Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pD6CBL-TymnwHyN7GVhO_iRrn6Y.roa
File:                     pD6CBL-TymnwHyN7GVhO_iRrn6Y.roa (raw, json)
Hash identifier:          DLHWE3NWEzyX5sUaSZrvXF7SHZjaz66BeUgFcb+deko=
Subject key identifier:   A4:3E:82:04:BF:93:CA:69:F0:1F:23:7B:19:58:4E:FE:24:6B:9F:A6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01C2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pD6CBL-TymnwHyN7GVhO_iRrn6Y.roa
Signing time:             Wed 24 May 2023 16:40:29 +0000
ROA not before:           Wed 24 May 2023 16:40:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.18.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A43E8204BF93CA69F01F237B19584EFE246B9FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:90:22:f0:39:a8:4d:84:c5:3f:6d:ac:39:
                    1d:dc:17:31:d5:6d:e8:05:b9:e7:d8:9d:ba:88:c6:
                    10:11:9f:28:6b:d9:74:80:e4:05:b8:d6:fe:21:d9:
                    7a:d5:b2:0e:63:b9:8e:45:36:30:c3:25:c3:a1:10:
                    74:73:17:44:94:75:b8:15:fd:0d:8c:eb:2d:05:70:
                    7e:6e:52:93:e8:a8:87:ec:ba:3b:7c:81:05:97:5e:
                    b0:35:92:92:7b:32:19:72:e5:0b:2e:69:f8:27:12:
                    03:54:19:ed:1f:38:73:e3:d4:47:62:4b:4e:ec:d3:
                    82:d3:92:03:75:c9:02:cd:50:77:b7:70:7c:55:57:
                    26:00:2a:a3:97:b1:ea:98:69:2c:1f:13:f5:5d:72:
                    b5:c9:a4:8f:0c:7e:3e:93:48:02:44:b0:a9:7d:80:
                    df:d9:f4:02:2f:00:6d:c7:ec:74:5c:02:e9:59:41:
                    21:eb:4f:c5:77:06:af:46:59:ef:18:a3:57:48:07:
                    2d:e2:44:f1:b2:06:d3:a9:41:ce:68:bb:4f:5c:a4:
                    bc:1b:91:e8:25:85:81:14:23:aa:e1:e0:ed:56:b0:
                    cc:be:08:fe:13:24:73:19:9a:b0:b5:e2:11:6a:2d:
                    fb:67:60:71:4f:89:21:7a:0e:bc:4e:2b:53:2e:61:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3E:82:04:BF:93:CA:69:F0:1F:23:7B:19:58:4E:FE:24:6B:9F:A6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pD6CBL-TymnwHyN7GVhO_iRrn6Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:be:3e:3e:b7:16:0a:b4:90:9a:84:2a:fd:39:e1:bf:0a:aa:
         1c:4c:8a:b7:d7:ef:84:b6:92:a5:c6:7c:8c:fb:d7:11:cf:30:
         54:d0:d3:20:1b:ea:18:46:d1:4b:4a:44:4e:40:9d:29:aa:d4:
         b2:6f:0f:87:71:53:4e:7c:60:1b:08:86:77:ef:47:e7:95:4c:
         60:84:79:11:cf:27:f3:0e:67:19:da:e0:1e:05:c1:ca:6b:c4:
         c7:e7:11:47:5e:0b:b1:db:57:d8:6a:39:8a:b7:c8:ca:b3:a0:
         a5:89:ad:ef:03:b7:28:0e:e0:27:4a:eb:c1:65:c2:f4:b2:08:
         dc:a7:fd:38:19:02:00:d1:0b:b3:0b:bb:07:2c:c1:e3:56:94:
         aa:15:fa:91:ba:e5:41:08:64:14:8c:3d:ec:66:85:98:83:be:
         9b:09:71:6b:8a:dc:eb:fe:06:f2:ed:8a:b3:2e:bd:41:89:0f:
         e9:8a:b7:44:8c:a9:bc:bb:c5:7f:74:ef:77:9f:45:9a:ff:f8:
         44:db:8e:fd:1e:de:da:79:1a:fe:1a:ae:fd:41:f1:05:e8:9d:
         a4:63:24:b9:ec:ed:70:ff:23:9a:1c:d3:41:f5:c6:f7:af:9c:
         8e:60:d3:08:1e:a2:69:16:79:b6:3d:2f:f7:50:c5:b8:90:d1:
         f9:3a:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org