Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ra8QbjetiBdmqTBR584UbJvsB4c.roa
File:                     Ra8QbjetiBdmqTBR584UbJvsB4c.roa (raw, json)
Hash identifier:          A1UBHP8Yq8AHVuxXt7NoN2tF0BySgMg+nGQUhZ9dvVo=
Subject key identifier:   45:AF:10:6E:37:AD:88:17:66:A9:30:51:E7:CE:14:6C:9B:EC:07:87
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0161
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ra8QbjetiBdmqTBR584UbJvsB4c.roa
Signing time:             Mon 01 May 2023 01:28:20 +0000
ROA not before:           Mon 01 May 2023 01:28:20 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        122.16.0.0/12 maxlen: 12

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:20 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=45AF106E37AD881766A93051E7CE146C9BEC0787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:0a:e4:e5:1d:13:dd:95:76:9e:cc:a9:57:
                    c7:71:5a:87:37:70:20:d1:0c:cb:e3:da:64:5d:0b:
                    b5:d4:b5:9c:35:50:19:2d:44:24:09:9c:6d:63:6d:
                    4a:a9:b5:1c:63:8f:40:04:2a:75:82:00:4c:af:76:
                    95:9b:49:c4:0f:e9:cc:0d:c1:88:1c:a6:78:d4:62:
                    ad:24:f4:86:1b:b3:9d:a0:11:aa:c4:f2:37:c1:a7:
                    cc:a3:ce:d3:84:33:de:56:51:78:e9:ad:22:e4:48:
                    56:e3:81:0b:dd:60:38:b8:21:96:13:44:6d:08:86:
                    ab:79:4c:0b:f0:cf:eb:3f:8c:bb:d3:c3:75:6a:51:
                    cf:83:a9:0e:b3:74:7b:fa:cd:23:4f:7b:53:9b:42:
                    ef:6f:c3:ed:c1:41:c5:3e:3a:f2:7f:e1:c9:20:71:
                    d5:65:d8:0b:83:1f:05:49:08:58:99:78:e8:a0:58:
                    71:67:57:9c:65:6a:66:41:e3:ee:e4:e5:65:bd:4c:
                    3c:41:f3:ce:24:4c:f9:c4:ec:1c:ce:13:31:68:51:
                    a1:b5:79:d7:3d:9d:b2:38:23:b0:df:f4:75:05:17:
                    c4:30:07:8d:e9:99:6d:86:1f:b9:01:b3:19:ec:4c:
                    a8:18:99:bf:ab:50:b3:84:59:fb:0f:4e:1e:12:17:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AF:10:6E:37:AD:88:17:66:A9:30:51:E7:CE:14:6C:9B:EC:07:87
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ra8QbjetiBdmqTBR584UbJvsB4c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.16.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         de:e4:00:b9:db:b3:4c:c3:a3:1e:0e:9f:cc:16:ce:90:ce:a7:
         ec:84:19:89:30:f7:1d:26:45:61:20:62:1a:b7:58:d0:37:73:
         d6:47:60:56:6f:69:e4:56:45:9f:6e:fb:1d:02:2a:33:9d:5c:
         1c:2b:36:c7:3f:ab:39:1b:15:fb:19:f7:ab:71:ef:3f:1e:9c:
         c3:4e:45:56:73:51:9f:a0:41:f2:a4:2d:30:f4:8c:45:cb:52:
         f6:64:98:f4:d2:9d:a9:4e:8a:9b:30:4b:26:30:48:e3:3a:9d:
         90:45:5f:6c:18:fe:5e:33:bd:39:d5:17:01:12:21:51:e4:1c:
         a1:ff:9f:2a:07:76:f5:1f:1f:5a:ca:4f:63:27:fa:3d:a5:bf:
         2d:14:d2:85:0e:74:e7:87:84:38:54:34:11:1f:65:a0:8b:30:
         9f:48:9c:b7:0d:71:f6:bb:fe:fe:55:0a:1b:19:d4:26:56:4e:
         05:ed:3f:0b:fd:a3:4e:01:36:e1:c8:37:0f:97:f1:ac:a4:a2:
         09:73:88:48:19:ac:77:f0:2d:5d:c8:2f:99:d4:4b:27:a7:08:
         82:bb:b4:cc:44:dc:b0:91:49:a0:2e:63:50:f6:54:a5:84:0e:
         b8:8b:dd:d6:6c:26:dc:02:3a:d8:e1:8c:50:8f:36:35:9e:31:
         fc:ec:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:21 2024 by rpki-client on console-ams.rpki-client.org