Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/k-1RxmEAUCKGR6nFx5DBkEmzvbA.roa
File:                     k-1RxmEAUCKGR6nFx5DBkEmzvbA.roa (raw, json)
Hash identifier:          EM/sJNFY6vBAQ62bj96uqeUmP6tbuvZ1qQd5B7jv7EQ=
Subject key identifier:   93:ED:51:C6:61:00:50:22:86:47:A9:C5:C7:90:C1:90:49:B3:BD:B0
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       10
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/k-1RxmEAUCKGR6nFx5DBkEmzvbA.roa
Signing time:             Wed 28 Jun 2023 01:13:44 +0000
ROA not before:           Wed 28 Jun 2023 01:13:44 +0000
ROA not after:            Sat 15 Jun 2024 06:45:48 +0000
asID:                     131965
IP address blocks:        202.254.232.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 06:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: Jun 28 01:13:44 2023 GMT
            Not After : Jun 15 06:45:48 2024 GMT
        Subject: CN=93ED51C6610050228647A9C5C790C19049B3BDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:89:3c:e4:8c:e7:47:16:fa:8f:e8:d3:82:ca:
                    ad:41:0a:cf:66:5f:d7:22:e2:f4:02:62:38:9d:17:
                    2c:58:e8:bf:aa:c3:48:e4:38:da:70:d8:2e:a5:e8:
                    66:0b:62:f6:03:33:bb:6e:74:4f:ba:94:a4:ae:e9:
                    c5:5a:e5:a2:34:dc:c9:5d:ff:bf:e7:1a:e2:7f:14:
                    5d:d9:23:13:b5:20:1a:b1:9f:74:e3:36:ef:c2:1c:
                    b4:11:d5:38:4a:93:33:f5:37:26:ba:7a:0a:79:b5:
                    f1:d9:79:ba:58:a4:35:83:f7:b0:ed:a3:80:8b:1e:
                    05:f8:cb:9a:c6:8b:62:a8:1c:a1:95:42:49:43:78:
                    39:00:8b:c9:a6:8b:5f:97:75:c2:6e:45:b5:b8:c1:
                    b8:d6:c8:ff:cc:3d:64:9f:97:d0:67:98:bc:da:d0:
                    7a:21:d2:c6:5e:35:e8:fc:a7:5e:ae:ce:22:b5:c3:
                    35:a1:6c:ff:f5:cb:84:94:1d:7b:10:6f:fb:c3:ef:
                    ab:57:d8:04:a2:fe:1b:63:9a:84:48:5a:ad:48:c6:
                    6f:3b:4e:fc:de:c0:6c:86:d2:f6:22:85:72:c6:ae:
                    87:f1:0a:cb:57:04:27:32:a0:93:9e:90:3e:bb:33:
                    43:fa:65:3e:d3:56:7d:fa:a2:b6:d8:48:c6:09:0a:
                    5d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:ED:51:C6:61:00:50:22:86:47:A9:C5:C7:90:C1:90:49:B3:BD:B0
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/k-1RxmEAUCKGR6nFx5DBkEmzvbA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.254.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:1c:ce:2b:82:26:46:5c:dd:a0:e6:ac:69:a7:fa:13:48:ae:
         6f:95:d9:80:03:5d:41:7e:04:91:26:a8:33:a9:33:0a:fa:36:
         ec:67:bb:02:40:92:e8:92:6f:ba:cc:2b:94:de:03:2b:62:3f:
         f5:c1:0e:39:e7:32:7e:4c:ab:fb:46:65:c9:9a:d2:f8:7f:e2:
         17:97:78:1a:2d:e1:24:9e:0e:a3:ef:c0:7a:88:69:14:17:3b:
         2f:d9:db:3d:7c:04:be:dd:bf:38:e6:7d:26:9b:ae:f9:77:4e:
         5d:68:c0:e3:85:76:3a:86:3c:08:89:00:f8:7d:59:61:e4:3e:
         3b:02:d9:79:f9:51:fa:1e:f8:63:5c:e4:e3:85:b8:ba:8a:80:
         a9:82:f7:e4:3e:6c:94:02:84:fa:04:47:5c:7d:94:7e:23:aa:
         05:27:69:ac:7a:2c:33:e9:87:1b:85:f8:c3:3d:8b:87:8f:64:
         14:3d:96:04:75:75:55:f5:83:6d:39:81:54:4e:fd:33:c6:e4:
         fc:69:d5:11:5d:94:9c:31:96:64:06:65:9c:41:9d:7d:5e:e0:
         47:3b:f5:a5:02:a1:00:9a:e7:99:1f:68:21:21:61:e6:1b:95:
         2f:49:c8:e1:59:cd:b4:e2:35:63:df:24:65:5c:48:a1:37:5c:
         4d:25:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org