Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/WakdLyO_eEhEl9yo5wUnHNpBHoQ.roa
File:                     WakdLyO_eEhEl9yo5wUnHNpBHoQ.roa (raw, json)
Hash identifier:          BfwpwUCGaIs2gDILQWMxVgeWMMkKbnGHZNf06WgiTRg=
Subject key identifier:   59:A9:1D:2F:23:BF:78:48:44:97:DC:A8:E7:05:27:1C:DA:41:1E:84
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       2C
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/WakdLyO_eEhEl9yo5wUnHNpBHoQ.roa
Signing time:             Tue 26 Sep 2023 06:53:16 +0000
ROA not before:           Tue 26 Sep 2023 06:53:16 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        180.148.160.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:53:16 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=59A91D2F23BF78484497DCA8E705271CDA411E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:57:77:9b:5b:a8:86:ea:b3:76:4e:5d:3d:
                    4b:3b:ca:71:dc:cf:cc:0b:43:b7:72:21:99:ab:29:
                    4f:00:17:5a:aa:f6:60:42:80:9c:ec:ae:9d:85:05:
                    64:3b:8b:29:b9:50:a7:8d:b5:6e:ce:61:85:d1:d6:
                    7f:35:f3:49:05:84:05:4a:96:b7:11:5e:a5:d3:8b:
                    b9:9e:c0:de:81:ab:6b:30:e2:93:35:41:d2:1e:dd:
                    62:50:92:da:e8:1d:d4:b1:75:8a:38:76:e4:0e:0d:
                    3e:a7:b9:d0:45:73:e2:03:c8:f7:57:5e:f2:9f:cb:
                    49:bb:32:51:60:3a:63:5b:df:b1:80:f4:77:b8:ec:
                    5c:fd:38:f5:5d:8f:55:6d:1d:c7:17:bd:d8:ff:92:
                    57:3e:9b:a2:1b:10:48:1c:40:8d:65:28:cb:c7:f8:
                    c5:21:13:97:05:51:e5:53:7b:91:eb:1c:8d:4d:75:
                    c6:0a:cb:7e:8b:fc:37:1f:fa:06:7e:79:05:39:9f:
                    c9:22:85:40:47:02:72:5b:a4:9b:5c:6c:f8:be:fb:
                    5d:db:d7:4a:e4:0f:bd:a4:be:f5:6d:d4:d9:e5:d3:
                    87:fd:c3:13:30:28:30:24:ac:ec:39:3e:ab:10:38:
                    c7:50:24:60:27:e8:82:b2:ca:07:94:21:1b:97:15:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A9:1D:2F:23:BF:78:48:44:97:DC:A8:E7:05:27:1C:DA:41:1E:84
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/WakdLyO_eEhEl9yo5wUnHNpBHoQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:45:07:5e:c4:ca:df:b9:e9:5d:15:ff:02:42:45:a9:34:4b:
         be:4d:c8:b8:18:60:03:3f:88:84:b2:09:cb:b9:af:ef:98:96:
         58:d9:cc:90:6e:eb:e1:89:f3:55:2c:9a:ba:39:ef:c7:0b:ae:
         09:ef:de:ad:3d:38:64:a8:f2:b9:c9:4d:aa:de:ce:07:8f:09:
         8b:5a:bb:03:90:2a:70:66:e9:1f:dc:ec:49:b7:20:58:65:80:
         3f:fd:08:cc:56:99:77:90:5d:95:a9:69:a6:0b:03:26:9d:d0:
         79:4f:e5:0e:65:98:5c:c2:41:75:76:4c:7b:15:86:cb:23:1a:
         c9:06:58:3c:cb:05:b6:34:02:a9:c7:29:a3:7d:4b:0b:ec:fd:
         16:e2:9e:7b:d2:35:ed:d9:d8:2d:c8:52:b7:1d:a7:bb:10:c0:
         98:d4:19:de:23:33:b9:42:95:d1:6f:39:0b:ec:b4:e7:4c:a1:
         92:a3:07:9d:86:7b:66:e0:ec:35:17:55:c9:2d:18:1a:1d:5f:
         d6:19:b0:e6:f8:75:dc:82:71:ad:73:31:91:ab:22:4f:6a:86:
         63:1e:6a:82:ec:5d:e4:31:6d:95:11:5f:1a:78:99:77:3f:b7:
         5b:ac:e8:a6:c5:c2:52:52:3c:06:12:00:d6:c4:8e:35:25:03:
         fe:22:50:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:54 2024 by rpki-client on console-ams.rpki-client.org