Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MddVeSeT4K3pv82XEOcfcFscYM4.roa
File:                     MddVeSeT4K3pv82XEOcfcFscYM4.roa (raw, json)
Hash identifier:          uSsEQoZ0hRmgNKeA7P/pKjbIM0BA+d+nvtXEGPa7LZQ=
Subject key identifier:   31:D7:55:79:27:93:E0:AD:E9:BF:CD:97:10:E7:1F:70:5B:1C:60:CE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       040D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MddVeSeT4K3pv82XEOcfcFscYM4.roa
Signing time:             Tue 06 Jun 2023 16:05:53 +0000
ROA not before:           Tue 06 Jun 2023 16:05:53 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1037 (0x40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:05:53 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=31D755792793E0ADE9BFCD9710E71F705B1C60CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:42:62:f8:53:bc:c5:f1:4a:a6:da:9d:0d:2d:
                    14:8f:a5:91:f7:cb:96:9b:c3:58:11:99:e8:7c:ca:
                    a7:56:fd:4d:39:37:cc:46:b7:c3:04:aa:db:93:f7:
                    8c:2f:98:2b:b7:fe:0e:c6:2f:82:b8:ef:b7:e0:27:
                    88:6e:0e:f3:3c:9b:ff:39:5b:84:dd:a0:15:72:00:
                    b6:ea:df:0a:ae:87:b1:b0:c6:f5:f5:f5:85:7e:3c:
                    01:4e:8e:70:f2:54:93:59:de:4c:aa:54:85:a7:2c:
                    40:75:72:a1:76:ac:65:6b:ad:03:48:3c:9e:26:8c:
                    b6:31:e2:80:e0:c5:7e:91:1e:f1:86:24:b4:f7:9f:
                    19:c1:7d:1b:e2:76:ec:d8:e0:04:60:fe:1b:c3:7c:
                    95:4b:2e:f0:7c:a9:b5:45:8a:83:c5:a0:81:2d:65:
                    2e:22:69:fa:31:fa:8e:f7:8b:37:e8:35:36:74:c2:
                    a9:f6:64:9f:f6:65:46:a7:be:df:ea:4d:bb:54:f1:
                    f2:be:94:31:18:9b:41:59:23:40:fd:69:9b:5d:70:
                    c3:af:e4:20:7b:2b:2c:ef:6b:ca:74:31:37:70:6b:
                    5c:7e:91:a8:e3:39:33:6d:2f:c4:d4:fb:82:14:ae:
                    06:57:b7:20:3c:79:19:db:1a:2a:85:d1:f3:a7:fe:
                    a0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D7:55:79:27:93:E0:AD:E9:BF:CD:97:10:E7:1F:70:5B:1C:60:CE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MddVeSeT4K3pv82XEOcfcFscYM4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:56:d9:4d:96:9a:34:47:d9:35:de:68:83:72:da:ee:93:c4:
         4f:58:ed:1c:ec:9e:c3:fb:68:73:3a:07:e4:9f:dc:aa:3a:71:
         f4:18:94:ad:6e:ae:b5:31:4a:94:b4:d3:a2:8a:72:fb:da:32:
         96:9e:08:48:76:3f:3e:f6:ca:3b:23:c9:0a:12:fe:91:cc:18:
         93:ac:ef:c3:f8:ab:fc:11:24:54:84:e7:03:b9:b3:50:e3:5a:
         e6:28:1a:20:89:48:34:2a:05:08:63:bd:3d:34:c1:cc:c2:3c:
         ab:51:24:cd:4c:0c:96:68:1a:90:ff:85:89:65:6e:bb:00:fb:
         49:d9:99:56:f2:0f:54:99:ce:b8:bf:b9:63:3c:30:6e:2f:2a:
         bf:61:6d:53:78:f0:34:c3:3e:c9:2e:24:5c:9f:99:b7:d2:bf:
         34:2e:0a:f7:ac:11:4d:83:c2:f9:4f:0b:70:7a:da:98:a8:f3:
         6c:ce:51:a2:65:ec:96:9c:60:00:db:b3:6e:17:7e:bc:1e:6c:
         ad:90:9d:97:7e:b1:c5:15:83:03:70:bc:d5:84:6d:36:32:c1:
         5b:e5:75:0c:6f:a3:df:3b:67:f3:5e:36:33:0c:42:d6:ef:3d:
         69:4b:95:cb:7c:eb:62:7e:6b:ef:c6:8d:43:8d:3d:f2:dd:f0:
         10:ce:7c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:33 2024 by rpki-client on console-fra.rpki-client.org