Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20040/w60enBlnLTkMoPblb1sqltdEmKw.roa
File:                     w60enBlnLTkMoPblb1sqltdEmKw.roa (raw, json)
Hash identifier:          DipYZ/SaZVKvezd1Ap65+SSdS4bNmmDJKgGVTFwAYcI=
Subject key identifier:   C3:AD:1E:9C:19:67:2D:39:0C:A0:F6:E5:6F:5B:2A:96:D7:44:98:AC
Certificate issuer:       /CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
Certificate serial:       10
Authority key identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/w60enBlnLTkMoPblb1sqltdEmKw.roa
Signing time:             Fri 30 Jun 2023 04:06:25 +0000
ROA not before:           Fri 30 Jun 2023 04:06:25 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     7514
IP address blocks:        103.96.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
        Validity
            Not Before: Jun 30 04:06:25 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=C3AD1E9C19672D390CA0F6E56F5B2A96D74498AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:57:5b:b8:46:d5:f8:51:23:98:27:7e:72:
                    cd:a5:27:ea:c3:08:3a:05:d5:d4:47:3a:51:a6:db:
                    41:63:3e:75:77:a3:23:41:f9:52:0a:c1:ba:66:c7:
                    71:5c:e3:89:83:e6:cc:fd:5a:49:30:82:a5:b2:1b:
                    c8:07:8d:c5:4b:db:77:f8:cb:88:31:c8:b8:0b:f3:
                    9a:af:00:04:d3:94:33:36:92:5f:50:62:20:44:31:
                    5e:e6:d2:f1:da:a4:b2:f3:5a:72:8d:6d:ba:46:e7:
                    a4:25:c3:a2:41:de:94:52:83:71:5d:a8:5e:8d:03:
                    16:94:3f:ee:5e:a6:60:a5:06:06:cf:d3:30:9c:90:
                    e2:68:b4:30:23:ea:9b:d6:b2:eb:1b:1b:ff:c9:56:
                    4b:85:85:af:dd:b7:49:26:3b:55:be:6d:14:29:c2:
                    c6:9f:80:c3:4b:03:20:d6:66:b3:04:c8:ad:dc:47:
                    9c:81:9e:dc:49:a9:57:9d:b4:c5:6f:49:52:b9:20:
                    a3:3d:1d:2b:80:20:94:66:bc:be:27:fd:bf:b4:b7:
                    0e:c5:f7:ba:c2:a5:ca:a7:d4:0c:5f:4c:6a:76:c1:
                    4a:7b:da:e7:5b:9c:b4:b9:7d:d8:79:68:28:3f:3e:
                    2c:ff:9d:f9:a1:6e:29:2c:69:38:5a:9d:0e:15:5f:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AD:1E:9C:19:67:2D:39:0C:A0:F6:E5:6F:5B:2A:96:D7:44:98:AC
            X509v3 Authority Key Identifier:
                keyid:5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/w60enBlnLTkMoPblb1sqltdEmKw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:26:6f:16:49:2f:95:4f:56:74:85:c6:08:44:d2:2d:36:6c:
         15:ef:06:2d:b3:c4:40:0b:9a:df:e1:1c:a5:c8:4e:09:01:a5:
         96:68:2b:ad:bf:07:36:88:f0:ff:4b:e4:4a:83:78:86:10:3a:
         2f:33:1a:5c:0d:61:b9:00:83:ac:c5:ce:fe:76:10:32:7c:11:
         b3:39:4a:16:5d:2d:c4:4e:ec:f9:8a:c9:02:e5:74:3e:a4:2f:
         47:28:43:18:f9:2f:09:76:c9:c9:2e:97:95:c7:e9:bc:01:8d:
         bc:2e:39:65:87:f4:52:d5:93:df:28:c3:05:a2:57:f6:49:e5:
         47:90:1e:d6:4d:9f:0d:90:aa:33:6a:47:21:26:dd:80:d8:f1:
         6c:47:5a:7e:2a:ac:0e:81:bf:4f:38:72:ab:93:fe:f9:fe:8f:
         eb:eb:3e:42:18:a4:c6:fc:c2:e8:5c:ba:15:5c:49:c9:63:99:
         2d:ce:2f:fe:ce:66:93:c8:00:16:e5:bb:97:d1:40:38:1f:f4:
         03:33:e1:58:12:de:09:14:94:54:1a:5d:fa:2c:aa:60:9c:7f:
         8b:fd:3c:4b:e3:cc:c8:a5:71:ae:55:95:90:e4:ce:a2:ff:b9:
         3a:0d:03:77:bf:9d:81:82:00:57:97:c1:72:02:a7:fa:4a:4e:
         6b:ae:27:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org