Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/noNKbYIeJAoEXvCaYA-t0MmFMJk.roa
File:                     noNKbYIeJAoEXvCaYA-t0MmFMJk.roa (raw, json)
Hash identifier:          6qmSpCeg6OnxHvfyfVBD+UFT3uaoRUyu5reTKUgglYQ=
Subject key identifier:   9E:83:4A:6D:82:1E:24:0A:04:5E:F0:9A:60:0F:AD:D0:C9:85:30:99
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       0B
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/noNKbYIeJAoEXvCaYA-t0MmFMJk.roa
Signing time:             Wed 28 Jun 2023 01:13:42 +0000
ROA not before:           Wed 28 Jun 2023 01:13:42 +0000
ROA not after:            Sat 15 Jun 2024 06:45:48 +0000
asID:                     131965
IP address blocks:        183.90.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 06:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: Jun 28 01:13:42 2023 GMT
            Not After : Jun 15 06:45:48 2024 GMT
        Subject: CN=9E834A6D821E240A045EF09A600FADD0C9853099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b7:d9:9e:77:c1:08:0f:2e:cd:9a:a8:48:98:
                    87:c8:2c:a1:a0:15:10:88:44:18:80:33:29:20:6e:
                    25:6f:51:af:1e:91:4d:6d:b3:3f:54:07:7b:50:89:
                    4e:6a:bf:d7:22:cb:8c:8f:dc:36:d2:01:7d:a1:f6:
                    28:6e:87:4f:72:cb:92:c6:2c:ec:e8:14:b5:fb:50:
                    d4:0e:54:cb:ef:fa:9b:0b:a3:81:f1:ce:f3:9b:0d:
                    5a:05:42:13:49:97:03:1a:f9:18:d7:17:40:dc:53:
                    d4:5a:cc:df:77:20:cf:0b:2b:46:80:58:58:95:54:
                    83:d7:8d:08:e7:c4:10:db:d5:d5:bd:b9:35:ec:18:
                    57:0b:f3:c4:59:51:89:20:2f:c0:93:a1:04:8b:0f:
                    14:9e:88:1c:6d:e6:b0:cd:60:e4:5d:5c:50:ca:65:
                    12:8f:d3:57:b6:4e:1a:3f:f7:a2:12:03:6a:8f:6d:
                    c0:23:79:d5:a2:dd:66:d9:4e:ab:74:b8:a0:76:66:
                    f3:3e:d6:cf:eb:66:96:bb:68:43:1b:35:80:47:78:
                    37:14:ea:95:6d:b6:f3:76:b0:e9:54:ed:b2:b9:02:
                    b0:c1:82:46:6b:f5:7d:6f:c1:c9:cd:e4:4a:38:93:
                    37:a0:03:64:90:6b:99:4e:4e:c9:f0:b2:18:4f:45:
                    84:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:83:4A:6D:82:1E:24:0A:04:5E:F0:9A:60:0F:AD:D0:C9:85:30:99
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/noNKbYIeJAoEXvCaYA-t0MmFMJk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.90.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:3a:61:bc:f0:93:52:c5:85:89:f1:cf:db:39:50:81:db:7f:
         69:c3:73:02:3b:43:47:f0:be:10:0f:ed:ba:fc:cc:50:18:17:
         13:19:3a:69:9d:d6:89:77:ff:de:a9:bc:27:6e:02:a1:40:6c:
         d2:83:2d:16:9b:c2:b0:ed:dc:1d:ca:1b:60:69:e9:da:1a:d2:
         d9:bf:c8:fb:09:44:ef:f4:b6:7a:b4:29:d2:8c:98:b4:5d:09:
         6d:5e:ca:7b:c1:dc:bc:88:42:15:75:6f:9a:a2:6a:8f:cb:ec:
         7c:4d:f3:b3:67:6a:ed:1c:b4:88:83:75:46:74:53:12:0a:0e:
         4a:31:85:48:b3:0e:47:9a:fc:5b:fb:52:18:f5:56:50:fc:f3:
         7f:2d:9b:0f:5a:21:ce:2f:03:27:bd:b7:83:95:c8:5b:bc:e5:
         87:f0:98:9c:4f:83:98:c8:ef:3f:b5:24:6d:f9:db:f2:76:3c:
         4d:32:2c:95:7f:55:b4:bb:67:11:d4:28:c3:2a:1c:c0:87:f3:
         57:cf:44:b0:82:8c:e1:8e:0d:2c:7f:3f:99:6a:b0:32:6a:e8:
         32:9b:fb:4e:55:3d:cf:bc:57:b3:21:4b:d6:23:d7:2b:6a:bb:
         36:97:8e:53:eb:2d:03:ec:a9:05:31:b0:81:ca:b7:3b:65:f9:
         7c:a2:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org