Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/LeKvZzpAhfY-lqnKmkcZ_JbjyQM.roa
File:                     LeKvZzpAhfY-lqnKmkcZ_JbjyQM.roa (raw, json)
Hash identifier:          ON3l8CdUPzCL8+ffTIxC4Vx2dWsAqkbuEHFa9BwXWo4=
Subject key identifier:   2D:E2:AF:67:3A:40:85:F6:3E:96:A9:CA:9A:47:19:FC:96:E3:C9:03
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       0D
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/LeKvZzpAhfY-lqnKmkcZ_JbjyQM.roa
Signing time:             Thu 16 Nov 2023 02:48:40 +0000
ROA not before:           Thu 16 Nov 2023 02:48:40 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     18266
IP address blocks:        210.143.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 01:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Nov 16 02:48:40 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=2DE2AF673A4085F63E96A9CA9A4719FC96E3C903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:d8:cf:ad:8a:c0:a3:c4:c3:aa:c3:e0:aa:
                    a6:ea:96:67:58:4b:37:b0:e9:53:f0:eb:dc:0d:5f:
                    e7:69:9a:e9:ea:38:ed:e9:6f:f6:0f:48:a1:04:90:
                    de:2c:35:8c:16:36:cd:0b:94:0c:22:70:05:b7:42:
                    48:71:f3:23:f1:0e:6a:dd:0f:b6:da:e2:fc:f6:c6:
                    a1:b4:bd:df:15:ab:2f:13:b9:25:9f:53:93:f8:a4:
                    7b:47:65:29:4a:5a:e5:e7:8c:7b:5d:99:e7:4f:06:
                    63:c3:43:69:95:a6:78:18:46:a6:7b:21:12:b3:55:
                    b2:c3:57:b5:5d:6c:d0:5c:77:26:f5:03:49:cb:bb:
                    f5:2b:37:74:bb:66:38:07:18:d3:7c:f2:2a:72:5a:
                    f8:31:ad:9e:8f:b7:2a:3c:f7:0b:ad:e7:13:da:14:
                    fb:df:54:f7:17:27:e7:7e:6c:88:8e:63:90:58:ef:
                    1e:1a:fc:90:e0:d4:00:b0:da:e6:d9:da:9b:ab:04:
                    c3:df:bb:b1:79:b7:e0:2a:ec:d9:dc:04:7f:4a:07:
                    0f:7f:c9:b7:ef:7d:23:7b:7d:19:7b:b8:8b:f7:a7:
                    be:ed:4a:f0:ac:90:64:97:ae:0f:27:96:e3:3c:d3:
                    cd:a2:9a:31:4b:63:a4:4e:fc:6f:5f:88:96:37:fd:
                    44:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E2:AF:67:3A:40:85:F6:3E:96:A9:CA:9A:47:19:FC:96:E3:C9:03
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/LeKvZzpAhfY-lqnKmkcZ_JbjyQM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d2:5e:a9:a8:03:b0:a9:53:dc:08:cb:d6:3f:4e:43:2f:a4:1b:
         37:5b:87:f4:fa:21:72:b6:23:73:3a:88:43:2e:8c:68:71:46:
         30:3f:ca:7c:8f:5e:72:3f:f0:64:fc:ee:d3:7a:c1:79:06:51:
         e6:41:34:2a:3f:4f:fd:15:48:e8:0f:4b:bf:22:03:49:a6:fb:
         b7:9b:f9:04:68:ac:9c:29:9b:30:4a:74:8c:58:e6:aa:5f:c8:
         68:5c:bb:06:86:08:7c:97:9a:e7:2d:63:90:3b:4d:e3:08:e0:
         85:91:91:5b:bc:3a:1c:1d:0c:f1:ad:57:2b:db:bb:16:21:d3:
         b3:ff:9e:35:ce:1b:b1:ed:46:06:b7:01:8f:f2:1e:6d:71:b1:
         63:5a:00:d0:aa:cc:11:e5:8a:97:42:fc:1a:a0:d7:af:82:94:
         b9:d0:a1:5a:b8:f7:0f:70:88:b8:b8:93:18:bc:2b:93:f0:cb:
         9f:96:ae:26:d5:2f:ec:4f:a1:9a:65:a6:c8:d2:b3:a4:50:d1:
         1f:2d:9e:93:c8:c5:1f:32:34:20:01:36:07:88:a1:c2:59:7a:
         da:a3:a2:34:03:4e:80:1e:c6:6f:ac:e6:18:68:a1:8d:7d:7b:
         c8:b8:6a:bc:e3:2a:7e:42:f0:b4:a3:a5:ca:b5:7a:c1:87:a0:
         56:66:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 03:53:35 2024 by rpki-client on console-fra.rpki-client.org