Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/e0KkPB1LuhP2jCyop1RTfNYDzq0.roa
File:                     e0KkPB1LuhP2jCyop1RTfNYDzq0.roa (raw, json)
Hash identifier:          s4ieM2LYp3iV2ZWpTiUKDjvuiJqGiRw7mHQ3czu6XD8=
Subject key identifier:   7B:42:A4:3C:1D:4B:BA:13:F6:8C:2C:A8:A7:54:53:7C:D6:03:CE:AD
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       E8
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/e0KkPB1LuhP2jCyop1RTfNYDzq0.roa
Signing time:             Thu 19 Oct 2023 09:22:03 +0000
ROA not before:           Thu 19 Oct 2023 09:22:03 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        114.31.80.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 01:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct 19 09:22:03 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=7B42A43C1D4BBA13F68C2CA8A754537CD603CEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:7c:8d:53:d3:7c:e4:6a:c7:5d:b8:6f:80:
                    8c:b9:d5:cd:00:75:44:5a:db:73:17:81:34:2b:49:
                    2f:06:51:50:a1:c7:cc:f7:61:c5:99:8a:35:f5:06:
                    63:89:f5:3b:ce:8e:04:53:21:e0:4b:b1:7b:65:9f:
                    96:34:42:50:a5:42:7b:01:e1:ef:35:42:f0:2e:43:
                    13:dc:68:29:01:3c:95:0c:68:1f:33:21:df:cd:79:
                    34:34:8d:3c:ee:3c:a3:a2:3e:8c:26:5a:6e:db:ff:
                    77:f2:26:16:9d:01:4a:fe:9f:9b:9b:6b:4d:d5:6b:
                    a2:f0:6d:04:52:10:59:e0:67:aa:1f:13:e8:58:6e:
                    c9:9e:ea:77:11:40:12:83:28:59:99:35:4a:64:7c:
                    64:ee:a2:50:c4:d5:f9:ad:fa:5b:cd:43:bb:37:43:
                    20:24:3e:4c:5f:aa:a0:b5:e2:1f:d3:4e:16:0b:50:
                    76:bf:67:c2:c1:64:ca:e3:27:68:8a:36:4a:ae:7b:
                    14:2c:46:cf:76:f8:7b:a1:38:c0:74:28:a3:47:3e:
                    a0:48:fd:43:9b:76:50:0b:48:1d:be:ca:fd:60:99:
                    b5:94:af:76:49:56:17:5a:0b:13:4c:ba:d0:c8:ba:
                    49:34:ff:47:51:51:5a:c1:98:d2:22:7b:71:08:47:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:42:A4:3C:1D:4B:BA:13:F6:8C:2C:A8:A7:54:53:7C:D6:03:CE:AD
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/e0KkPB1LuhP2jCyop1RTfNYDzq0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.31.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:f0:d2:f7:9c:ae:0d:e1:46:12:ca:48:57:67:6e:81:1c:b8:
         f4:f3:10:e1:8f:51:76:c8:74:55:71:40:c6:65:e3:46:7a:db:
         6b:b8:84:a2:2c:81:6a:fb:04:a3:9b:59:ce:71:50:60:ee:ec:
         e7:4d:89:73:26:e6:c8:f3:fd:f6:56:c2:76:59:0a:d0:2a:41:
         b3:0b:54:92:04:08:6c:da:dd:b0:c2:40:ef:1a:20:88:f7:d6:
         6f:49:e2:4b:3d:05:9d:28:d4:cf:a2:88:86:20:05:98:fe:bd:
         35:40:b2:7f:31:39:ae:78:a3:24:8e:58:2f:ff:3d:39:d0:da:
         4e:27:3a:f5:52:58:2d:eb:ea:ea:76:63:e5:ab:54:32:7a:cb:
         8f:10:4e:c4:10:9c:f0:a1:d3:39:ad:52:09:a9:84:89:0c:28:
         98:53:fc:92:49:71:1c:13:03:4a:75:d5:a7:c1:ea:53:ba:f4:
         d4:68:12:44:51:95:90:be:b2:55:61:a1:2e:7e:b7:57:5a:33:
         01:05:c8:26:eb:27:ff:91:f9:15:da:71:cb:8d:3c:c6:c0:f8:
         16:bf:a2:d6:cc:ff:70:3b:56:d1:80:1e:78:d3:65:e6:97:a6:
         aa:79:ac:c3:96:93:a4:4a:0a:04:8c:39:a0:ca:49:41:40:68:
         7a:e0:21:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 04:40:47 2024 by rpki-client on console-ams.rpki-client.org