Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gioy4pcSw5KwSIa1gvEeeNs2g-s.roa
File:                     gioy4pcSw5KwSIa1gvEeeNs2g-s.roa (raw, json)
Hash identifier:          w++N1Cb3yqcYsdnhaBhurhp1yiUOr5SC2XFGCAN80Yw=
Subject key identifier:   82:2A:32:E2:97:12:C3:92:B0:48:86:B5:82:F1:1E:78:DB:36:83:EB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01D6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gioy4pcSw5KwSIa1gvEeeNs2g-s.roa
Signing time:             Wed 24 May 2023 16:40:35 +0000
ROA not before:           Wed 24 May 2023 16:40:35 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.12.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:35 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=822A32E29712C392B04886B582F11E78DB3683EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:b2:94:fb:a4:94:80:18:1e:ef:ea:46:c1:
                    92:0f:e9:dd:86:68:22:a9:e0:34:d9:39:03:3f:8f:
                    95:75:6f:b2:be:bd:48:12:e9:06:b1:89:5f:df:33:
                    f0:09:34:85:63:68:67:2c:fb:51:37:59:ca:08:cb:
                    88:df:c4:b2:03:d1:cb:21:e2:4c:21:4a:68:68:7c:
                    64:39:22:26:5d:39:ab:fe:39:e5:e8:6c:a1:9d:00:
                    ab:d2:ac:34:ec:d2:d1:6d:5e:0c:af:5e:5b:11:d9:
                    39:67:89:38:de:97:f8:2c:a5:90:0e:f5:56:6d:9c:
                    85:4a:e1:e7:d5:53:4f:83:22:f9:0c:d3:30:a1:3d:
                    17:c3:cc:38:2f:fc:87:b0:c0:13:51:96:05:94:1e:
                    0c:31:77:44:a0:4e:e4:ce:9a:5b:11:b3:16:05:4c:
                    ef:82:2d:b4:69:36:df:b9:2b:40:52:36:bb:77:a3:
                    5b:dd:43:eb:0b:64:33:5e:d4:7b:76:ae:7e:a7:02:
                    12:32:4f:c1:80:4a:1e:d8:11:b3:80:8a:7c:f5:84:
                    50:d2:ce:01:38:38:72:93:a1:7e:38:37:7d:45:23:
                    37:9a:d0:4b:95:29:91:52:46:a0:35:b4:dc:81:b7:
                    3b:8f:9f:3c:dc:34:d3:ef:ef:30:aa:83:61:05:3d:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2A:32:E2:97:12:C3:92:B0:48:86:B5:82:F1:1E:78:DB:36:83:EB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gioy4pcSw5KwSIa1gvEeeNs2g-s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:d9:fe:f1:3b:09:63:49:a2:33:2d:dc:e0:69:5d:0b:8b:2b:
         8f:18:1a:c3:7f:2f:86:0a:d4:4f:93:e2:99:71:0d:89:2e:43:
         28:0d:b5:24:7f:5e:e0:78:d5:2d:46:9e:b6:ae:f0:52:e1:85:
         c1:e4:3f:88:be:99:b8:f8:af:2e:4c:bb:09:a6:95:9e:a5:21:
         e9:43:a4:f4:b7:c2:cf:40:d5:c0:ca:ab:98:7f:b5:8b:3a:60:
         fa:59:d6:04:e4:c3:49:fa:c1:21:54:b3:a7:a9:b7:6f:ea:1a:
         ed:4b:7f:b7:04:c4:bf:1e:ff:fe:e0:31:53:86:fb:72:96:10:
         3a:db:09:0a:0d:7b:a6:44:44:71:2f:e7:8b:4b:d6:73:f6:04:
         45:5f:5e:b2:e6:69:f1:0a:9a:16:8b:b5:69:36:64:5a:7c:f4:
         5b:1a:31:53:93:95:e8:59:67:82:92:21:5b:06:53:c6:8d:32:
         a7:5e:b0:01:84:b2:5d:8f:6a:90:15:ef:3d:b8:ba:88:48:14:
         43:ee:11:4b:0e:17:e7:5c:99:7a:f3:00:af:61:66:c5:9d:84:
         20:28:b1:26:2c:c9:8b:3d:39:c0:e2:df:84:14:74:04:f0:59:
         c8:ea:9e:98:10:c4:05:a7:a0:93:80:cc:a2:00:25:94:21:74:
         40:b2:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org