Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/VV7wujcoetNl8E4jKBXvmx3rZGA.roa
File:                     VV7wujcoetNl8E4jKBXvmx3rZGA.roa (raw, json)
Hash identifier:          DW5/gbWMZzbhAIVY6ck1otcxauxk/E0xMmJRwqVOjgE=
Subject key identifier:   55:5E:F0:BA:37:28:7A:D3:65:F0:4E:23:28:15:EF:9B:1D:EB:64:60
Certificate issuer:       /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial:       18
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/VV7wujcoetNl8E4jKBXvmx3rZGA.roa
Signing time:             Sat 01 Apr 2023 01:28:11 +0000
ROA not before:           Sat 01 Apr 2023 01:28:11 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     131929
IP address blocks:        219.100.248.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
        Validity
            Not Before: Apr  1 01:28:11 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=555EF0BA37287AD365F04E232815EF9B1DEB6460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:1c:ef:0b:ee:e4:5d:7c:33:9a:69:f5:42:
                    d6:ea:9f:53:e3:d6:f3:c6:53:45:3b:a2:29:2d:c5:
                    b7:38:89:1d:51:c3:b4:08:9f:4a:f4:5d:0b:28:9c:
                    89:86:f8:d5:6f:1c:cb:1b:f4:70:52:6a:01:a1:9c:
                    14:c2:d7:f3:e2:48:b0:b7:19:96:18:26:28:e6:7b:
                    d4:b4:8f:40:bf:39:b6:95:c4:a4:de:5d:a8:5c:e8:
                    7b:0c:1e:70:27:34:62:6f:07:4d:f8:14:0a:5e:fa:
                    41:6e:46:83:c5:e7:70:7a:29:8b:10:e2:06:2f:ba:
                    fb:83:10:7f:b6:a7:96:06:7a:16:70:45:1f:1f:6e:
                    42:94:39:be:8d:0d:35:eb:a9:bc:7a:b0:d1:8f:a3:
                    a1:4a:5c:c7:c7:22:e7:32:d9:24:e3:8c:e3:19:8e:
                    22:97:2b:30:39:aa:5f:dd:f6:1e:f5:78:ec:a5:87:
                    95:4a:d3:32:94:71:b4:31:59:69:a3:d0:96:cb:35:
                    57:50:b5:66:50:74:88:7e:e4:1f:64:6e:e4:aa:05:
                    8d:3a:f9:17:6e:5e:d9:81:81:32:cd:df:01:a2:51:
                    34:35:02:0e:5e:82:50:25:e4:f9:91:bb:71:8a:f2:
                    72:e0:44:56:50:1b:cd:da:b5:79:9f:f4:bf:8b:5a:
                    d8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5E:F0:BA:37:28:7A:D3:65:F0:4E:23:28:15:EF:9B:1D:EB:64:60
            X509v3 Authority Key Identifier:
                keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/VV7wujcoetNl8E4jKBXvmx3rZGA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:90:6b:9a:c0:17:cf:84:a4:f6:b7:38:07:31:31:4c:ac:d7:
         fe:fb:d3:cb:7d:a8:f9:72:67:84:06:2b:31:2e:ab:c3:b7:c1:
         fd:ff:26:ee:87:ac:9c:50:87:ff:0c:e1:ca:e4:8b:3b:d2:7d:
         a8:0e:39:aa:12:a0:95:94:cc:08:7c:be:d0:63:8c:48:4e:02:
         36:f8:95:a0:fc:49:de:f5:2c:c3:fc:1f:2c:08:35:e6:58:92:
         cc:50:b7:26:1e:fc:c9:83:f2:a1:86:b7:29:f1:09:f9:3e:79:
         b6:2d:5f:83:a7:90:40:49:f7:fb:53:d2:58:39:08:0e:28:4d:
         91:51:73:7c:a2:e4:2b:db:93:27:4b:1d:1b:12:c8:59:53:7b:
         3a:a7:d6:6d:b1:44:9d:58:6f:1a:c1:84:bd:2c:ac:ce:be:36:
         84:bb:f9:35:c6:21:60:b5:ba:a9:04:0e:b6:95:3d:06:07:f7:
         77:51:15:a0:dd:f8:db:b7:ce:59:e1:44:20:e4:04:e9:23:5b:
         63:1b:b1:f2:4b:12:7d:a7:aa:25:6c:30:45:33:a2:8d:d4:3f:
         5c:ba:47:f6:d1:92:51:61:1e:8e:49:ff:3a:3c:f4:0a:60:d2:
         c1:c6:9a:93:ba:d0:f2:7f:14:21:d5:b3:25:17:2b:70:9f:0a:
         31:e4:b0:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org