Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Wi6AmlqPkBhoGwHvsrXnt8g7Z28.roa
File:                     Wi6AmlqPkBhoGwHvsrXnt8g7Z28.roa (raw, json)
Hash identifier:          aduYkWgbQRtnMDKto3rPU2SZQUhq8GuQoxCtXBl94FY=
Subject key identifier:   5A:2E:80:9A:5A:8F:90:18:68:1B:01:EF:B2:B5:E7:B7:C8:3B:67:6F
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       49
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Wi6AmlqPkBhoGwHvsrXnt8g7Z28.roa
Signing time:             Thu 22 Jun 2023 00:34:56 +0000
ROA not before:           Thu 22 Jun 2023 00:34:56 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:56 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5A2E809A5A8F9018681B01EFB2B5E7B7C83B676F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:57:49:11:97:cc:1a:14:e4:4f:07:f9:6d:
                    24:4e:2b:58:d3:5b:66:04:0b:b3:dd:17:5b:5c:d8:
                    0c:69:56:00:fe:d5:39:a9:cb:82:e8:8d:01:a8:2b:
                    c4:2f:d2:ab:89:22:73:fa:ad:5d:f9:f7:6d:6b:0a:
                    11:93:d9:4f:0b:4b:1d:30:04:d1:6d:7b:0f:28:71:
                    09:b6:b4:82:e4:d3:40:03:89:3d:48:51:26:09:13:
                    97:d8:9c:c8:97:51:b7:49:ee:ed:67:87:86:9c:b2:
                    2e:2c:0a:36:fd:e8:6b:ab:cb:fa:96:4d:63:1b:c6:
                    9c:f8:2b:22:af:f3:1e:ae:d5:4d:cb:ed:7d:b0:5f:
                    8e:dc:95:8d:fa:9a:06:0d:33:d5:46:62:84:aa:96:
                    60:7a:e7:25:5c:1c:1d:70:66:cf:b2:fd:e3:d8:c7:
                    bd:24:af:28:8d:83:a1:8a:f9:60:b1:73:24:c7:0b:
                    fb:6d:e2:31:6d:65:4d:44:38:06:54:3d:27:03:97:
                    79:d9:b8:a1:84:84:b5:90:cb:a0:ab:ab:e3:f8:45:
                    7b:b8:f8:4f:ea:79:8f:90:6f:32:e9:e2:3d:33:3d:
                    f7:75:c5:66:68:24:68:2f:1a:99:aa:83:fb:29:8a:
                    59:14:35:db:25:07:78:55:40:4c:1e:75:61:b6:af:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2E:80:9A:5A:8F:90:18:68:1B:01:EF:B2:B5:E7:B7:C8:3B:67:6F
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Wi6AmlqPkBhoGwHvsrXnt8g7Z28.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:54:46:2a:43:33:cd:d5:5a:d0:dd:53:c8:0e:ee:65:28:
         82:72:d2:11:3b:03:c2:8e:63:b6:d0:b6:6b:43:7a:df:4c:3c:
         a1:98:ca:66:a8:bd:87:f8:26:0b:56:31:95:38:28:05:3d:a5:
         1d:16:97:5d:63:dc:0b:01:02:8b:cf:3f:7f:d3:6a:d7:35:99:
         5a:e2:87:ae:8c:1b:48:c6:d3:0f:d0:b8:09:84:61:be:51:2d:
         e7:b5:0f:db:ec:9e:7b:cd:c3:f7:82:64:0e:50:6e:b6:df:4b:
         b7:74:a0:c5:f9:3f:49:d6:59:85:f3:f9:2e:95:0b:53:f3:6d:
         bf:f7:a0:60:ba:95:ca:83:f8:f7:91:f1:a5:14:99:86:84:b7:
         1d:32:86:45:ef:f3:6a:1f:53:45:f8:26:af:47:51:07:90:c0:
         b0:30:28:dd:22:ea:b9:0c:53:19:e2:1b:84:9e:03:b0:32:ac:
         f0:72:59:93:b0:b3:bf:12:dd:73:da:e4:42:70:a4:c2:0a:39:
         ab:43:a0:86:88:84:c1:ac:3b:cb:74:9d:9b:56:a1:f3:8d:4c:
         c9:83:99:6c:d3:ed:47:52:3e:82:c4:48:30:13:8e:6c:5a:c9:
         46:60:eb:fb:ab:d7:fc:86:35:7d:5b:4a:f9:c7:0b:77:c0:e0:
         be:8e:5e:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org