Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/3nOfjAOTu7mH_rjFfwtnZ70LaV8.roa
File:                     3nOfjAOTu7mH_rjFfwtnZ70LaV8.roa (raw, json)
Hash identifier:          XppGZZJ1k/JWPm2KRs8zYtaR/XmzPupl7pBxPR4B1Uk=
Subject key identifier:   DE:73:9F:8C:03:93:BB:B9:87:FE:B8:C5:7F:0B:67:67:BD:0B:69:5F
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       0F
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/3nOfjAOTu7mH_rjFfwtnZ70LaV8.roa
Signing time:             Mon 20 Nov 2023 03:46:17 +0000
ROA not before:           Mon 20 Nov 2023 03:46:17 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7511
IP address blocks:        110.92.32.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 01:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Nov 20 03:46:17 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=DE739F8C0393BBB987FEB8C57F0B6767BD0B695F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:31:af:00:63:19:3a:3d:7b:8a:9f:23:74:
                    72:a6:01:90:f4:a8:69:03:3c:97:2c:a9:75:12:29:
                    b7:d4:7e:86:16:38:fc:c0:0e:71:7e:10:c3:0b:aa:
                    01:38:8b:b8:96:66:d9:c0:24:05:99:4f:ec:43:ce:
                    de:c7:2e:51:a0:5c:c4:7e:1f:6b:77:7b:cd:c5:13:
                    73:e2:24:4c:2a:e1:65:4d:91:9e:70:9d:cd:b5:32:
                    85:19:14:85:27:a4:82:5c:28:a7:3f:27:8b:1a:70:
                    8f:bb:92:b5:c4:9d:87:49:57:78:77:58:ca:dc:fa:
                    df:39:43:e1:01:bf:27:d2:69:13:61:3b:c3:ed:85:
                    b0:08:44:a5:64:47:c1:70:2e:dd:3f:c3:38:d0:40:
                    91:56:af:23:3c:5e:d5:bd:cc:83:05:7d:34:dc:6e:
                    c9:47:d8:71:6a:eb:07:2e:a4:0a:bc:8d:b9:a4:8f:
                    9f:f2:d8:c6:5a:e6:7d:ba:d8:44:fc:b8:d5:e3:b7:
                    98:1b:00:24:fa:69:f1:49:22:ac:78:d5:87:f4:9c:
                    ea:f7:57:87:84:1f:55:64:8f:af:13:83:b0:d5:72:
                    53:49:19:b9:1d:d7:7e:52:62:b7:84:7a:6c:48:2c:
                    85:19:dd:fd:7d:fb:3d:31:02:4d:7c:6b:1f:f5:1f:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:73:9F:8C:03:93:BB:B9:87:FE:B8:C5:7F:0B:67:67:BD:0B:69:5F
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/3nOfjAOTu7mH_rjFfwtnZ70LaV8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.92.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:cf:57:6c:0f:57:6e:da:46:3d:1a:c7:7c:db:1b:9e:b7:
         1b:0b:44:f6:0a:f1:5b:e4:d8:be:64:ea:eb:98:53:72:e4:1d:
         e9:9c:f7:7f:1a:10:93:cd:3a:16:01:34:27:5e:49:0e:60:95:
         90:83:c1:cf:7f:ca:82:ea:56:da:a3:cf:e8:ad:0b:6f:0e:a7:
         a0:2f:0e:bb:af:da:66:ad:75:fe:b1:d8:f5:8c:16:66:2d:0f:
         69:c4:e4:30:24:b9:2a:4b:14:45:23:6a:3a:3e:fd:c6:ba:91:
         b7:25:4b:6b:8e:5c:88:fb:07:18:18:31:e8:3b:90:a2:d7:a5:
         94:ee:12:d1:8c:ab:b8:ee:f6:21:c8:fd:21:1c:9e:fd:1c:6e:
         10:56:d1:46:5b:90:8f:22:fd:fe:64:a4:c2:cd:5d:60:09:bb:
         7e:cf:6f:67:97:c5:55:3a:32:32:e5:66:ad:7f:92:f0:08:64:
         d0:b6:9c:5f:39:5a:80:cb:b7:ec:2a:1c:7f:81:ca:a5:a4:5d:
         0b:ee:7a:7f:77:8e:44:ed:07:09:3a:6b:27:98:65:4b:47:13:
         59:b8:bd:37:b6:9a:34:8a:a3:5c:46:91:54:eb:5c:f1:9b:2e:
         69:eb:a2:4a:06:97:1b:38:f6:14:88:5f:ee:37:9f:55:cd:67:
         c7:d1:7a:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 31 03:53:34 2024 by rpki-client on console-fra.rpki-client.org