Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/XMa2Dicr0tj_iu18sXBih5NTumI.roa
File:                     XMa2Dicr0tj_iu18sXBih5NTumI.roa (raw, json)
Hash identifier:          oAWaUhHJW8F35wNkQH60cTSrE9jYafmOlDXuII3mCP0=
Subject key identifier:   5C:C6:B6:0E:27:2B:D2:D8:FF:8A:ED:7C:B1:70:62:87:93:53:BA:62
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       4A
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/XMa2Dicr0tj_iu18sXBih5NTumI.roa
Signing time:             Sat 01 Jul 2023 01:28:12 +0000
ROA not before:           Sat 01 Jul 2023 01:28:12 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     17675
IP address blocks:        218.40.144.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Jul  1 01:28:12 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5CC6B60E272BD2D8FF8AED7CB17062879353BA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:42:9d:aa:6c:4a:69:c8:30:72:77:32:91:
                    8b:35:6c:04:35:99:17:c0:fc:98:cb:b6:bd:7e:d1:
                    2c:01:3c:2e:ec:0a:58:34:d1:0d:80:a7:cc:75:87:
                    9e:8f:0a:89:10:e1:b7:12:f7:ec:44:e5:ff:72:2b:
                    5b:5e:89:2b:98:df:a6:77:a1:e4:4c:d9:2c:3d:67:
                    8b:e7:49:7b:1d:48:d3:b4:05:a9:40:7c:6d:82:71:
                    77:ff:b6:52:8f:55:98:b7:db:a4:76:fd:93:83:6e:
                    a4:71:be:cb:5a:20:d2:a1:fc:02:8d:54:95:07:e9:
                    a8:82:dc:07:b7:0d:46:a0:ab:39:d9:60:cb:5c:02:
                    61:0e:a6:79:42:9a:81:f2:7e:41:6c:77:5f:9e:d0:
                    e8:e4:85:67:db:9a:df:7b:f8:a2:44:96:63:35:5f:
                    ae:50:44:b2:b6:7e:45:1e:d3:12:d3:79:5b:d9:26:
                    bb:0d:75:e9:c7:c6:68:ff:d6:8c:1f:98:19:01:6e:
                    72:cc:14:9d:33:36:d0:9a:86:d7:1d:55:bd:ce:53:
                    53:51:51:f0:a0:7c:f2:c1:0d:8b:0f:8b:44:dd:0c:
                    3f:a4:8a:c8:69:eb:df:34:0b:93:8a:42:1a:c9:5a:
                    53:70:0b:27:43:36:5f:9c:09:f2:0a:fd:63:25:72:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C6:B6:0E:27:2B:D2:D8:FF:8A:ED:7C:B1:70:62:87:93:53:BA:62
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/XMa2Dicr0tj_iu18sXBih5NTumI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:ee:26:77:fb:1e:45:5f:ac:83:55:ce:4b:d3:10:8b:d8:02:
         8f:ab:d1:a9:fc:86:3c:66:20:c8:10:99:16:5a:da:c3:18:cb:
         f3:e2:c5:55:24:2b:7a:58:6f:e6:03:21:30:48:81:fd:df:89:
         f6:d8:e1:cc:db:39:56:6e:d2:b8:36:08:4c:f9:57:1d:fe:74:
         d9:3c:72:7b:ab:15:38:c3:d0:a4:58:8f:ec:e9:91:27:39:c7:
         18:7e:68:39:b8:98:0f:42:e8:44:1a:4f:b7:62:48:76:cc:75:
         ff:69:2b:10:19:04:4d:eb:eb:a0:8d:b2:4b:a1:51:bb:0c:76:
         76:89:ae:cd:2f:15:f4:41:e9:a2:d7:25:cd:de:fb:a1:29:65:
         c0:8a:70:93:95:8e:cd:4f:49:17:a7:87:bb:f5:e2:2b:b4:51:
         c5:ac:7e:b3:ca:b4:8a:24:b8:85:f1:18:d7:5c:29:04:3f:18:
         d4:1c:ec:35:3e:18:15:47:b6:4b:64:d9:86:e5:7a:71:a8:23:
         de:0a:99:71:db:fd:2a:44:db:9c:58:8a:cb:a6:4b:b0:13:e7:
         db:75:d6:6b:0a:38:59:b4:b1:bd:a9:5f:fe:70:9a:da:b5:a4:
         2d:09:41:4f:09:6a:2f:54:a1:5d:f8:5f:d4:51:cc:8f:8f:6d:
         9a:3f:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org