Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20058/Jp6SjxHRnKlIqpsGTYvWrVvCrzk.roa
File:                     Jp6SjxHRnKlIqpsGTYvWrVvCrzk.roa (raw, json)
Hash identifier:          LTwSXhNnF+GDyjg0rVT1BXPREBbtS4H3ES4yM7K28Bk=
Subject key identifier:   26:9E:92:8F:11:D1:9C:A9:48:AA:9B:06:4D:8B:D6:AD:5B:C2:AF:39
Certificate issuer:       /CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
Certificate serial:       08
Authority key identifier: E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/Jp6SjxHRnKlIqpsGTYvWrVvCrzk.roa
Signing time:             Mon 19 Feb 2024 01:09:16 +0000
ROA not before:           Mon 19 Feb 2024 01:09:16 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     24229
IP address blocks:        202.126.16.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 06 Mar 2024 05:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
        Validity
            Not Before: Feb 19 01:09:16 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=269E928F11D19CA948AA9B064D8BD6AD5BC2AF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8f:db:ce:04:4a:87:8d:34:da:52:85:09:34:
                    22:35:ee:70:6b:64:63:66:38:40:36:63:5f:0e:f8:
                    22:55:98:b6:af:e2:24:6c:ac:63:a6:19:13:9a:7c:
                    0e:8f:a4:57:5b:b0:c2:af:c4:6c:58:0d:a8:57:e2:
                    e9:b6:ae:e6:d1:c6:0f:30:47:e8:25:18:96:8c:34:
                    ff:de:45:63:b3:d7:46:a1:7e:21:12:eb:25:2c:11:
                    fa:b3:06:c7:45:8f:0d:26:0c:f0:46:a6:84:d5:8f:
                    f9:f4:8b:df:15:af:02:89:71:a5:1b:a0:af:4e:6c:
                    f9:82:13:a5:86:5e:c1:be:4d:d3:43:60:d5:7e:d8:
                    d4:f8:2a:e8:b7:d7:01:95:ee:4a:13:ea:26:82:3e:
                    76:38:f4:36:16:b8:39:e3:95:f4:80:54:6e:ba:1a:
                    ea:e2:f1:17:73:5e:5b:da:40:9b:87:35:2d:33:fa:
                    6e:ff:69:76:09:00:21:0f:e9:52:2d:94:cc:54:54:
                    49:59:be:1a:db:6f:5e:e1:cf:f6:7a:0e:ff:87:8c:
                    06:ae:c5:98:d2:de:fa:16:eb:cc:e1:a5:26:d6:c7:
                    0a:ae:1f:55:c3:33:1d:58:de:3e:4e:07:9b:3c:e1:
                    76:81:22:a0:e6:d8:47:42:11:3b:68:e1:19:98:06:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9E:92:8F:11:D1:9C:A9:48:AA:9B:06:4D:8B:D6:AD:5B:C2:AF:39
            X509v3 Authority Key Identifier:
                keyid:E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/Jp6SjxHRnKlIqpsGTYvWrVvCrzk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:02:26:a6:7c:41:0e:a4:e1:f3:aa:7c:41:17:be:8f:23:65:
         66:2a:5d:2b:dc:93:88:50:33:5a:5a:59:bb:fc:6f:f2:82:e0:
         29:71:14:26:ff:2a:d7:de:d4:3d:c9:98:67:2e:d9:46:78:0a:
         6f:66:7b:93:5f:17:ca:8f:a2:d1:62:23:be:84:0b:ae:96:ff:
         1a:e8:9b:ac:47:8a:f0:e1:22:b1:eb:43:f4:d8:02:7d:b6:1f:
         e9:b0:7b:07:e9:16:d4:87:58:fd:91:40:32:a2:bf:95:25:dc:
         c1:32:7f:55:75:de:16:cc:38:0c:2b:eb:3f:07:10:95:be:05:
         59:99:d2:4e:53:c8:48:70:b9:7c:3a:bf:f5:1f:e1:e6:8d:97:
         66:b3:20:ec:3f:38:97:b0:9f:b0:ac:dd:42:31:93:b6:b7:d6:
         2e:1a:a4:9d:89:4c:bc:cb:e9:1b:fb:e4:a1:27:ea:da:40:17:
         9c:cc:76:59:b0:91:75:97:22:07:16:7e:58:e0:24:1e:98:65:
         fc:07:fa:0a:8d:59:43:d0:cc:f5:a2:ca:49:fb:74:8d:71:66:
         ab:7e:84:42:d9:fc:63:95:dc:7a:c6:cc:1a:64:30:cc:fb:be:
         01:f0:6a:81:a1:da:84:bc:d7:d3:c9:59:3c:e5:e2:c9:fc:69:
         e6:d6:ee:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org