Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/OVHCxytyoKGAOTgHjNvGNt18UuE.roa
File:                     OVHCxytyoKGAOTgHjNvGNt18UuE.roa (raw, json)
Hash identifier:          UCCyDSmR1GpIIhB0Uq2mFP0tEj6K5BIobYW9ITWxfv4=
Subject key identifier:   39:51:C2:C7:2B:72:A0:A1:80:39:38:07:8C:DB:C6:36:DD:7C:52:E1
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       4E
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/OVHCxytyoKGAOTgHjNvGNt18UuE.roa
Signing time:             Sat 31 Aug 2024 01:30:48 +0000
ROA not before:           Sat 31 Aug 2024 01:30:48 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     17941
IP address blocks:        119.75.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 07:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug 31 01:30:48 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=3951C2C72B72A0A1803938078CDBC636DD7C52E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:3e:27:e3:a2:fb:ea:35:e3:aa:5c:16:95:
                    49:db:98:37:07:77:ad:8a:0c:b2:75:fb:b3:98:f7:
                    57:34:6e:b3:c8:ff:05:b0:66:eb:da:f9:30:e0:7a:
                    b4:99:8a:c4:25:5d:ae:d5:2c:2e:74:2a:28:11:bd:
                    32:ec:c0:6c:e8:f0:b3:7d:5f:12:26:1f:f2:b0:71:
                    83:39:28:b3:02:9e:98:5a:23:f9:16:ec:32:13:e3:
                    04:1f:d4:fe:fa:9f:38:c5:db:62:a1:c2:7a:3a:db:
                    a6:c7:f1:88:3b:0b:1d:ea:76:2e:03:ae:80:c2:7a:
                    2f:34:ee:34:71:3b:46:6f:01:18:6c:60:77:b8:bb:
                    46:c1:78:eb:ca:c2:44:c0:4a:a1:5a:e6:4e:8c:13:
                    82:55:80:89:fb:de:e7:f3:7f:a0:75:5a:83:64:aa:
                    14:e4:c5:f4:65:fa:25:59:97:8c:d9:4c:be:86:2b:
                    cb:6a:c0:74:9e:6a:f2:99:ca:49:8e:51:25:f5:fe:
                    9c:c6:31:c6:3d:a6:3a:d4:c7:d3:d2:67:aa:cb:6d:
                    9b:f6:7d:53:ec:37:f0:ae:fd:b2:54:92:58:65:87:
                    d4:be:da:40:d0:ce:94:af:8c:f9:89:f9:74:c1:a5:
                    68:2e:97:3f:7d:2b:eb:c6:27:15:13:7d:7a:b0:d6:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:51:C2:C7:2B:72:A0:A1:80:39:38:07:8C:DB:C6:36:DD:7C:52:E1
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/OVHCxytyoKGAOTgHjNvGNt18UuE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.75.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:83:6e:03:8f:71:a1:09:b2:d6:46:22:49:25:28:cd:6a:28:
         e0:2f:fc:5c:c4:12:bb:78:2f:b8:7c:d5:04:c8:7e:2a:1d:1e:
         7b:dd:69:40:be:8d:36:85:0a:87:71:f1:ba:3b:d5:4f:d7:3e:
         30:5d:7a:6b:f9:21:11:e2:64:71:e1:92:0d:3d:e7:f8:9a:d2:
         9c:11:e5:4c:2d:ef:eb:0e:8a:60:15:13:3d:8c:f3:14:61:b0:
         7a:0b:b9:0a:5d:e5:78:aa:59:d6:04:76:ec:ab:07:72:6e:e4:
         76:56:e9:9f:c5:15:b2:4a:1c:d8:e4:5b:de:67:2f:2d:db:e6:
         e4:42:00:33:32:f4:e8:29:fa:0c:7f:ad:ca:8b:85:e0:0b:db:
         d6:16:21:a8:8a:6f:45:bc:06:e6:bd:c5:42:9f:a6:5d:d3:13:
         2e:27:19:73:3c:78:eb:47:74:7c:af:a8:42:7f:25:fc:e0:3a:
         8e:37:28:21:87:42:ea:b9:e4:65:79:5d:a3:8d:12:e0:57:e9:
         4f:45:fc:22:20:00:b8:6e:2d:ef:6d:78:24:e5:bc:6b:dc:14:
         67:34:37:20:8a:48:0a:c6:23:e6:f2:4f:02:ba:bd:3c:1e:2a:
         a2:a3:7f:09:bd:49:a3:a0:27:06:2c:11:7e:ee:07:46:7f:53:
         00:21:e5:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:05 2024 by rpki-client on console-ams.rpki-client.org