f2:c0:2e:f3:92:d4:8f:1a:67:
         22:b6:33:88:b8:a7:f1:cb:fa:32:29:e1:01:d5:4a:b2:e2:ea:
         88:58:af:ee:9b:7b:72:08:2a:83:32:23:ec:d9:fd:05:9c:3b:
         52:98:e8:af:b2:0e:c2:90:f0:ae:e6:34:5b:43:be:82:76:4c:
         82:70:47:ca:51:1e:cc:2a:5f:49:03:7a:8e:d9:1e:4b:37:6b:
         7d:e3:1e:94:8d:e2:43:50:42:6d:3d:20:26:91:21:06:75:31:
         a0:6a:39:ef:9c:e2:7e:20:7e:f8:16:2c:89:fb:7c:47:16:f5:
         7e:fb:e9:e6:92:14:70:cd:82:03:8d:ed:57:1e:83:02:8a:09:
         bd:ad:75:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org