Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/lC1Q_yoSMRPqWCtA2NpSm5aO3ek.roa
File:                     lC1Q_yoSMRPqWCtA2NpSm5aO3ek.roa (raw, json)
Hash identifier:          HqZQZMWkkHJZUbrpZ9AUqZG1OJjkLlMwACjW1L96ikc=
Subject key identifier:   94:2D:50:FF:2A:12:31:13:EA:58:2B:40:D8:DA:52:9B:96:8E:DD:E9
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       55
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/lC1Q_yoSMRPqWCtA2NpSm5aO3ek.roa
Signing time:             Thu 22 Jun 2023 00:35:00 +0000
ROA not before:           Thu 22 Jun 2023 00:35:00 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:35:00 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=942D50FF2A123113EA582B40D8DA529B968EDDE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:eb:ed:69:9d:43:83:45:26:7e:46:80:02:
                    93:df:e5:3e:8c:1e:b5:63:83:ea:a0:0b:ee:1e:b3:
                    f5:51:cc:f5:24:33:a1:b0:57:13:96:9a:6e:1b:50:
                    e0:1b:02:ce:e6:db:f5:ce:db:9a:6e:26:63:51:3b:
                    4a:6f:4c:4a:9a:8d:d4:c8:b8:80:b7:e8:da:63:cc:
                    0e:77:89:cb:0a:f9:59:d0:27:18:09:fc:c4:ec:dd:
                    5d:d0:ee:19:ff:c2:70:9e:34:c5:91:bf:33:d0:a3:
                    2b:34:2b:0b:e1:8e:9f:5a:e8:dd:44:28:5b:bf:34:
                    c8:c0:81:f2:fd:cf:82:54:e9:b9:4c:c1:6a:39:10:
                    f4:01:f3:d0:9f:7c:72:c2:7a:0b:01:f0:a9:99:b9:
                    09:19:9c:e6:82:59:0f:3c:77:13:e0:35:be:b8:33:
                    50:9b:f9:37:c5:1d:20:a4:de:bf:d6:eb:99:b8:c1:
                    d1:8b:3b:78:e4:c1:0e:19:51:6e:32:df:c0:6b:3b:
                    6d:39:98:b1:90:40:84:ff:ba:45:1c:ed:a2:b9:89:
                    d6:d9:5e:72:21:a8:d7:9f:1a:7a:c3:4f:7d:75:f9:
                    c3:b8:b5:c7:34:09:54:a5:a1:d4:92:3b:b6:02:45:
                    70:77:b5:51:20:58:9e:7a:ba:8d:f3:0e:71:6a:f6:
                    46:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2D:50:FF:2A:12:31:13:EA:58:2B:40:D8:DA:52:9B:96:8E:DD:E9
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/lC1Q_yoSMRPqWCtA2NpSm5aO3ek.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:25:c3:34:05:0e:ab:bf:58:df:24:f1:d6:c3:4c:62:c3:9e:
         68:cc:c8:aa:8a:27:2d:7b:5c:d4:33:be:2d:37:60:9d:65:c4:
         48:e8:f4:bb:d7:d4:20:a7:e3:f5:28:f6:d9:d0:d4:43:fd:19:
         c5:c7:a4:31:1e:8e:37:61:6d:66:71:98:61:c7:99:f1:84:92:
         ad:ae:f7:01:5d:2d:53:63:96:e4:9e:60:47:7c:64:7d:77:7e:
         70:da:a5:b0:ad:de:97:d4:4c:ce:91:de:1d:fb:cb:31:a8:d7:
         70:c2:67:5d:55:50:56:9f:42:93:6a:3a:93:a2:77:0b:3c:c1:
         98:c8:17:53:c8:3b:3c:7d:92:e3:87:46:44:df:a3:17:d4:17:
         a1:ec:49:cf:22:0a:80:5a:c8:f0:d5:be:13:ff:cd:3d:13:c1:
         8b:58:24:a6:08:3c:1b:ae:27:a0:46:48:56:8b:57:0b:d2:7f:
         0b:06:5b:58:d3:ec:97:1a:e9:a6:c8:65:4d:ab:a8:fa:08:a3:
         8f:38:f5:6c:73:e6:98:c2:04:07:0a:e4:36:b4:94:50:8a:78:
         99:d6:87:61:47:65:d5:2b:72:74:94:e2:05:27:69:f0:18:c7:
         38:5b:a2:9e:37:a9:ef:2a:3a:4c:cf:c9:83:11:f8:7e:37:c9:
         dd:27:e2:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org