Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/GSByMmDfKxX1XK-sBKrlc3mCOP4.roa
File:                     GSByMmDfKxX1XK-sBKrlc3mCOP4.roa (raw, json)
Hash identifier:          pE7jNlml8EM7onWhBkegD/7tnz1qF7T0yrQZ6sGW3qI=
Subject key identifier:   19:20:72:32:60:DF:2B:15:F5:5C:AF:AC:04:AA:E5:73:79:82:38:FE
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       54
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/GSByMmDfKxX1XK-sBKrlc3mCOP4.roa
Signing time:             Sat 31 Aug 2024 01:30:50 +0000
ROA not before:           Sat 31 Aug 2024 01:30:50 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     17941
IP address blocks:        202.131.192.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 07:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug 31 01:30:50 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=1920723260DF2B15F55CAFAC04AAE573798238FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:50:ab:d8:71:a8:b9:3f:8c:37:54:a8:d1:
                    c5:76:28:12:00:30:0e:16:b6:64:fd:ee:49:7e:c9:
                    89:ad:26:0b:81:7c:ef:e2:a7:17:99:80:40:02:47:
                    b1:ba:96:6b:c8:a9:e3:cb:34:d4:0e:94:d4:59:a4:
                    21:3c:15:16:b9:f1:c7:5a:35:30:b9:98:8b:86:70:
                    5e:2d:73:2d:90:8a:93:a0:22:a0:f7:44:5d:8c:76:
                    d4:46:28:a0:4a:b6:bd:30:f1:e0:4b:f5:91:92:be:
                    5c:fd:ec:aa:f3:b5:f9:78:4c:07:c6:0d:a8:20:84:
                    a5:40:e9:0b:20:97:e3:e6:5a:0a:9b:12:9f:91:81:
                    15:ae:1c:01:b7:c3:e7:c4:31:7c:23:33:37:86:63:
                    de:52:b0:4b:c1:71:c4:16:f0:e9:92:96:19:75:7b:
                    da:80:9f:72:61:82:73:96:44:76:a8:79:69:da:92:
                    09:32:05:a1:4e:ee:0c:79:93:24:df:8d:d6:b4:a7:
                    e8:b2:46:bc:a5:7f:83:39:c5:9f:de:f7:11:23:a1:
                    b0:ba:84:ce:76:50:ff:b4:1d:ad:f6:3a:90:f2:83:
                    59:4a:1c:ea:8f:28:ca:a4:6c:58:c6:73:31:3f:68:
                    7d:c1:21:61:56:49:a4:b8:3d:8b:cb:56:e8:bf:cb:
                    a2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:20:72:32:60:DF:2B:15:F5:5C:AF:AC:04:AA:E5:73:79:82:38:FE
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/GSByMmDfKxX1XK-sBKrlc3mCOP4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.131.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:b3:6b:06:17:94:49:43:40:ed:93:4d:e3:fd:0f:15:ca:52:
         97:89:e2:86:74:0e:d8:af:f1:ed:8f:23:75:71:30:b7:30:bb:
         37:54:6a:ee:8c:b6:44:18:9c:74:d2:fe:ac:a5:d2:9e:e3:2e:
         a5:47:1a:2e:8f:ed:19:a5:af:0d:02:4f:6d:45:e9:5a:c9:69:
         0c:4d:e8:0e:54:d0:e4:f6:3a:29:91:73:d4:0f:b5:99:8a:96:
         e1:49:7c:88:fa:b6:89:f1:28:31:11:d2:f7:6c:5f:5a:2a:ac:
         87:94:96:f6:cc:72:34:05:1a:1c:e2:5a:b9:6b:de:ec:fe:ea:
         6a:10:19:a3:ee:02:0d:43:89:83:e2:a7:aa:c2:e7:f2:0e:18:
         35:39:af:be:d1:f2:34:15:99:c4:54:be:43:1f:58:65:88:bb:
         a1:21:78:62:d0:85:08:65:8d:d3:f6:56:17:52:b2:64:24:ca:
         dd:fb:d9:55:27:a3:04:a4:bf:7b:58:8f:e5:ba:b8:b6:a7:bd:
         e6:41:71:20:4f:7d:3e:fe:24:7b:4f:58:22:b7:8f:23:fe:a4:
         f5:8f:28:ce:8b:02:19:47:1a:bf:9e:f1:65:04:f9:f3:4d:57:
         72:e0:90:86:23:d4:89:e8:8f:50:97:10:73:bc:7c:34:3a:05:
         43:b7:08:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:05 2024 by rpki-client on console-ams.rpki-client.org