Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/xXAGNpmIfIKh_yjoDqEi0nM0qRM.roa
File:                     xXAGNpmIfIKh_yjoDqEi0nM0qRM.roa (raw, json)
Hash identifier:          76pW8QIk2Fkpvbh+fuP8zdcNqEL9bsej/fNjIhOAW5U=
Subject key identifier:   C5:70:06:36:99:88:7C:82:A1:FF:28:E8:0E:A1:22:D2:73:34:A9:13
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       4B
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/xXAGNpmIfIKh_yjoDqEi0nM0qRM.roa
Signing time:             Sat 01 Jul 2023 01:28:13 +0000
ROA not before:           Sat 01 Jul 2023 01:28:13 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     17675
IP address blocks:        219.113.0.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Jul  1 01:28:13 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=C570063699887C82A1FF28E80EA122D27334A913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:15:10:82:f8:3a:05:b1:a0:be:da:fd:e2:69:
                    66:8f:12:0a:81:6d:ce:f1:26:0f:ef:91:6d:9e:73:
                    a6:26:3c:02:68:cc:87:3a:f9:bc:4d:a0:ac:39:47:
                    9c:76:8f:5a:9a:ab:1b:49:f0:51:2e:82:a6:75:aa:
                    6b:8e:34:78:4a:d5:25:45:5e:aa:18:ca:49:30:77:
                    8d:77:33:8d:82:da:70:72:d0:05:eb:00:28:9b:dd:
                    69:73:94:36:6e:34:4e:87:b7:4b:12:94:21:21:c8:
                    3b:b2:bc:d1:a4:eb:70:47:45:91:23:e5:ad:31:cb:
                    89:d1:17:8b:27:ba:85:6a:bc:08:11:b4:27:a1:4b:
                    97:a9:8d:63:97:b8:59:e5:f2:d5:d2:ac:ab:e1:29:
                    39:a4:ca:24:41:9e:d4:d1:f3:df:52:d3:1b:69:f3:
                    25:c4:0e:93:c9:ff:6b:4c:55:e0:5d:4f:4b:14:70:
                    62:4a:26:e2:9d:b9:a2:aa:7c:bb:18:51:63:96:f5:
                    a5:77:56:08:1b:bf:e9:34:9d:89:6e:b1:74:f0:9f:
                    72:d9:ad:44:45:c5:0a:0e:49:dc:1c:8d:7c:35:df:
                    4e:34:e0:ea:00:d7:2d:27:10:76:ec:72:fe:ab:46:
                    9a:11:06:68:2d:95:ed:73:c0:7c:7e:b5:8c:20:81:
                    50:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:70:06:36:99:88:7C:82:A1:FF:28:E8:0E:A1:22:D2:73:34:A9:13
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/xXAGNpmIfIKh_yjoDqEi0nM0qRM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         af:df:1d:d6:21:03:00:ca:5a:ce:85:20:57:d5:f3:75:3f:be:
         e0:cd:f9:95:99:72:4c:32:92:55:a6:d2:fe:4b:30:f9:40:ad:
         05:63:6a:2b:9b:0a:9f:1f:49:70:65:2f:68:ae:8a:b7:73:03:
         75:f2:11:97:65:2d:84:76:b2:d1:b3:cc:0b:98:f5:76:6f:d6:
         89:48:7a:59:d4:67:80:14:62:a8:d2:61:eb:cb:82:db:5c:42:
         1a:b2:67:73:34:ee:32:60:b4:74:3c:67:2d:41:5a:b0:73:70:
         ee:9e:9d:e2:24:b8:dd:53:c8:ec:e3:d5:55:c9:84:31:23:20:
         e5:63:46:a5:2f:f2:21:63:a2:09:e6:30:2e:51:b4:7f:43:e9:
         b6:0e:ba:0f:c9:06:98:24:fa:08:24:89:1d:06:1a:57:5f:c8:
         94:b5:1c:1d:72:22:30:8c:80:33:26:44:c9:68:37:a5:81:f7:
         3d:c3:59:c5:02:9a:f7:6f:26:c2:a3:81:21:0d:cf:c7:2f:c3:
         8f:7f:c0:a0:f2:85:92:17:b2:f5:48:9e:76:db:1e:af:e8:3f:
         a5:1d:e2:e7:db:c5:cb:6a:5e:1f:86:6c:b1:74:4a:92:21:ba:
         dd:1b:f0:c8:3d:64:39:d8:7c:5c:ce:9a:55:54:f3:8c:fa:96:
         76:83:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org