Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/YPHAKbXCz3el1rCcZeh2O-2pVGM.roa
File:                     YPHAKbXCz3el1rCcZeh2O-2pVGM.roa (raw, json)
Hash identifier:          u+xFFiCIDzQ9z3MZ02FcCWXzzuyE3Q9JGVEX631jbOQ=
Subject key identifier:   60:F1:C0:29:B5:C2:CF:77:A5:D6:B0:9C:65:E8:76:3B:ED:A9:54:63
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       2F
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/YPHAKbXCz3el1rCcZeh2O-2pVGM.roa
Signing time:             Thu 22 Jun 2023 00:33:59 +0000
ROA not before:           Thu 22 Jun 2023 00:33:59 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:33:59 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=60F1C029B5C2CF77A5D6B09C65E8763BEDA95463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:60:77:de:ce:b7:21:cb:46:19:d3:9a:e6:
                    1e:fd:4c:5d:c7:f0:62:a1:17:38:b7:cb:87:2f:f3:
                    3f:27:59:58:15:8a:d4:bf:f0:2f:20:f8:e1:5d:82:
                    94:6f:b3:8e:6e:a9:37:5b:ec:65:7b:2c:31:a3:b9:
                    58:2a:fb:45:d2:f6:1f:2f:8e:b4:cb:56:d0:ba:4d:
                    b3:93:0d:3d:f8:c4:14:a6:09:fe:38:67:f1:d2:a4:
                    4f:14:c2:12:be:c0:c5:d1:c6:bd:81:32:09:e4:a7:
                    3a:65:34:d0:bd:84:a2:1c:01:e1:52:a6:d4:2a:81:
                    07:92:fe:58:9f:ef:53:3e:ac:bd:7c:54:d5:68:a0:
                    18:68:d0:a7:3d:fb:a1:86:22:11:21:48:6f:d3:59:
                    f9:f3:ff:ce:46:6a:81:71:d4:56:da:96:32:b1:cf:
                    02:48:0b:b2:bc:7d:89:08:29:65:4d:f1:3d:be:60:
                    51:b1:f2:2a:d8:7d:85:1e:40:6b:a8:bd:f4:7b:a0:
                    82:09:ed:d1:de:29:44:7d:dd:00:9e:50:d4:77:0e:
                    1c:99:ff:c8:40:a0:36:c6:a5:ef:3e:d5:37:f1:55:
                    d1:2f:a7:2d:ba:fc:36:41:57:b4:46:8c:f6:1e:1c:
                    2e:38:48:10:07:61:96:50:08:40:6b:4f:38:69:20:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F1:C0:29:B5:C2:CF:77:A5:D6:B0:9C:65:E8:76:3B:ED:A9:54:63
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/YPHAKbXCz3el1rCcZeh2O-2pVGM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:b7:66:63:f8:23:2e:a0:76:82:5e:76:06:53:a6:41:96:f0:
         1a:5b:18:ff:a5:c6:0f:5d:f5:d4:9d:ec:ac:88:65:ee:32:36:
         e5:ef:31:ff:a5:e0:99:61:05:f0:85:76:57:5f:da:e7:6c:0e:
         7f:4f:76:e9:47:33:bf:1b:10:43:7a:b7:d2:4a:be:1a:18:ea:
         9b:2c:1e:28:41:59:48:5b:fd:5a:41:e5:6d:0b:a5:d4:cb:d7:
         a1:b9:0a:c7:2e:ae:81:b4:ac:fd:33:99:51:b6:a0:ec:ff:07:
         ba:a9:0b:95:87:17:78:2e:d6:02:ae:c0:3f:7a:d1:97:f4:22:
         7d:66:a8:f9:ef:62:41:62:e3:20:0f:0e:31:7c:4e:a8:ef:58:
         50:44:a5:d8:18:da:38:bb:6a:60:9f:2a:00:6d:53:c1:95:ea:
         1b:3c:70:0c:00:09:3b:66:1e:b4:19:d1:21:e3:4c:3b:21:84:
         6a:c9:c8:4c:cc:d8:71:42:be:33:94:2a:f5:d4:1d:96:46:f2:
         db:14:77:d8:c0:78:e9:c4:f2:a6:68:c2:34:93:b4:a1:01:4e:
         47:5e:7a:62:3e:82:b6:0c:73:c1:26:18:21:a2:38:ac:34:ca:
         43:03:d5:47:e5:32:51:c9:ca:fc:99:a9:9c:cd:fc:ec:91:95:
         ac:1d:d9:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org