Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/naCyGBbckI3LLWTzUCkiOtidSMM.roa
File:                     naCyGBbckI3LLWTzUCkiOtidSMM.roa (raw, json)
Hash identifier:          2VivFomD70HipdVcsFq2CwiZffFgHcfWBupFS858PZk=
Subject key identifier:   9D:A0:B2:18:16:DC:90:8D:CB:2D:64:F3:50:29:22:3A:D8:9D:48:C3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       045A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/naCyGBbckI3LLWTzUCkiOtidSMM.roa
Signing time:             Thu 27 Jul 2023 16:43:17 +0000
ROA not before:           Thu 27 Jul 2023 16:43:17 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.158.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:43:17 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=9DA0B21816DC908DCB2D64F35029223AD89D48C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:08:f9:ef:4b:af:66:dc:ab:43:f9:2c:07:21:
                    a6:e2:40:5e:c0:f7:1c:50:58:df:76:42:98:f1:c9:
                    6b:84:6e:8e:b7:92:29:c2:5d:91:7f:31:73:51:6f:
                    a1:05:4c:d9:a8:6b:8a:b5:20:47:8d:31:5f:31:98:
                    f4:8a:49:38:f2:ce:9c:4f:8d:b7:b7:c0:b2:6a:2b:
                    21:d8:15:bd:37:c7:c5:dc:1d:2d:93:7a:d4:b6:da:
                    46:e7:27:81:49:b1:43:de:f3:c5:bb:47:df:e7:34:
                    ff:32:93:82:ab:bd:40:99:54:f8:29:6b:b8:ec:e1:
                    55:05:9c:ea:87:ba:d1:ef:2e:a8:76:79:1f:f6:d1:
                    73:0a:84:b9:76:5c:fa:7d:2a:42:ae:49:d2:5e:be:
                    5a:03:4e:0e:1f:0c:48:d0:47:d9:5c:7a:04:6e:d7:
                    43:75:ae:69:56:cb:39:75:77:a2:05:12:4b:77:75:
                    2e:88:38:0f:fe:05:08:cf:7e:cf:91:35:9a:83:b3:
                    1e:69:37:e8:89:f5:bd:50:c4:7b:56:1c:3b:f6:34:
                    09:21:b6:34:90:ab:b2:5a:f1:a6:f2:3b:f3:87:29:
                    83:9d:4d:7c:cd:79:b1:47:21:aa:9f:1e:fb:05:12:
                    b5:38:fb:a5:5d:c9:e4:cd:63:0f:d1:d7:c7:83:a3:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A0:B2:18:16:DC:90:8D:CB:2D:64:F3:50:29:22:3A:D8:9D:48:C3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/naCyGBbckI3LLWTzUCkiOtidSMM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c5:f1:a3:5b:f1:94:c5:53:ce:12:bc:94:94:05:3d:45:5c:6c:
         08:ba:af:20:e3:da:21:36:ea:8f:04:d1:b9:ce:6a:1e:c8:59:
         1a:a1:45:70:bd:8a:9d:d9:8a:95:1f:82:3c:e5:1f:5e:59:36:
         8f:1b:ce:05:2c:05:74:d1:69:2e:6c:17:e6:43:2d:f0:a9:a3:
         32:86:a1:eb:2d:a0:d2:88:67:1c:4b:73:45:5c:5f:04:e1:bf:
         2b:79:c4:e1:03:44:58:8d:54:11:33:a8:80:57:22:17:63:13:
         d1:50:e0:b1:9a:67:e4:16:33:68:89:1d:b5:46:59:80:37:67:
         27:da:cc:d3:47:68:a9:92:5c:61:a4:e9:ab:6b:66:79:3f:20:
         d9:a3:52:66:a6:7d:2d:d3:6b:e0:f8:30:0a:a9:f0:ed:1b:91:
         74:e9:96:e3:89:48:8e:88:39:f8:97:d8:50:f2:e0:e9:1c:19:
         d3:03:7b:83:20:db:fc:8b:c3:2f:77:0d:67:d7:e1:1a:9e:0a:
         38:07:55:ca:63:a4:44:a1:a7:22:62:ed:11:88:bb:be:5d:a9:
         7b:1f:12:db:bd:59:de:f1:f6:a1:1d:3d:0a:e7:e7:3b:95:54:
         49:df:ea:31:75:99:f4:a4:09:a9:1a:f8:ca:11:c6:6b:a8:51:
         19:38:81:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:41 2024 by rpki-client on console-ams.rpki-client.org