Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/mSMs6OkaOy82aP7PX4jS6cWt8Ps.roa
File:                     mSMs6OkaOy82aP7PX4jS6cWt8Ps.roa (raw, json)
Hash identifier:          zhFrISOqHX4EqVXSOo4YQvO3oU5QHFdtL0KlZnYuSZg=
Subject key identifier:   99:23:2C:E8:E9:1A:3B:2F:36:68:FE:CF:5F:88:D2:E9:C5:AD:F0:FB
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       4F
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/mSMs6OkaOy82aP7PX4jS6cWt8Ps.roa
Signing time:             Sat 31 Aug 2024 01:30:49 +0000
ROA not before:           Sat 31 Aug 2024 01:30:49 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     17941
IP address blocks:        175.111.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 07:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug 31 01:30:49 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=99232CE8E91A3B2F3668FECF5F88D2E9C5ADF0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9b:e5:53:aa:be:35:5c:bf:24:c9:cc:69:14:
                    b6:97:9a:43:3c:ad:f4:a2:74:00:0c:c8:67:bb:e6:
                    49:b2:a6:90:46:b3:33:89:c3:1e:c5:86:b3:11:2b:
                    14:f6:f1:02:37:a8:5b:7d:dc:be:9d:8e:bc:ba:9e:
                    2c:53:81:48:f9:3f:97:f2:69:01:83:d7:ad:56:a2:
                    88:af:c0:7b:66:48:7a:4e:12:4e:c2:5a:a5:91:2e:
                    21:44:44:10:21:0b:c7:f1:dc:34:12:e4:51:80:48:
                    09:c4:bf:bc:b8:29:c1:31:a0:1d:11:db:39:5d:7b:
                    ef:17:d6:43:3e:f8:44:c4:a0:7e:94:3f:2b:b3:a7:
                    c4:71:59:0a:43:af:9a:38:88:8f:24:2d:4f:75:70:
                    8b:a1:f2:c8:90:13:82:cf:80:7a:cc:99:8b:8f:bf:
                    09:97:1f:63:13:47:15:ae:19:a6:1c:4c:47:f3:a9:
                    86:b0:3a:3c:da:77:e4:d9:2d:89:bf:ea:cf:1c:dc:
                    53:11:6e:f0:ff:70:43:c5:47:52:80:92:fd:77:b2:
                    57:5c:3c:91:ae:c4:a8:3f:12:26:8f:b4:4f:c9:fe:
                    81:08:17:02:ee:9a:b7:c4:38:5b:cf:82:58:54:c0:
                    cc:20:f5:f9:06:80:28:6d:94:0c:7b:94:72:79:01:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:23:2C:E8:E9:1A:3B:2F:36:68:FE:CF:5F:88:D2:E9:C5:AD:F0:FB
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/mSMs6OkaOy82aP7PX4jS6cWt8Ps.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:15:b5:48:94:30:07:76:40:98:d1:e5:9a:27:26:0a:83:b4:
         ee:30:ab:f5:7c:28:f5:10:e3:3b:f3:db:ea:c4:fa:c9:67:7a:
         15:74:0b:ed:e7:29:1c:6a:2c:a4:69:2e:26:a0:4d:2f:79:7f:
         bf:05:cc:1a:cb:68:53:79:7e:b0:b2:3d:1c:b8:6a:e8:cb:af:
         0d:4d:48:e9:4f:70:ef:4b:e1:e0:21:83:b9:2b:e8:f4:69:1a:
         29:0a:79:06:84:20:29:c9:75:ab:ac:29:ca:1d:14:20:f8:88:
         88:c3:3e:13:97:68:86:1a:71:10:97:75:ce:9b:12:7e:63:b5:
         42:a5:6d:54:de:50:03:84:f7:3c:c1:df:a7:14:a7:90:cd:bd:
         77:7f:ba:51:3f:04:42:24:9a:a3:0f:83:48:f1:5a:e1:09:24:
         a5:cb:46:41:04:19:a1:f5:23:be:f0:55:f8:83:84:c9:c1:b7:
         69:4d:ed:c3:b4:76:1e:d6:52:0e:d4:30:33:12:12:94:30:2b:
         9a:e1:7a:bc:10:00:90:26:62:47:d0:06:24:57:22:ac:fb:db:
         94:62:bd:7f:ea:de:e7:cd:31:ef:b9:d9:9e:20:36:17:c8:ee:
         8d:0a:b0:3e:de:4b:3d:8a:d3:50:f1:c4:68:c7:c5:6a:26:bd:
         3c:40:24:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 1 08:29:41 2024 by rpki-client on console-fra.rpki-client.org