Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uh4u3i2A1rd8uGgbcTWJ8rEPUyw.roa
File:                     Uh4u3i2A1rd8uGgbcTWJ8rEPUyw.roa (raw, json)
Hash identifier:          pv+cmvxXPYnyIm4plXPtJ814DJfusNtOwNrdfm7Io/U=
Subject key identifier:   52:1E:2E:DE:2D:80:D6:B7:7C:B8:68:1B:71:35:89:F2:B1:0F:53:2C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04D4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uh4u3i2A1rd8uGgbcTWJ8rEPUyw.roa
Signing time:             Thu 27 Jul 2023 16:48:22 +0000
ROA not before:           Thu 27 Jul 2023 16:48:22 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.158.160.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1236 (0x4d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:48:22 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=521E2EDE2D80D6B77CB8681B713589F2B10F532C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:c8:60:c9:f3:8b:c0:c2:11:ba:93:18:0f:
                    61:ed:06:cb:4a:5e:2a:2c:ef:08:5c:b6:e1:df:4c:
                    8d:d4:e3:59:95:5a:2e:57:e0:c0:10:06:60:de:4b:
                    c0:d8:f1:dd:c8:cc:db:88:27:46:1b:9a:7b:23:82:
                    52:d0:94:e1:d7:75:1f:50:de:bf:5c:c7:37:19:bc:
                    06:96:eb:be:1b:a8:46:e6:57:b9:b5:a5:f8:84:ff:
                    9f:b2:20:90:a7:ac:bd:8b:61:4c:3f:88:ed:e5:50:
                    5a:90:0d:e1:c1:4a:c7:16:c8:24:33:5d:1a:de:a2:
                    b8:12:49:5b:6f:e4:f8:2e:ee:fc:90:9e:58:34:21:
                    46:f8:da:2d:8f:d9:20:64:ec:1a:d0:c7:56:e7:d3:
                    dd:16:31:a0:2c:c2:5e:b2:44:5b:b9:a5:39:11:e4:
                    17:2b:89:eb:0f:09:48:5e:95:8d:1a:a7:c4:a5:f1:
                    1a:f5:3f:6c:f9:84:02:0e:de:d4:1c:88:24:57:fd:
                    e8:3b:07:3a:e3:33:4c:55:85:a2:73:8a:0c:51:6f:
                    52:ad:f8:79:a7:46:f8:16:97:9a:d5:ef:64:16:f1:
                    71:67:6a:e1:a8:1d:eb:79:eb:6f:a5:3a:16:40:1e:
                    0e:f7:fc:85:ec:70:9c:dd:4a:b9:2e:ab:90:c1:a4:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1E:2E:DE:2D:80:D6:B7:7C:B8:68:1B:71:35:89:F2:B1:0F:53:2C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uh4u3i2A1rd8uGgbcTWJ8rEPUyw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e5:28:c6:92:48:a8:9c:82:21:05:ec:34:29:a7:6e:9e:56:f5:
         f5:03:24:8c:ed:38:56:a6:3c:93:e3:dc:38:c9:f3:1b:51:6e:
         bb:6d:c4:ce:fa:f2:bd:a5:a6:63:0b:49:fb:d5:de:ef:72:5b:
         53:63:8d:ba:47:a6:14:14:c5:fb:da:55:c6:fc:6f:8e:f1:d5:
         fd:46:77:dd:a5:5c:11:1a:cf:a9:6e:b6:4f:7a:57:10:a3:39:
         a4:5c:c9:a3:be:c7:cd:09:42:ce:fa:36:64:79:97:6e:a7:9e:
         4a:d6:bc:45:c0:05:8a:87:d0:2e:91:42:62:70:a3:b6:69:5d:
         fe:a8:53:5b:42:10:b8:3b:87:07:ce:5a:5b:9e:2c:a6:30:9e:
         25:49:3a:4c:6a:b8:61:02:09:c0:fb:33:a7:e4:ed:9c:11:2b:
         8f:e8:b0:64:43:94:78:e6:c3:00:ed:4d:e1:4a:c1:3f:99:ca:
         7c:75:39:c1:d7:af:02:b3:43:43:f0:d6:28:05:da:8d:bd:15:
         8c:22:a2:a8:03:c2:89:14:cf:11:73:75:ac:15:d0:6d:e1:a0:
         86:ee:5e:72:64:a1:42:2c:94:11:0c:d2:28:d2:a0:70:97:22:
         5f:7f:92:23:fe:f5:d4:55:9e:06:57:0b:b5:04:64:bd:7b:a6:
         ca:ba:b0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:26 2024 by rpki-client on console-fra.rpki-client.org