Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/z7exICcSCJEUbrhFT6KGBR2G7wo.roa
File:                     z7exICcSCJEUbrhFT6KGBR2G7wo.roa (raw, json)
Hash identifier:          vhFOpkR+4ZjZ+prxsgQhgPEKnJ82cRGbUAyj9YDhS24=
Subject key identifier:   CF:B7:B1:20:27:12:08:91:14:6E:B8:45:4F:A2:86:05:1D:86:EF:0A
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       019A
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/z7exICcSCJEUbrhFT6KGBR2G7wo.roa
Signing time:             Tue 01 Aug 2023 01:28:14 +0000
ROA not before:           Tue 01 Aug 2023 01:28:14 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:14 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=CFB7B12027120891146EB8454FA286051D86EF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:f5:66:c9:0a:52:e1:8b:cb:3d:e2:11:c6:
                    3e:1c:63:a6:18:0c:1d:1a:8f:aa:6f:f7:79:76:a5:
                    ae:21:7f:dd:66:a6:83:f7:d0:d8:7a:73:fa:f3:fd:
                    8e:1b:92:17:5e:12:10:af:d4:04:2a:24:8e:45:8a:
                    85:0c:1f:eb:57:42:78:c6:55:ec:6f:1f:2d:f9:43:
                    15:5d:2f:14:da:99:4e:c2:b5:83:4a:af:8b:f8:c7:
                    80:7d:b7:c0:86:0f:86:6f:f9:e3:0c:96:29:6f:9c:
                    f8:49:9f:d7:ab:75:15:28:e6:25:9a:fe:65:86:c1:
                    43:87:73:92:8a:4a:b6:ad:01:4f:5c:58:e5:4a:a8:
                    e5:4c:f9:95:09:07:67:37:d1:41:51:0f:24:2b:f9:
                    ea:15:ed:96:23:f1:3b:db:66:6c:f5:a3:d2:89:89:
                    fb:2c:ce:8d:a3:33:71:83:94:f8:6f:c9:30:e4:f7:
                    89:1a:11:d0:48:0c:2a:a1:15:d8:14:2b:cf:ce:c6:
                    ec:27:9c:89:2d:74:df:ad:ff:f1:ef:71:fb:3b:15:
                    b9:77:5b:99:72:f6:0b:06:a1:7e:13:f7:d6:af:eb:
                    82:e5:5e:cf:2f:ec:ac:f8:6f:d7:49:0f:09:de:17:
                    e6:fa:d7:05:56:a6:1d:f2:e1:5f:a5:5f:80:cb:e0:
                    2e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B7:B1:20:27:12:08:91:14:6E:B8:45:4F:A2:86:05:1D:86:EF:0A
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/z7exICcSCJEUbrhFT6KGBR2G7wo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:99:61:e4:cd:d4:bf:af:12:f9:c6:5a:5e:fe:bf:35:12:21:
         0c:c6:50:fb:89:98:be:31:bd:51:bd:ea:86:0c:8d:c2:0b:97:
         5a:94:13:0b:52:04:82:25:bf:33:f4:4f:1c:c2:8f:b5:8c:64:
         82:1e:20:56:e2:d3:59:d2:cb:bc:e8:eb:5e:88:14:23:9e:7d:
         2d:dd:0c:50:cc:14:a6:38:88:74:ad:dc:42:e2:fa:4c:56:1b:
         e4:08:3a:aa:90:0e:a6:1b:09:a4:91:fc:95:71:6a:cc:e7:46:
         4b:2e:c2:b6:98:7e:6b:f0:a7:35:08:96:d9:d1:70:ff:72:46:
         f0:7a:23:78:b8:29:d6:34:07:12:55:81:35:ff:d2:c7:31:46:
         d8:ff:e4:0f:af:d9:9e:04:bc:05:c3:fc:9c:a0:2f:6d:09:d6:
         00:d2:68:91:73:f3:a7:07:e6:47:c0:d8:f7:b4:81:4c:ec:cd:
         e6:6e:55:08:40:63:34:ed:77:f5:b0:d3:cf:d1:28:d4:3e:56:
         3c:9e:75:b2:a4:83:ea:0a:08:07:db:cb:b0:f4:36:f1:75:0e:
         6f:5e:12:d9:4a:16:db:fe:07:2b:39:91:3d:3f:05:0b:64:b0:
         d8:e2:43:6a:4d:64:0c:a3:97:34:76:5a:93:9b:3c:27:9e:54:
         75:e5:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:25 2024 by rpki-client on console-fra.rpki-client.org