Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/_Nl71qX842uauoLUYfwpofpFIIc.roa
File:                     _Nl71qX842uauoLUYfwpofpFIIc.roa (raw, json)
Hash identifier:          S76XNLLCpUg3k57Vq21860ndPL7KpzsTInqA1yKQeXM=
Subject key identifier:   FC:D9:7B:D6:A5:FC:E3:6B:9A:BA:82:D4:61:FC:29:A1:FA:45:20:87
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       47
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/_Nl71qX842uauoLUYfwpofpFIIc.roa
Signing time:             Sat 31 Aug 2024 01:30:45 +0000
ROA not before:           Sat 31 Aug 2024 01:30:45 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     17941
IP address blocks:        115.30.0.0/19 maxlen: 20

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 07:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug 31 01:30:45 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=FCD97BD6A5FCE36B9ABA82D461FC29A1FA452087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8f:ef:b1:e5:40:7b:2b:8c:3b:a1:c9:a6:02:
                    90:d5:27:ad:24:66:79:18:03:fb:fd:d0:32:fb:8b:
                    a6:e7:ea:83:a1:e4:3f:e9:bf:8d:19:fc:46:f7:83:
                    32:3e:13:ed:0f:86:ab:a5:94:65:d2:30:35:58:1f:
                    cd:8f:37:10:f6:e4:13:53:49:46:6c:22:43:7b:02:
                    20:bb:bc:0b:c0:59:70:e7:c8:7e:db:c1:e8:c8:ac:
                    b4:00:9f:00:e1:41:50:12:ed:1e:8f:c7:a3:50:ab:
                    2c:5d:f5:b1:6e:3f:1c:52:b3:9b:50:7f:d4:09:ba:
                    74:83:92:3f:fc:54:96:bb:0e:4d:e5:d5:3f:e2:9b:
                    03:6b:ab:8f:01:3c:f2:51:91:a0:e4:53:7f:16:e0:
                    1e:1b:e8:b4:c4:af:ac:e4:43:1e:f4:5f:b7:17:04:
                    80:6d:e5:80:81:2c:4c:b8:7f:e9:02:4f:0c:03:77:
                    a8:8a:27:48:b8:2e:24:5a:c5:5c:cc:97:7f:8e:6f:
                    81:d7:30:e5:d4:14:61:fa:e8:6e:61:17:42:32:3e:
                    a0:ba:b8:dd:c0:94:ac:ea:b6:ab:2b:2c:22:8a:44:
                    d3:51:3a:5f:9c:b9:2a:52:5b:01:9e:01:c9:5b:75:
                    b2:fd:a3:ae:88:d9:dc:da:b4:51:9a:f2:a3:b7:76:
                    1f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D9:7B:D6:A5:FC:E3:6B:9A:BA:82:D4:61:FC:29:A1:FA:45:20:87
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/_Nl71qX842uauoLUYfwpofpFIIc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:67:c5:46:0d:90:d3:68:56:50:07:9b:45:bd:13:00:89:09:
         0a:67:49:86:74:71:c6:a3:27:d0:99:a0:ae:51:a8:3f:73:56:
         fc:cd:12:ad:a2:5c:85:1b:d6:16:07:a0:ed:89:64:70:23:9b:
         92:b1:f8:90:16:c4:43:87:25:6c:3a:f5:1d:6c:a3:e5:ef:b9:
         9e:a7:6c:9a:06:ce:56:1e:3d:4a:69:66:d4:72:a6:bb:88:b9:
         30:f9:e2:01:84:ef:7b:e5:7a:f8:a0:d8:81:ad:69:d5:3d:6a:
         28:9a:b4:80:fb:09:30:db:9e:77:9c:05:ad:36:6a:70:cd:5e:
         30:87:d7:89:fa:36:fb:6b:20:f0:71:1f:7e:14:00:91:71:c3:
         f6:d8:ce:04:24:c5:4a:38:24:1d:b8:b7:8d:2a:eb:db:77:d8:
         63:01:d8:6c:98:54:d1:e8:15:14:1d:46:21:9f:a4:b0:f4:52:
         41:61:a1:f3:5a:a7:37:11:6a:ad:e0:a1:0b:d7:f0:a9:d9:24:
         4b:4b:fa:3c:5e:12:86:81:41:1f:7a:5a:4c:ac:35:e3:f1:d5:
         ae:e7:e5:64:bf:fb:65:bb:7f:e5:0d:08:38:39:c6:6f:33:f4:
         f3:34:36:01:d8:3c:d4:83:64:c4:c3:f8:c3:c0:f2:78:db:57:
         47:ea:84:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 1 08:29:41 2024 by rpki-client on console-fra.rpki-client.org