Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/FJU2tO3sSM65xWan953FVtaDlzc.roa
File:                     FJU2tO3sSM65xWan953FVtaDlzc.roa (raw, json)
Hash identifier:          awkCL0SEzusaJDeCi7xugAvHTS81hzWWCIFioQEuAHg=
Subject key identifier:   14:95:36:B4:ED:EC:48:CE:B9:C5:66:A7:F7:9D:C5:56:D6:83:97:37
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       26
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/FJU2tO3sSM65xWan953FVtaDlzc.roa
Signing time:             Tue 26 Sep 2023 06:51:09 +0000
ROA not before:           Tue 26 Sep 2023 06:51:09 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        115.69.192.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:51:09 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=149536B4EDEC48CEB9C566A7F79DC556D6839737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:bc:f2:56:ec:44:b9:88:d1:29:30:ec:89:
                    04:8b:22:0c:57:45:8c:5c:c9:84:38:31:d0:46:d6:
                    c9:c6:eb:26:a5:2a:93:99:5c:48:3a:8a:03:b0:dd:
                    6b:37:47:ac:19:47:19:8e:47:e9:ff:17:41:dd:5a:
                    24:9d:47:fc:0f:10:fb:7c:69:5b:e6:3d:c3:78:45:
                    dd:80:dc:64:ab:8d:3a:84:e6:7a:c1:1a:98:59:22:
                    c2:ef:18:2a:e5:e2:50:29:8a:38:20:ae:aa:46:4a:
                    39:37:cd:c2:e1:43:6b:c6:24:87:66:36:77:cf:78:
                    71:57:51:55:c6:30:2e:8c:67:2b:11:be:ff:1f:b7:
                    f1:7b:1d:9f:03:e4:0d:aa:88:59:c0:4b:e0:a5:7a:
                    2a:e3:ec:35:28:1e:c9:b0:54:f7:e9:2f:9d:74:06:
                    4e:29:3e:e4:de:8e:b9:f6:3a:20:83:bc:e9:22:6a:
                    26:2d:67:31:ae:ac:45:d7:ec:23:62:5d:e9:5e:5c:
                    cd:5a:92:73:16:8c:fc:18:a1:8a:1a:23:d4:6c:3e:
                    26:f3:d8:b8:3d:21:ac:bd:06:35:34:d1:2a:5e:63:
                    d3:5c:40:3b:6a:38:a0:c5:c0:a1:87:92:8d:50:36:
                    d3:5d:2d:33:df:18:4f:08:dd:d8:a0:3f:78:2e:2e:
                    37:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:95:36:B4:ED:EC:48:CE:B9:C5:66:A7:F7:9D:C5:56:D6:83:97:37
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/FJU2tO3sSM65xWan953FVtaDlzc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:2e:1c:c3:1e:65:d7:08:42:4f:03:b1:db:2f:17:c7:55:45:
         e0:6e:ee:90:53:96:fa:0a:32:95:3b:fd:51:98:bb:0a:6e:02:
         d4:d7:d4:d5:f0:23:32:e4:85:a7:62:3a:1e:54:5f:27:c2:58:
         b7:db:ef:1c:3d:28:a3:06:d7:04:44:b3:ef:a4:be:f4:49:bb:
         0e:3c:a1:52:8a:3a:d5:31:9c:9f:f5:d4:57:ea:0a:ad:c1:ad:
         14:75:dd:a2:23:03:ea:36:32:af:a2:2f:cd:18:e4:9e:ba:83:
         dc:91:3d:db:72:86:2f:26:61:29:7b:04:72:8f:b1:f9:5b:87:
         73:75:58:72:45:36:a7:d5:93:86:f9:dc:b1:c3:0e:59:c0:5f:
         3b:e8:75:53:62:0c:29:20:80:70:79:76:23:98:ad:19:e6:d8:
         ad:c5:31:17:1f:d4:5e:35:60:3b:3b:87:04:e9:9e:37:cc:c1:
         84:5e:79:45:15:7e:67:16:3b:c1:89:f7:6b:20:8e:ae:67:a1:
         1d:6c:7f:d8:73:4e:2f:15:27:07:04:47:b0:d4:95:3a:cb:38:
         93:37:81:f9:5d:17:56:30:c7:fd:bf:1a:a0:be:17:1b:29:76:
         1f:40:75:ae:c4:a7:96:62:a6:bb:91:a4:d4:f2:a4:54:c4:62:
         4f:c1:b3:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:54 2024 by rpki-client on console-ams.rpki-client.org