Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/x0habiPQMJnpfUiHIZIM8duliBk.roa
File:                     x0habiPQMJnpfUiHIZIM8duliBk.roa (raw, json)
Hash identifier:          NuQx5IL/7JhkZcUx34o/RzCwEc5YpPnM7MKQRnnWrC4=
Subject key identifier:   C7:48:5A:6E:23:D0:30:99:E9:7D:48:87:21:92:0C:F1:DB:A5:88:19
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       02
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/x0habiPQMJnpfUiHIZIM8duliBk.roa
Signing time:             Thu 18 Jan 2024 03:19:25 +0000
ROA not before:           Thu 18 Jan 2024 03:19:25 +0000
ROA not after:            Thu 16 Jan 2025 05:46:42 +0000
asID:                     0
IP address blocks:        133.181.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Fri 05 Apr 2024 07:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jan 18 03:19:25 2024 GMT
            Not After : Jan 16 05:46:42 2025 GMT
        Subject: CN=C7485A6E23D03099E97D488721920CF1DBA58819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e9:bc:a4:c9:ff:ca:87:43:15:c6:d2:28:1c:
                    71:09:c8:62:49:b0:6b:86:9e:7c:8f:fe:fa:3d:7e:
                    b6:7e:9b:4e:05:5a:da:a6:56:c5:b7:51:15:7c:31:
                    bb:f8:c4:fc:ea:1f:81:97:e6:07:2e:c3:16:34:fd:
                    52:2d:27:17:77:dd:af:59:e3:e4:8a:6e:ca:6e:64:
                    c2:43:48:98:e1:b8:2a:27:c4:cf:91:ba:99:89:12:
                    9c:25:be:eb:e2:f7:e3:6b:b1:03:44:50:1f:82:f8:
                    e6:c4:f0:79:56:92:5f:01:6f:43:27:c9:6a:5f:20:
                    7d:a4:44:3a:1b:3a:3a:34:18:5a:ca:7c:e9:ca:34:
                    ec:68:74:6e:97:15:9a:27:35:0e:e7:9e:5c:3b:2a:
                    3c:69:50:60:38:a0:db:0c:ed:17:e0:de:55:0f:14:
                    20:41:2c:f5:0c:0d:7b:ec:ff:7d:87:58:9f:e5:35:
                    17:96:06:10:ff:f0:ba:c9:f6:a5:60:9e:81:1f:cc:
                    fe:f3:25:29:93:87:09:cc:4b:71:90:b9:d6:8c:c2:
                    0b:79:56:17:4e:46:bf:f1:b1:7b:b9:04:33:cf:a1:
                    4d:f4:ea:5e:6a:e1:ff:a1:cc:7e:6a:de:df:7b:f3:
                    e4:a1:b4:59:bc:8c:2b:1e:1e:5e:db:2d:7a:24:4b:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:48:5A:6E:23:D0:30:99:E9:7D:48:87:21:92:0C:F1:DB:A5:88:19
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/x0habiPQMJnpfUiHIZIM8duliBk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:c6:ed:be:99:64:35:23:94:36:36:d9:69:6e:aa:ce:4b:44:
         9a:b5:44:ef:0e:63:e0:66:68:c0:e6:0f:d7:3c:70:44:ed:eb:
         13:11:d5:7b:aa:32:ae:2f:b0:67:f4:08:0f:2c:f9:b5:8e:38:
         7a:44:c1:71:7c:83:bf:41:b2:02:ec:c5:43:b6:aa:95:34:b4:
         bb:03:ff:b3:cd:a7:1b:12:10:a9:82:88:cd:c3:d3:b6:55:af:
         7b:d3:3b:15:3d:b2:08:c0:fb:ac:ab:cc:99:3c:1b:0f:e9:59:
         a6:bf:5a:24:83:5d:22:43:81:96:b8:79:0a:c6:d8:c7:75:ac:
         b9:46:5f:59:00:25:ad:6f:d7:48:e1:7a:fd:6f:b9:18:fc:39:
         87:e5:c2:50:bb:a8:a4:05:32:04:d7:66:06:55:06:fb:c5:65:
         e5:c6:5d:97:82:2a:01:99:0c:56:15:94:b6:db:5a:b4:e6:0a:
         89:aa:16:4d:bd:98:43:90:7c:1a:0d:62:b8:61:2e:08:54:06:
         a9:0b:dc:88:0a:78:a0:ae:df:ce:09:80:bc:9b:d6:01:ac:84:
         05:dd:47:c3:3d:15:e5:a6:77:64:86:30:3d:46:91:01:5c:03:
         4b:be:78:50:71:fb:28:59:41:e7:83:96:c7:e3:51:01:76:6c:
         9f:39:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 13:05:14 2024 by rpki-client on console-fra.rpki-client.org