Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/9GUESzR1qBKhll_JHRI7wktvIy4.roa
File:                     9GUESzR1qBKhll_JHRI7wktvIy4.roa (raw, json)
Hash identifier:          BgndJyinlaDq/8bjy2+60BQOc+D8FWSurrGOEdrnSyw=
Subject key identifier:   F4:65:04:4B:34:75:A8:12:A1:96:5F:C9:1D:12:3B:C2:4B:6F:23:2E
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       34
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/9GUESzR1qBKhll_JHRI7wktvIy4.roa
Signing time:             Tue 26 Sep 2023 06:57:16 +0000
ROA not before:           Tue 26 Sep 2023 06:57:16 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        218.219.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:57:16 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=F465044B3475A812A1965FC91D123BC24B6F232E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:19:f0:18:4b:d9:64:37:68:29:47:34:4f:
                    55:4e:4f:f4:09:5e:9e:af:a1:d8:bc:a2:68:68:f0:
                    03:b9:07:a4:ba:08:59:69:d2:6b:12:db:aa:f4:25:
                    27:6d:a4:40:df:f5:6b:cb:12:ba:77:74:af:03:2c:
                    46:fc:15:0b:f3:98:5c:de:41:47:bb:7f:47:d1:7a:
                    c3:c4:8f:20:3f:a8:a4:bf:7a:2f:72:01:ca:46:45:
                    49:9a:65:72:d9:c2:24:70:bf:ca:75:10:c9:26:79:
                    d2:09:8a:d9:de:43:44:bf:4b:2c:c3:e6:18:9d:90:
                    f7:30:41:92:38:61:c1:40:f4:76:ab:7c:c2:39:f6:
                    22:6f:2f:45:28:52:63:f1:56:3a:a9:c0:17:ad:7b:
                    59:28:cd:10:05:2b:08:b7:1a:c0:ea:01:13:84:2f:
                    e7:cc:50:e6:da:13:12:46:78:f1:6f:f8:d3:aa:83:
                    42:cf:7d:da:a1:36:97:c5:26:70:54:18:c8:97:63:
                    14:b6:39:64:0e:02:8e:6a:b6:29:4c:e3:34:c6:1c:
                    51:fc:36:e5:92:5b:c7:bd:5b:dd:5d:37:c6:18:38:
                    eb:76:43:5d:70:74:bb:74:b5:53:9d:95:43:a0:98:
                    99:24:6f:65:27:3a:8c:6f:b5:4a:de:e4:b9:33:7d:
                    13:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:65:04:4B:34:75:A8:12:A1:96:5F:C9:1D:12:3B:C2:4B:6F:23:2E
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/9GUESzR1qBKhll_JHRI7wktvIy4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:ef:4d:63:e1:f7:d8:36:bc:c6:a3:1a:eb:b8:90:e1:51:b9:
         5c:c1:b1:51:7c:36:fe:c5:1f:a7:48:1a:c2:1b:62:4e:c4:a8:
         16:bc:25:9c:1e:9b:6c:d7:56:ce:f6:d5:00:de:85:95:95:c1:
         ec:92:61:0a:c0:a9:72:a4:34:27:64:ca:7f:0d:97:3d:6a:08:
         d0:c1:fc:b8:20:cb:6b:0a:bd:5f:d3:bf:4a:bd:15:75:34:0b:
         66:c0:f1:11:e5:8b:39:c6:41:ee:e5:ee:b9:fe:e6:24:5a:ee:
         e2:f5:0e:e0:d1:b8:62:6a:fe:0d:74:54:b8:30:a2:4a:3d:0a:
         62:fd:f6:cb:11:c9:9e:2d:a2:7a:43:ba:ff:84:50:18:4b:a3:
         b1:bf:25:ee:fe:b4:a5:a7:ac:3b:f4:fb:ac:1a:4c:e8:4b:0d:
         e1:85:38:78:43:74:ae:64:cf:e0:0e:5e:c3:3d:a5:ba:0f:e2:
         33:e0:70:3e:d8:91:a4:95:7a:c9:e4:b1:7f:72:67:a4:1e:4d:
         82:38:a4:35:0f:40:71:94:45:17:a2:d7:fa:dc:88:44:3d:ad:
         c4:43:41:74:98:bc:27:b1:1f:51:83:ab:7d:d0:4b:cd:af:cc:
         09:12:82:a0:dd:f7:10:57:c1:f1:f2:14:2a:04:18:77:35:bb:
         d2:ae:42:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org