Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/97aT8MY67QHs4qSsZrOYgU3ypTQ.roa
File:                     97aT8MY67QHs4qSsZrOYgU3ypTQ.roa (raw, json)
Hash identifier:          JArTZKBu0YoVPgmdCP30dog2kZck9hYfsIxIzlfp3V4=
Subject key identifier:   F7:B6:93:F0:C6:3A:ED:01:EC:E2:A4:AC:66:B3:98:81:4D:F2:A5:34
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0107
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/97aT8MY67QHs4qSsZrOYgU3ypTQ.roa
Signing time:             Fri 01 Sep 2023 01:29:00 +0000
ROA not before:           Fri 01 Sep 2023 01:29:00 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        125.30.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:29:00 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=F7B693F0C63AED01ECE2A4AC66B398814DF2A534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:d8:cb:86:0a:41:82:5d:67:69:8b:9a:3a:
                    e9:f4:26:b0:c0:e3:9c:50:0e:e4:6e:8d:a0:1a:6b:
                    f5:ea:ff:20:18:9d:2c:e8:2d:ca:97:43:fb:79:e9:
                    f0:23:9e:7f:57:8b:bd:94:c9:0a:48:37:36:44:82:
                    a9:1d:fc:8c:72:32:51:d1:3d:6d:fa:0c:81:1f:85:
                    8d:b2:d7:69:f5:c4:de:6c:2d:7f:93:86:d1:3a:59:
                    ed:e8:a4:8d:00:27:a8:8e:49:70:a1:e0:f2:c5:a3:
                    e2:d9:41:e4:49:a4:75:15:bd:a0:fa:fc:05:81:e9:
                    ad:10:ec:ae:56:f3:3d:3c:ea:97:cf:d2:33:71:84:
                    d2:79:7a:58:58:4a:dc:31:a8:06:9c:5a:56:6a:e5:
                    ef:d9:2f:75:37:c7:d7:e5:3c:9c:7a:d7:34:56:4e:
                    53:1c:04:d3:93:ab:18:01:42:91:dc:75:5c:ce:80:
                    a7:ac:7c:2f:25:d5:79:f5:45:d1:fa:39:cf:37:5e:
                    75:44:13:0e:be:9f:35:4e:5f:68:fe:ac:41:c3:e9:
                    01:17:1a:2c:34:d1:04:f1:6e:db:22:86:89:19:e9:
                    1f:c8:1b:ae:2d:c6:20:40:62:74:01:a2:c7:64:24:
                    db:fb:26:1e:87:85:96:1c:d8:5e:6f:74:9c:7b:95:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B6:93:F0:C6:3A:ED:01:EC:E2:A4:AC:66:B3:98:81:4D:F2:A5:34
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/97aT8MY67QHs4qSsZrOYgU3ypTQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:07:68:76:bf:9e:30:49:67:f1:f2:8d:8d:4d:c6:f6:25:fd:
         8c:07:f8:eb:4d:8e:f8:36:98:57:30:2b:a1:2a:f9:16:70:e9:
         65:3b:c7:76:3a:8f:c1:f6:bc:4f:e7:10:d7:b7:50:d7:f5:40:
         02:e4:0f:2a:b1:d8:72:7b:98:fd:65:bf:50:3c:b1:11:90:07:
         59:0b:34:3f:0c:e7:bf:ac:61:57:b0:f3:d0:0d:f1:f4:14:f5:
         2f:5d:4f:60:69:a9:b2:24:99:41:69:e0:2f:10:a6:e4:a5:b8:
         c3:c9:e6:2c:0f:24:16:17:0b:3e:91:da:25:1a:1e:fe:45:58:
         f5:e3:e8:68:17:ef:f5:6a:e4:96:53:b3:89:19:63:74:be:88:
         65:4d:bc:e6:fb:b0:1b:53:82:83:ff:ac:9c:dd:5a:ec:91:31:
         d7:08:cd:73:14:7c:eb:47:53:9b:29:02:0a:29:29:48:67:12:
         7f:74:a3:52:37:08:58:a2:fc:28:ce:70:36:be:e2:0c:4e:0a:
         8c:e9:87:ab:e0:5d:61:bc:45:a4:35:d5:ea:0c:f2:ef:4c:80:
         04:97:5c:d7:2b:8d:27:a8:50:eb:cf:11:ac:5d:0c:1b:00:f7:
         97:b7:48:0a:d4:56:d8:6c:ae:a8:7d:62:bc:a3:61:f5:45:1a:
         cf:75:42:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:26 2024 by rpki-client on console-fra.rpki-client.org