Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/M8AequKBS__VTAa2Q3zCKNC98wo.roa
File:                     M8AequKBS__VTAa2Q3zCKNC98wo.roa (raw, json)
Hash identifier:          0JLUwqNBZHkDKmima+mWcSuMJkZ4CuEM6d2r4Af+7zo=
Subject key identifier:   33:C0:1E:AA:E2:81:4B:FF:D5:4C:06:B6:43:7C:C2:28:D0:BD:F3:0A
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       58
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/M8AequKBS__VTAa2Q3zCKNC98wo.roa
Signing time:             Thu 22 Jun 2023 00:35:00 +0000
ROA not before:           Thu 22 Jun 2023 00:35:00 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:35:00 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=33C01EAAE2814BFFD54C06B6437CC228D0BDF30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:71:72:2b:94:53:bd:98:ff:63:b3:58:50:
                    78:5b:65:0d:fb:42:5c:b9:58:3a:03:5b:ae:0a:e1:
                    7d:38:bf:85:5b:e5:cd:de:7c:49:d1:f9:87:8e:b0:
                    7a:28:d6:a2:65:87:67:8f:21:45:98:e6:8d:02:fb:
                    31:d0:15:ee:4e:21:68:87:6c:9b:70:4f:84:88:b4:
                    86:1b:91:0f:d0:bd:b0:7f:37:6e:59:f7:ef:2d:0f:
                    0b:3a:ef:4c:70:1d:72:70:39:af:71:d9:44:20:3e:
                    1c:22:29:90:40:94:a4:0f:ec:af:2a:b2:15:f0:ff:
                    c7:42:ba:a8:4f:9f:57:9b:9a:93:b2:ae:c7:c0:bc:
                    cf:5a:81:1d:31:ce:06:87:ca:12:30:fb:c4:95:e0:
                    17:09:3f:3c:29:00:75:a1:c3:15:99:b5:06:05:b6:
                    de:a7:25:59:f1:c2:64:36:30:d1:ca:06:13:33:e8:
                    62:24:bb:56:29:7c:4e:e7:47:74:82:92:f3:94:b0:
                    c0:c1:f8:9f:94:8b:cc:c0:60:49:de:1f:40:54:ad:
                    90:b6:72:fd:20:92:29:08:1c:d7:05:73:49:c1:ba:
                    80:0d:c0:25:79:dd:fb:40:09:97:0c:ec:d8:a4:55:
                    5f:3e:96:d4:4e:ab:f2:5f:e7:f2:48:3e:0a:fa:a4:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C0:1E:AA:E2:81:4B:FF:D5:4C:06:B6:43:7C:C2:28:D0:BD:F3:0A
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/M8AequKBS__VTAa2Q3zCKNC98wo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:63:8e:b3:d7:39:b4:c6:90:e2:7c:87:84:83:e6:d1:e5:19:
         71:70:58:0f:be:8b:36:56:d9:a7:63:2a:76:04:4b:0d:0f:35:
         80:77:19:dd:59:cc:ae:a0:d2:10:26:b9:9d:a4:f5:ab:73:46:
         fb:02:92:21:f9:8b:5e:f4:27:ad:3b:0c:05:56:d4:39:e5:fd:
         da:0d:5c:72:d0:5f:f4:03:d0:45:66:22:34:51:3e:e2:96:a3:
         b4:a4:49:ce:e2:8a:29:39:b5:e1:50:81:0c:de:43:35:14:15:
         b9:e5:44:6b:3f:f3:36:05:f3:2f:fa:85:ec:85:b5:9b:e1:80:
         51:0c:ae:93:ac:d4:37:2a:b6:e6:8f:95:7b:0f:78:72:cd:5e:
         48:a7:dd:94:85:1a:b0:19:ba:b7:ee:18:ac:c2:e4:59:42:cf:
         95:0e:7f:67:ef:62:77:55:84:ba:ad:86:b8:ec:f3:56:14:45:
         cd:ba:c2:c0:76:f5:a8:60:c1:d9:10:1f:4d:df:cf:31:f6:20:
         29:e3:89:51:62:e2:82:0d:89:36:42:f6:58:1e:10:17:7b:3b:
         07:95:ed:95:b4:a0:96:76:65:b0:41:e4:6a:29:c3:13:8c:42:
         17:ae:af:cb:e9:d2:38:ba:74:cf:cc:9e:6f:2f:70:b0:3e:0e:
         36:90:10:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org