Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/nU4v0vkI3iMmarcDiLfENNQvX6Y.roa
File:                     nU4v0vkI3iMmarcDiLfENNQvX6Y.roa (raw, json)
Hash identifier:          vu8Hsc7vEv4xC16Vm71sHdQTyvxWg0bszhlHty3m9UM=
Subject key identifier:   9D:4E:2F:D2:F9:08:DE:23:26:6A:B7:03:88:B7:C4:34:D4:2F:5F:A6
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       FD
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/nU4v0vkI3iMmarcDiLfENNQvX6Y.roa
Signing time:             Fri 01 Dec 2023 01:29:48 +0000
ROA not before:           Fri 01 Dec 2023 01:29:48 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        203.167.32.0/20 maxlen: 32

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 01:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Dec  1 01:29:48 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=9D4E2FD2F908DE23266AB70388B7C434D42F5FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:7a:50:12:1b:da:05:8f:b7:c0:30:1c:74:
                    64:d0:9f:6c:34:27:84:91:c8:a2:03:9b:3f:9d:58:
                    a1:53:dd:03:85:98:14:0e:ef:04:0e:92:6a:5b:be:
                    c8:12:f9:c5:51:53:bb:5c:4a:72:80:4a:b7:48:73:
                    3a:90:9d:7e:7f:4f:28:31:46:ae:21:75:60:b5:cc:
                    a3:15:d7:1c:63:32:be:27:c6:68:bf:31:a8:e7:88:
                    a3:ee:47:b0:26:88:3d:13:eb:26:44:44:7b:88:79:
                    b2:2e:2a:5b:3a:57:31:76:71:16:68:ee:98:f6:68:
                    ba:63:77:51:ca:d5:c6:36:05:ce:9e:df:5c:f1:0c:
                    74:fa:1b:33:eb:92:17:6e:9d:e4:b3:c6:f5:dc:34:
                    94:ce:92:a0:97:df:65:8a:52:4b:9a:51:db:09:68:
                    17:77:e2:03:10:4d:91:8a:cc:c4:18:04:5f:6e:a2:
                    4a:18:a2:0b:8a:18:32:91:02:6c:10:24:d9:ea:02:
                    79:39:2f:12:e9:88:33:c6:73:dc:e0:c7:31:ba:57:
                    19:0a:1f:06:61:ff:b8:d0:95:1c:f5:4d:77:e6:2d:
                    18:5f:8e:9c:35:c8:16:52:0b:e5:ab:f1:b3:ca:58:
                    bf:e5:2d:9d:36:9a:26:5b:b9:ef:76:f2:68:b0:bd:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4E:2F:D2:F9:08:DE:23:26:6A:B7:03:88:B7:C4:34:D4:2F:5F:A6
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/nU4v0vkI3iMmarcDiLfENNQvX6Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.167.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:c5:10:9b:51:0f:f1:e9:f2:fd:2d:fc:04:a0:4a:78:1d:01:
         a5:98:3c:09:32:5a:56:3c:ea:bc:65:f9:a5:4c:06:97:aa:3a:
         ea:3f:61:06:aa:42:a4:18:e4:34:fd:89:a4:80:b8:76:5d:6a:
         b8:dc:77:4a:8f:44:d5:27:b5:16:22:b4:07:36:56:7c:80:e2:
         2d:d1:f8:77:e8:88:bd:31:de:09:b9:20:cf:70:1f:fc:84:86:
         86:29:56:ba:42:54:cd:e0:ac:6b:ec:93:16:0c:21:38:82:8c:
         a7:4f:9e:a2:6a:a7:5b:43:2e:9f:76:dd:ab:4b:24:45:99:0d:
         80:4f:56:fc:c4:b6:0c:48:da:0a:ff:1b:46:e8:18:7f:5a:8b:
         e7:92:c0:05:49:60:b7:81:79:79:e8:8d:66:5d:38:33:64:88:
         b8:46:76:ca:9d:f9:1b:44:5c:a9:53:ac:dd:00:d0:9a:70:d9:
         19:9a:09:ff:de:a7:58:ac:c1:b9:5b:07:6b:9a:03:2c:a1:ab:
         4f:55:ee:1f:37:ee:a0:d5:b8:04:4e:e1:23:24:36:ca:24:36:
         33:2d:18:1f:1c:9b:af:40:4c:35:fb:c5:09:3f:b8:a0:c3:96:
         eb:1f:7a:19:bf:fe:72:4a:24:ac:d8:66:38:3d:aa:46:a3:75:
         4f:02:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 05:07:19 2024 by rpki-client on console-ams.rpki-client.org