Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/m2zRWAcg-NJ7AzniRsXVQdoBhIs.roa
File:                     m2zRWAcg-NJ7AzniRsXVQdoBhIs.roa (raw, json)
Hash identifier:          L/WQrD8YzhxcxTnyn/h0T7uDKRsu8ti9DkXTr6YVIx8=
Subject key identifier:   9B:6C:D1:58:07:20:F8:D2:7B:03:39:E2:46:C5:D5:41:DA:01:84:8B
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       8E
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/m2zRWAcg-NJ7AzniRsXVQdoBhIs.roa
Signing time:             Sat 01 Jul 2023 01:28:34 +0000
ROA not before:           Sat 01 Jul 2023 01:28:34 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        122.132.0.0/14 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:34 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=9B6CD1580720F8D27B0339E246C5D541DA01848B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6f:97:2b:86:a7:20:31:24:af:a7:03:c0:4e:
                    52:3d:19:5b:fa:a1:20:8c:5e:1c:ba:cb:87:ec:2c:
                    e9:d3:a4:9f:b1:b6:45:82:45:1e:07:95:66:ba:c8:
                    5f:d0:89:9c:4e:8f:8f:d8:12:03:82:54:03:55:22:
                    ca:48:6c:f4:e7:cd:19:53:9c:63:4b:a6:10:3b:d0:
                    2f:55:ca:b1:12:15:a7:c4:30:4a:be:37:53:6f:72:
                    0d:5a:13:bc:c6:25:3e:b3:a8:09:4d:4b:b4:a1:0f:
                    31:17:e3:a0:7f:bf:51:40:4a:ef:79:16:82:b2:c7:
                    ca:b5:62:2c:d7:c9:54:77:88:3d:6c:cb:43:4a:df:
                    6a:71:a5:48:62:51:7e:5b:4b:31:ca:cf:6f:8b:63:
                    ed:08:c9:3d:4d:11:c9:43:87:a7:31:61:f3:9b:3d:
                    c3:7a:46:98:13:e5:5f:23:0f:73:39:ab:0e:d5:ec:
                    8f:b2:ef:55:28:d5:7a:a5:c2:5f:59:e7:3f:b1:90:
                    1a:02:fc:17:24:b9:37:1e:6b:16:94:da:e9:a4:74:
                    e7:4b:f0:05:9a:68:f2:d6:33:9f:3d:29:a4:93:ec:
                    2f:3e:75:56:22:eb:ff:87:7f:50:54:ac:ee:08:02:
                    b0:52:b6:42:33:a5:7f:14:ee:81:14:80:f6:70:26:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6C:D1:58:07:20:F8:D2:7B:03:39:E2:46:C5:D5:41:DA:01:84:8B
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/m2zRWAcg-NJ7AzniRsXVQdoBhIs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3e:07:02:18:36:6c:72:0f:d5:23:70:38:ad:4a:df:9e:f2:18:
         65:cc:2a:b8:5c:a9:23:26:06:ef:dc:7b:51:71:79:94:85:cd:
         0e:9b:0e:04:26:1e:1b:44:4b:0b:3b:b2:2c:8a:ce:2a:02:41:
         1b:b4:bb:d7:46:ea:ac:5e:be:59:d3:aa:c8:8d:b1:04:1a:de:
         af:05:41:71:c8:23:5a:8a:63:f7:88:b6:4a:ce:b3:ec:2b:2e:
         31:98:4a:76:30:5b:f4:22:1b:ab:88:19:77:d3:0d:6a:ed:f2:
         07:1e:c1:92:64:39:1b:18:5a:f7:78:67:5c:23:19:fd:7a:5d:
         8c:35:c3:76:b1:4c:f1:48:16:de:a2:fd:d3:6a:8b:eb:cf:a0:
         fd:30:7f:f3:2e:b5:27:fa:66:96:14:fc:6e:14:f2:79:c9:da:
         c8:2b:26:34:1b:67:cc:87:23:bd:ff:86:57:dc:db:f7:47:df:
         f4:27:59:3c:2b:15:26:0e:dd:c8:87:d7:89:c6:5f:e6:e1:ea:
         00:f9:90:3d:5c:dc:41:68:ed:00:df:0c:5c:2e:8c:61:d4:c4:
         46:ce:60:98:52:51:3f:2e:de:7b:de:7e:8f:7e:40:1f:19:7d:
         fe:a8:a4:8b:7a:92:fa:0e:77:4b:d7:b1:bd:d6:54:2c:b8:20:
         45:fb:d0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 04:12:41 2024 by rpki-client on console-fra.rpki-client.org