Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/Q-eoc8nPMvYPgKqV0Zl9995R2aI.roa
File:                     Q-eoc8nPMvYPgKqV0Zl9995R2aI.roa (raw, json)
Hash identifier:          SWBgQTLm9J6trMXJiftNiDiyEP7E4bnf8mG9wrsHBps=
Subject key identifier:   43:E7:A8:73:C9:CF:32:F6:0F:80:AA:95:D1:99:7D:F7:DE:51:D9:A2
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       8A
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Q-eoc8nPMvYPgKqV0Zl9995R2aI.roa
Signing time:             Sat 01 Jul 2023 01:28:31 +0000
ROA not before:           Sat 01 Jul 2023 01:28:31 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        110.233.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:31 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=43E7A873C9CF32F60F80AA95D1997DF7DE51D9A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7a:8f:a2:df:a7:8f:a0:6e:5b:96:1c:2a:5d:
                    58:c8:2d:e1:e7:19:10:d3:68:15:06:e2:66:48:30:
                    1c:5c:70:89:65:13:7d:44:16:2b:03:ed:d9:32:31:
                    c3:05:e3:ff:dc:fd:69:d9:d2:ed:cc:fc:f3:10:b3:
                    a7:cf:3f:64:b7:c6:3d:87:b4:09:6b:15:4f:99:9e:
                    e1:22:56:8f:63:74:9b:57:c5:74:6c:8e:81:02:ef:
                    b9:31:a6:7b:b0:d5:50:bd:a5:1f:af:35:7b:6a:52:
                    66:cd:9c:ec:d6:45:f9:f8:a8:84:a3:0d:bb:ab:d5:
                    df:e3:58:92:1c:8b:dc:f3:f2:b9:ab:f4:79:d5:de:
                    93:f5:8c:f9:03:22:36:f3:03:0f:bb:22:f6:bb:a2:
                    47:5a:82:33:d3:9c:5e:37:c4:3b:20:07:6a:1b:e9:
                    e8:e6:1e:ea:de:d5:81:eb:54:e2:9a:ec:2c:45:09:
                    07:77:bc:ed:eb:4f:c0:46:f4:7f:2f:2d:41:8a:fb:
                    99:4b:09:d3:b1:47:7e:a4:ee:ef:5c:df:c3:90:55:
                    51:49:35:38:36:93:18:42:dd:24:4f:b1:6a:0a:e8:
                    2b:aa:d7:32:8b:17:b3:97:32:77:23:12:d1:c9:d5:
                    c9:df:6b:91:2f:5b:ef:0e:02:25:09:35:d9:ec:81:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E7:A8:73:C9:CF:32:F6:0F:80:AA:95:D1:99:7D:F7:DE:51:D9:A2
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Q-eoc8nPMvYPgKqV0Zl9995R2aI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.233.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:32:02:85:cb:ee:64:8b:28:78:1e:6d:7e:43:b5:f9:13:e2:
         00:93:60:bc:a5:05:a7:db:64:06:2a:98:a3:8b:61:be:5e:71:
         db:4c:f0:01:d7:19:27:b0:62:a0:87:ca:44:a0:cf:9d:4c:75:
         11:40:38:ab:bf:c6:64:27:f1:d1:1f:15:ef:71:21:02:1c:a7:
         8c:ea:80:19:8a:8a:ed:63:d7:a5:b9:e4:f6:c3:19:76:95:cc:
         e5:93:31:5b:80:c8:3e:0b:14:ac:c7:64:71:a7:2c:ff:1d:e0:
         12:66:ea:44:08:34:46:43:ff:22:37:e9:d5:fd:b7:c9:9a:a6:
         4e:95:b7:11:d5:da:6f:89:12:31:b7:2c:c2:c3:16:1c:01:18:
         46:9b:10:02:91:88:3a:24:55:aa:b4:8c:23:3f:2e:2d:f1:d4:
         9a:26:aa:62:3a:21:2d:38:2e:af:7d:41:e4:cb:3c:d6:1e:4e:
         78:79:bb:ca:26:1d:58:9c:3d:a5:2a:63:be:7e:a9:eb:5c:4e:
         f1:60:fd:f9:bd:85:31:07:b6:e3:55:db:80:a1:df:44:aa:06:
         db:0f:ca:9d:6d:50:8c:b7:ca:f6:25:eb:82:85:9a:a4:ba:eb:
         90:e3:d2:8b:a9:0a:8f:c3:05:6f:a8:25:75:96:7f:9b:9a:b2:
         49:fb:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org