Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/OXx8Y_eKiSQU8kZ4GADFgkKRZIo.roa
File:                     OXx8Y_eKiSQU8kZ4GADFgkKRZIo.roa (raw, json)
Hash identifier:          ZI0wC8J4Q4VA8idh54JgBZxVl9Bq2Kuh2P7k0b200JY=
Subject key identifier:   39:7C:7C:63:F7:8A:89:24:14:F2:46:78:18:00:C5:82:42:91:64:8A
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       50
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/OXx8Y_eKiSQU8kZ4GADFgkKRZIo.roa
Signing time:             Sat 31 Aug 2024 01:30:49 +0000
ROA not before:           Sat 31 Aug 2024 01:30:49 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     17941
IP address blocks:        175.111.80.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Tue 01 Oct 2024 07:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug 31 01:30:49 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=397C7C63F78A892414F246781800C5824291648A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d9:18:ec:36:cf:96:ff:b5:85:a7:f6:d4:61:
                    92:cf:c8:5d:cd:96:f8:b3:f5:e0:c3:3f:3e:8d:28:
                    8c:fb:7c:ca:c3:63:4c:10:98:d1:e1:b3:f8:d2:2f:
                    b9:1d:de:ad:11:8f:31:dc:81:e8:9d:40:1f:63:ca:
                    54:0c:67:25:07:2a:10:53:08:68:1d:d4:d9:3f:59:
                    0b:9a:95:11:49:23:ef:4d:56:d4:70:56:48:9c:d4:
                    50:16:af:16:52:25:60:8a:e7:3e:af:c1:e7:8e:fa:
                    39:ef:ca:83:73:c6:28:66:c5:f8:23:2b:b7:59:c1:
                    0e:93:30:20:70:a0:ad:1d:89:de:10:39:5e:35:e6:
                    a5:80:3c:92:78:95:5f:75:92:75:60:70:aa:eb:97:
                    76:f7:46:cd:d5:43:22:3a:d6:1c:3c:8a:c2:41:fe:
                    40:29:f0:ae:2d:25:6b:e3:b7:1a:71:e2:4b:1a:55:
                    ca:7a:06:3f:67:fd:86:6d:39:26:a7:83:c3:0d:a0:
                    d0:63:64:ed:e6:c7:02:dc:7a:8a:8f:69:92:66:26:
                    bc:e0:45:07:69:5b:f1:2c:d8:a9:29:3b:93:ca:c5:
                    da:d7:64:98:42:4f:1b:a5:4a:0f:ee:97:5d:47:06:
                    70:cc:6d:0d:29:f2:b4:4f:19:b2:dc:df:a6:34:ad:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7C:7C:63:F7:8A:89:24:14:F2:46:78:18:00:C5:82:42:91:64:8A
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/OXx8Y_eKiSQU8kZ4GADFgkKRZIo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:df:ab:ba:32:95:21:c6:8c:31:1c:df:82:d0:18:e0:85:77:
         74:3e:8e:d9:0e:f2:4e:b3:e0:0b:fd:77:bb:f5:38:6b:70:a0:
         2b:6d:c1:d0:c3:91:1b:d4:0b:5a:d3:27:82:95:c2:3d:6b:d7:
         36:22:15:fa:56:fd:f3:a4:a8:20:02:b1:6f:fc:fa:ad:2c:6f:
         51:0c:a6:8d:ab:2c:75:92:80:39:39:55:2e:60:d8:1a:91:69:
         18:a6:76:fd:d5:68:15:ae:c4:bc:77:f1:3e:b1:95:2c:95:81:
         76:7c:f5:96:b0:ae:6b:cd:d5:d5:3f:f8:0a:04:a2:a9:87:44:
         dc:a0:ed:fd:11:c7:67:ad:b1:bc:31:82:d4:d8:32:61:c0:96:
         ad:d8:d9:23:ca:76:ba:75:aa:b6:2f:f0:78:85:96:a2:f0:4b:
         82:5f:59:10:65:93:94:41:19:90:d5:92:54:be:66:b3:23:56:
         0e:87:fd:a9:32:6b:d0:74:7d:41:f2:1b:6f:cc:e4:2f:9c:42:
         45:00:e1:d0:7a:51:f7:1c:f9:22:5d:34:8e:2b:d5:93:50:78:
         56:7c:83:2b:81:a1:38:a5:f5:27:8a:42:fe:2f:9f:11:3f:51:
         8c:2e:e4:70:10:09:7c:fc:44:dd:d1:3f:64:a1:67:4a:bb:67:
         d8:36:31:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:35 2025 by rpki-client