Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/kT4vBDPXUGsEGTC2BiDQDKGzekI.roa
File:                     kT4vBDPXUGsEGTC2BiDQDKGzekI.roa (raw, json)
Hash identifier:          s57rEBG6kmlI50dyGlMOrP7uKkN5C/aUw22HAPoO5zs=
Subject key identifier:   91:3E:2F:04:33:D7:50:6B:04:19:30:B6:06:20:D0:0C:A1:B3:7A:42
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       7E
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/kT4vBDPXUGsEGTC2BiDQDKGzekI.roa
Signing time:             Sat 01 Jul 2023 01:28:27 +0000
ROA not before:           Sat 01 Jul 2023 01:28:27 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        202.225.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:27 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=913E2F0433D7506B041930B60620D00CA1B37A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:15:35:cc:52:12:9a:4e:73:3d:bf:ad:34:
                    68:8d:3b:c6:42:a3:65:25:ab:65:62:0f:ba:28:f3:
                    92:ba:bf:e4:72:0e:c6:b5:e2:45:c0:d4:a7:d8:6c:
                    c8:b9:54:be:d5:78:c1:cf:9a:ae:09:f9:2b:e5:24:
                    58:06:2b:8a:67:a8:e2:f3:08:2d:95:8f:55:bf:5d:
                    9d:f1:a9:50:34:4e:f8:e2:05:cb:88:67:5f:43:fa:
                    28:01:89:ad:a4:64:c2:9d:e2:a6:95:5c:75:35:12:
                    cb:1b:7a:23:6e:49:9b:1c:fb:8c:de:c5:42:5a:63:
                    7d:ed:87:80:c1:59:d9:11:6e:92:85:6f:d9:e1:20:
                    aa:43:9d:0a:c1:3b:4b:76:40:15:b3:bc:ed:32:d6:
                    79:db:e5:7a:c5:0a:69:61:6c:18:2c:bf:63:70:81:
                    d6:63:23:e5:3c:57:db:46:f9:b8:c3:ec:07:62:6c:
                    d0:cd:a0:a5:62:2a:27:84:40:88:ca:80:a9:56:24:
                    60:43:31:97:44:fd:5a:d0:84:5b:f2:ab:fc:a1:c4:
                    c8:74:0a:21:27:27:d7:68:55:00:41:36:b8:86:34:
                    e3:64:0d:70:65:e4:a2:bb:7b:e9:d2:94:30:6f:5e:
                    10:48:1b:57:2b:5c:35:44:2e:3d:48:71:07:80:32:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3E:2F:04:33:D7:50:6B:04:19:30:B6:06:20:D0:0C:A1:B3:7A:42
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/kT4vBDPXUGsEGTC2BiDQDKGzekI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:2e:92:65:8a:15:9b:86:49:35:55:d6:8e:13:7b:df:a5:89:
         6d:13:8a:6e:e2:ae:5e:61:f3:18:b9:98:be:c7:d4:83:4d:69:
         cb:96:4e:82:6f:d2:79:f2:35:88:8f:b4:d2:63:26:ab:91:aa:
         a6:03:c6:e7:7c:4e:2f:6b:e0:cc:f4:8c:f0:d4:e9:43:11:29:
         14:18:31:04:19:21:01:67:fc:4f:eb:e9:9d:e4:16:1d:d2:bc:
         7e:90:0e:42:fe:12:14:30:05:05:e7:f7:f8:1d:ff:4a:2f:da:
         a8:86:18:ab:48:08:fc:93:31:ee:e6:0a:ff:30:9c:c6:3a:43:
         fb:ac:d5:9a:6b:0d:61:70:26:c9:ae:77:f1:21:f7:dd:4a:f4:
         a3:3a:4a:47:f7:8f:dc:f8:57:dd:13:b4:b4:97:ae:c7:5e:51:
         16:1f:16:bf:59:53:c4:b4:84:a9:5b:a1:a4:3d:de:df:af:e4:
         59:f6:96:9a:30:ce:8b:bb:ee:a4:4d:74:ce:4c:07:fc:05:e1:
         b6:dd:a7:88:16:d2:3d:87:be:df:ab:af:2c:53:d6:c8:91:ae:
         56:88:49:0d:6f:44:ba:e2:27:70:c1:2d:bf:a5:da:d0:f8:78:
         4d:2c:f3:64:b1:e1:3a:71:76:d9:1f:8b:3d:2e:02:5b:65:2a:
         b2:77:02:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 05:55:51 2024 by rpki-client on console-ams.rpki-client.org