Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ExrtFX6HUSikUQn5h4qs5vItZZk.roa
File:                     ExrtFX6HUSikUQn5h4qs5vItZZk.roa (raw, json)
Hash identifier:          uVuZPVlxuTZTyNXvX8yx90PzX3k24Z829nQDTVg5BZs=
Subject key identifier:   13:1A:ED:15:7E:87:51:28:A4:51:09:F9:87:8A:AC:E6:F2:2D:65:99
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0438
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ExrtFX6HUSikUQn5h4qs5vItZZk.roa
Signing time:             Thu 08 Jun 2023 16:01:46 +0000
ROA not before:           Thu 08 Jun 2023 16:01:46 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  8 16:01:46 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=131AED157E875128A45109F9878AACE6F22D6599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:53:06:cf:67:ae:b1:fc:d3:63:9a:80:26:
                    b3:9a:02:7b:fc:d6:94:38:9b:e9:28:ec:e2:83:87:
                    a5:66:81:26:ea:f5:0d:5b:65:d9:b3:15:8c:a6:56:
                    74:01:af:4d:e0:a3:5b:c6:a4:ea:d4:d5:27:7c:fa:
                    56:fd:96:89:d4:8c:a9:d1:9d:70:6c:ed:87:da:6b:
                    6d:80:40:dc:96:81:6f:7a:ca:18:b5:f0:15:4a:b3:
                    0b:5b:11:80:9e:f0:31:72:c9:8f:23:a3:20:ba:71:
                    d2:ac:f4:c4:bc:77:c1:dd:79:42:78:91:fa:0a:d0:
                    0e:df:df:ee:fc:75:de:e3:e7:59:5f:c2:01:02:40:
                    ad:53:82:e5:66:d3:96:df:18:08:e9:e4:1f:8b:3e:
                    d5:ab:b6:f4:dc:16:52:d5:a1:9e:7e:3c:ef:3b:1b:
                    c6:27:a7:3e:af:d8:25:aa:b2:84:00:b5:56:47:58:
                    a7:63:c9:9e:b3:e8:a8:c0:99:00:da:0a:5d:b1:f3:
                    da:21:c2:27:88:08:7a:56:eb:e2:58:b3:66:a0:f8:
                    41:77:97:41:42:86:83:74:84:38:c3:0b:a8:95:bb:
                    0f:2d:3e:8f:dd:7b:1c:c8:14:76:a6:d7:e9:00:7c:
                    59:08:55:19:db:61:94:63:42:07:1d:ff:26:69:15:
                    47:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1A:ED:15:7E:87:51:28:A4:51:09:F9:87:8A:AC:E6:F2:2D:65:99
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ExrtFX6HUSikUQn5h4qs5vItZZk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:36:dd:04:af:60:97:f1:a2:c6:d4:31:07:eb:c8:db:29:fb:
         9d:f1:e9:d1:65:d5:e6:98:99:a5:60:65:b2:ce:ed:77:0f:68:
         9d:db:73:9f:c2:e7:38:25:71:83:e2:13:94:f0:a4:98:41:6d:
         9f:9c:10:6c:34:94:7f:1d:8e:61:1f:82:f2:57:dc:fd:ce:01:
         ef:9d:4a:f6:8a:e5:e4:ec:93:2b:cb:ee:85:7d:c5:92:38:c2:
         8f:26:e8:33:01:66:e4:40:d0:06:87:78:20:2c:1b:df:fc:77:
         22:f5:dc:b7:ed:01:27:26:cf:0a:e0:3e:bb:13:24:1d:f8:60:
         48:f3:e2:7c:94:0a:9c:ac:01:74:56:25:20:5b:e1:d8:f8:83:
         fe:3f:3f:46:13:88:73:46:b7:c5:b5:08:c6:c6:ec:e3:ce:e2:
         66:c0:f3:cf:f8:59:93:27:f9:89:3b:3b:3a:71:57:59:08:4c:
         7c:49:f1:2d:35:5e:90:c5:54:7a:45:92:fa:5d:29:1a:5f:9c:
         13:07:a2:16:28:06:de:12:69:cf:3d:d9:ce:35:a1:ea:e9:02:
         be:09:0f:d5:b9:f0:d6:36:b0:c7:1f:61:e2:1a:ec:a6:fc:67:
         6d:56:b1:65:37:f5:cb:20:c4:59:4b:89:e1:16:47:31:53:81:
         ca:20:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:32 2024 by rpki-client on console-fra.rpki-client.org