Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/I5YnFVRTrCfniTaGNuozko3lclU.roa
File:                     I5YnFVRTrCfniTaGNuozko3lclU.roa (raw, json)
Hash identifier:          6ovAom32Tw4kDgKkGT04kg/wrmSl/+tDcz/EvyRhFeQ=
Subject key identifier:   23:96:27:15:54:53:AC:27:E7:89:36:86:36:EA:33:92:8D:E5:72:55
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       21
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/I5YnFVRTrCfniTaGNuozko3lclU.roa
Signing time:             Tue 26 Sep 2023 06:39:05 +0000
ROA not before:           Tue 26 Sep 2023 06:39:05 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        101.97.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:39:05 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=239627155453AC27E789368636EA33928DE57255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ef:c4:0d:67:9e:56:66:6c:3f:c0:f1:69:27:
                    f9:c1:17:8e:ab:8d:f2:41:dc:7f:c6:1d:1c:56:2d:
                    d9:74:f9:9b:e3:fb:43:60:46:b7:6d:5c:67:be:94:
                    5a:54:4e:de:fb:da:9d:fa:3e:57:9e:22:61:ab:13:
                    28:fd:68:a6:2c:23:7c:68:61:16:2f:07:90:a9:83:
                    c2:d1:03:91:d3:10:2a:d9:ad:bc:25:78:72:1a:03:
                    2f:42:ff:1a:6d:8a:03:10:9e:30:bd:fb:45:24:56:
                    91:e9:65:04:4e:97:1e:e5:85:38:41:dd:ba:c7:e8:
                    e7:87:2d:4c:0d:43:b0:95:ce:f8:8a:fb:d3:6a:8a:
                    fe:68:07:dd:ad:7a:89:01:69:00:68:23:8c:84:77:
                    f9:5b:1e:eb:07:27:13:b7:be:f6:d1:34:47:28:00:
                    a6:31:6e:a8:9f:93:c2:10:e4:6b:49:08:ba:40:ca:
                    20:4e:00:fc:89:7c:5a:d6:6c:f0:7b:37:24:e9:b0:
                    4a:7a:35:4c:5d:11:46:30:e7:38:56:df:9f:93:07:
                    39:ef:7d:1e:7a:9d:e5:c6:52:81:b7:0a:c7:b2:e3:
                    d5:1f:67:61:dd:8a:8e:e7:31:20:cb:f2:02:5a:76:
                    82:8b:bb:35:b8:7d:23:c0:01:85:ff:80:b0:bf:d2:
                    cb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:96:27:15:54:53:AC:27:E7:89:36:86:36:EA:33:92:8D:E5:72:55
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/I5YnFVRTrCfniTaGNuozko3lclU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.97.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:5b:e5:d8:d5:f9:c3:9a:f0:d0:44:dc:ea:ca:98:2c:b8:ec:
         2a:ed:a4:4b:4e:5d:ee:3c:48:fe:64:be:36:93:43:82:79:47:
         fe:41:42:d3:c3:00:ca:4f:7a:28:90:93:dc:b2:40:dd:56:dc:
         d9:c9:0f:b8:d3:d3:be:ae:59:a7:44:49:d1:bf:a5:21:e5:eb:
         33:d9:50:47:15:b5:e1:27:84:22:23:a9:4d:dc:9b:08:12:97:
         45:66:bd:b8:7c:95:fb:48:b8:d2:f3:cb:e7:7e:a4:bd:2e:bd:
         82:b6:40:8c:67:97:83:55:53:cd:77:9f:50:10:b3:6f:e5:52:
         a0:be:b8:8e:84:da:02:9b:7b:c3:30:5b:4a:8e:21:a8:4d:54:
         50:23:31:1b:f4:ae:7e:5f:e5:e0:08:b2:fe:e4:87:6a:0b:2f:
         d9:1f:7a:79:db:16:6a:6b:36:e9:82:68:b9:d2:5e:cf:d3:42:
         6f:8d:97:64:10:8c:bc:08:0c:3f:b7:5f:d1:c1:17:b5:a8:5c:
         0f:f5:28:9f:6f:2e:38:40:6c:42:5e:6e:3d:de:d4:4b:25:18:
         17:b0:98:db:16:f2:9c:4a:15:26:09:74:45:83:b4:3f:86:c0:
         25:f7:f6:ed:22:ed:ff:2c:74:22:8f:a1:72:75:20:4a:d3:8c:
         4f:30:50:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org