Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/bjGjN6P0NOX5wV00RgfwRBv5lxE.roa
File:                     bjGjN6P0NOX5wV00RgfwRBv5lxE.roa (raw, json)
Hash identifier:          ZGguiRA+k6Bp45zMt3FttXic0312PHd/JEQXBCLqIKc=
Subject key identifier:   6E:31:A3:37:A3:F4:34:E5:F9:C1:5D:34:46:07:F0:44:1B:F9:97:11
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       07
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/bjGjN6P0NOX5wV00RgfwRBv5lxE.roa
Signing time:             Thu 26 Jan 2023 04:16:03 +0000
ROA not before:           Thu 26 Jan 2023 04:16:03 +0000
ROA not after:            Fri 26 Jan 2024 04:04:30 +0000
asID:                     131923
IP address blocks:        133.88.88.0/22 maxlen: 25

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 04:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Jan 26 04:16:03 2023 GMT
            Not After : Jan 26 04:04:30 2024 GMT
        Subject: CN=6E31A337A3F434E5F9C15D344607F0441BF99711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:61:2d:f2:18:51:6f:fe:22:64:cb:ef:95:36:
                    d9:82:c3:f1:31:fc:cd:6c:ee:b7:9e:87:a2:0a:93:
                    d6:38:a7:fc:4d:ce:f6:9e:22:57:1d:8d:02:e3:aa:
                    4f:5d:d5:62:24:76:80:68:45:61:a5:a1:3b:80:5c:
                    b5:7c:7b:b0:dd:ec:62:c1:98:f0:0d:97:db:fd:1d:
                    c0:d6:f8:f2:44:e0:36:0b:b5:f8:ac:86:42:66:53:
                    d8:95:71:23:85:91:a7:07:c1:f9:44:fe:61:b9:6b:
                    85:9c:af:68:47:7a:cf:c9:8d:7a:51:92:d3:aa:2e:
                    b6:a2:37:7d:60:d0:54:a2:ac:20:ed:e2:a6:73:a7:
                    6b:be:e8:fb:13:ac:64:43:2b:ae:3d:fb:9a:18:68:
                    9f:d8:5a:db:54:d3:ca:d5:f0:0d:cc:4a:91:0c:c9:
                    11:01:70:42:38:c7:fe:b0:77:fd:48:09:02:38:62:
                    e5:a7:b8:fb:38:53:01:51:1f:e9:ff:50:98:6c:2f:
                    3d:6b:c6:c0:c9:b9:3f:65:ce:47:ff:39:db:08:3b:
                    8a:61:91:56:c3:f1:f0:e1:79:45:6d:4b:af:cd:e3:
                    ac:25:93:29:be:7d:89:d4:f7:8f:8f:27:32:0c:4d:
                    fd:d4:cc:b2:9d:d3:41:98:87:45:4b:29:9e:8d:17:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:31:A3:37:A3:F4:34:E5:F9:C1:5D:34:46:07:F0:44:1B:F9:97:11
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/bjGjN6P0NOX5wV00RgfwRBv5lxE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:1f:c0:08:19:5a:f6:77:33:c6:29:64:67:b0:04:fb:68:8b:
         6f:2d:5b:b9:e8:64:fb:3f:15:9d:77:92:2d:76:5d:a0:4c:8a:
         e8:9c:7c:bd:96:90:f5:9a:b6:53:ae:29:4d:fc:c7:bf:ee:3a:
         a0:11:1b:75:5b:d9:10:34:cd:ad:65:4b:67:5f:56:e3:29:87:
         1a:e2:a2:84:b0:86:e6:cf:8d:39:e8:9b:3e:c6:24:4a:b7:77:
         f5:da:66:82:56:11:a5:07:72:12:90:4e:a5:c1:d1:83:2e:04:
         d0:03:13:f7:64:09:92:d3:a3:56:61:b7:79:4d:c7:84:42:a6:
         45:b6:6c:f3:25:f4:8d:ca:b0:a3:c1:f5:a2:9b:0e:8f:f6:3e:
         6c:a3:fe:93:9e:31:b0:fe:57:53:94:b7:77:d1:f2:4d:a5:fe:
         3d:6a:07:76:77:38:b1:51:66:b3:65:a1:69:c6:cb:49:2b:fb:
         8f:aa:28:a0:5e:d5:45:df:5f:2d:5d:f9:31:80:e4:bd:e8:48:
         e1:62:d6:d3:e7:91:1d:dc:de:48:30:ad:98:99:59:14:eb:be:
         1f:0c:6a:11:fe:24:5d:9e:19:a4:5f:41:25:ed:81:e5:5c:ab:
         aa:7a:77:f5:75:4c:f0:16:72:9a:61:1a:82:4e:c8:69:5b:b0:
         df:61:39:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 12 06:34:16 2024 by rpki-client on console-fra.rpki-client.org