Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/31BWquImqC_yFi6HkNgBUygEOB4.roa
File:                     31BWquImqC_yFi6HkNgBUygEOB4.roa (raw, json)
Hash identifier:          RHvFKsPr65zUgqf0ocxPK4tAs3YuSBFcq04mpyhHep4=
Subject key identifier:   DF:50:56:AA:E2:26:A8:2F:F2:16:2E:87:90:D8:01:53:28:04:38:1E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0118
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/31BWquImqC_yFi6HkNgBUygEOB4.roa
Signing time:             Wed 24 May 2023 16:30:14 +0000
ROA not before:           Wed 24 May 2023 16:30:14 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:30:14 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DF5056AAE226A82FF2162E8790D801532804381E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:c2:e7:ff:9c:c7:66:22:7e:5a:23:87:fa:
                    ab:af:42:8d:54:7a:10:21:d7:a5:b7:1d:41:54:74:
                    b4:87:a1:1b:8c:f1:f0:2c:fa:a6:64:c1:1a:c5:e0:
                    d7:e6:57:bd:b4:ac:3e:a6:22:ef:25:94:d7:08:b7:
                    a5:a4:41:27:77:90:44:7a:59:74:3b:7d:a1:ea:40:
                    53:1c:cf:1f:36:31:87:ac:82:bc:3c:89:99:51:1b:
                    a3:43:fe:70:3f:26:18:5d:3f:bb:b7:2e:ed:e3:7b:
                    84:b3:92:dd:db:74:0b:47:29:0d:d7:5c:79:73:28:
                    bb:66:10:13:bb:ee:73:8e:29:78:ba:99:20:07:f9:
                    11:54:32:e1:29:ee:2f:3f:ac:ff:63:60:7a:c1:a1:
                    cd:ec:fa:d8:84:e3:dc:f8:60:83:24:bd:30:7d:09:
                    1e:6e:0d:15:ed:8b:09:fc:fe:c8:ac:de:0c:7c:a8:
                    64:53:43:63:50:2c:e5:73:23:4e:da:1f:76:dd:2b:
                    3b:be:77:51:cd:e6:02:df:19:aa:f2:ee:ff:62:3c:
                    8e:a6:41:37:b6:76:43:39:75:be:c0:6a:bd:5d:57:
                    92:24:20:0e:3e:4e:6b:54:89:73:53:a4:a6:6a:19:
                    d0:9a:22:a0:f2:7f:a1:10:c8:31:be:4d:59:02:3e:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:50:56:AA:E2:26:A8:2F:F2:16:2E:87:90:D8:01:53:28:04:38:1E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/31BWquImqC_yFi6HkNgBUygEOB4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:43:e1:35:00:7f:a8:a5:49:59:99:cf:20:a0:a1:47:91:bd:
         8e:5d:b9:2f:85:46:d6:90:07:c8:1a:b9:40:41:73:2c:33:a8:
         3e:68:ed:71:84:cd:62:41:7d:cd:ce:ca:78:bd:b2:d1:f6:6d:
         6d:56:6c:52:3e:8e:6c:85:06:b8:f9:1f:fd:c1:4d:e8:be:38:
         b2:6f:47:25:e1:40:d8:4e:31:73:4a:16:82:95:6a:e6:60:1c:
         8f:36:c2:4e:57:f9:8f:a6:7d:1c:c8:cf:c4:e8:78:0e:60:1a:
         c9:ce:f5:f3:76:df:de:d5:7d:73:9d:77:a6:c4:3c:01:46:f7:
         66:7c:ab:c0:5f:ca:f8:e0:a7:ec:c0:3f:20:24:43:16:db:84:
         60:a4:dd:ac:cb:02:eb:41:2d:02:a9:07:3c:ab:55:c1:27:42:
         74:58:a8:af:71:3b:65:8d:6b:5d:3b:08:e1:82:89:70:8c:51:
         63:72:89:31:1d:94:ed:a3:06:a5:f4:56:29:69:f9:ee:43:88:
         3c:09:d6:4d:67:af:1d:0b:9c:60:74:5f:75:ed:1d:c8:0d:86:
         41:df:8f:d3:6f:5b:9d:3c:46:ec:e1:ea:71:76:5f:5e:eb:33:
         9f:cf:54:f8:91:40:09:75:dc:4a:e5:69:e0:6f:4b:23:50:89:
         4c:0c:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org