Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/zQm77Ptv0bUAXQIq2EVRo0twXCE.roa
File:                     zQm77Ptv0bUAXQIq2EVRo0twXCE.roa (raw, json)
Hash identifier:          s9Q+JVYdY4MxYcm0SdVqSkZrL6BPtJB439TFGuFdnf8=
Subject key identifier:   CD:09:BB:EC:FB:6F:D1:B5:00:5D:02:2A:D8:45:51:A3:4B:70:5C:21
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       010B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/zQm77Ptv0bUAXQIq2EVRo0twXCE.roa
Signing time:             Fri 01 Sep 2023 01:29:01 +0000
ROA not before:           Fri 01 Sep 2023 01:29:01 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        121.102.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:29:01 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=CD09BBECFB6FD1B5005D022AD84551A34B705C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:71:21:ff:ea:11:e6:ac:6a:2f:2d:ea:f2:94:
                    05:e7:a9:42:b4:53:d4:17:30:d1:d7:39:9f:a7:73:
                    8a:a1:ec:4f:89:39:29:14:72:17:f9:7b:7d:08:7e:
                    3d:8e:91:ed:07:a3:06:82:ce:04:e0:77:29:ed:69:
                    c0:6a:92:a2:fc:d6:ed:07:32:5d:9f:a5:e7:a1:7d:
                    be:65:58:b6:05:66:18:84:d1:c6:59:2a:14:fb:04:
                    de:80:04:d6:0c:a2:2b:c8:cc:02:4a:70:29:53:68:
                    8a:35:31:d1:72:2e:95:89:66:cd:b3:80:1a:3b:3e:
                    1e:21:7b:13:37:18:0b:67:c9:30:4b:39:cf:46:30:
                    03:2c:38:fe:ab:c6:f9:f0:c9:3b:69:b4:46:ad:05:
                    82:1d:fd:48:8d:7e:e8:7b:86:ed:c7:d0:d4:79:2c:
                    8b:ba:8e:2f:cc:d9:78:1e:84:83:ea:24:02:58:a3:
                    82:ca:f8:5d:77:a7:37:3a:28:60:90:10:39:a2:38:
                    b3:7e:94:60:cf:bb:0e:44:46:2c:0b:1f:65:c9:8f:
                    10:fb:4a:6d:30:1b:e6:74:70:94:b6:68:ed:06:a5:
                    32:9f:0b:f0:5b:35:11:16:2a:31:1f:5c:93:ea:98:
                    32:ec:4d:fe:f6:be:d5:54:26:af:0b:e3:fd:4d:6a:
                    2b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:09:BB:EC:FB:6F:D1:B5:00:5D:02:2A:D8:45:51:A3:4B:70:5C:21
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/zQm77Ptv0bUAXQIq2EVRo0twXCE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:db:9f:9e:1c:0b:50:87:1e:13:e5:13:c6:dc:54:3a:72:b6:
         40:be:68:a9:5e:47:b9:75:87:b2:15:c9:1e:4d:12:1f:2c:a0:
         fd:c0:cf:9b:c1:63:85:1d:21:31:2d:f7:b0:d3:3d:13:b3:45:
         84:ef:20:f6:1d:d4:c9:4f:0b:69:f9:dd:5c:8b:8c:2d:d9:5c:
         32:77:13:d5:3f:9f:6b:b7:b8:62:2c:11:2e:01:77:29:93:30:
         3f:30:f8:40:a3:a6:0e:91:aa:90:72:88:af:26:d9:e6:82:c6:
         a2:84:be:7f:60:de:b0:b8:06:b6:49:29:46:b2:b1:9b:66:08:
         62:0e:d9:4e:1b:88:7e:7b:c0:7f:bc:3b:f4:b5:bf:10:d1:58:
         b6:0a:21:58:82:55:82:46:45:b2:93:49:89:8e:c1:d8:92:56:
         aa:33:c2:7a:0b:c9:a4:a2:d4:b2:1b:99:06:1e:94:61:af:fd:
         42:f2:3d:90:43:c5:45:89:27:2a:7a:c8:74:2c:fe:c4:fc:d5:
         18:83:9d:c9:50:b6:0f:a1:d7:da:11:5a:ce:a2:22:6b:76:04:
         ac:f4:7d:42:59:39:5b:8f:79:f5:96:1c:d1:ba:b6:12:25:40:
         a1:61:fa:41:49:f2:b2:af:e0:7e:78:e6:1b:ab:43:10:59:d0:
         d8:61:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org