Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/q5du0z2KKesxI3LB4Out6d_wkKY.roa
File:                     q5du0z2KKesxI3LB4Out6d_wkKY.roa (raw, json)
Hash identifier:          NoBzqNiMbt2doqSk0JWfqUSRyHPpB19mrLvzg3HxHsE=
Subject key identifier:   AB:97:6E:D3:3D:8A:29:EB:31:23:72:C1:E0:EB:AD:E9:DF:F0:90:A6
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       61
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/q5du0z2KKesxI3LB4Out6d_wkKY.roa
Signing time:             Thu 22 Jun 2023 00:35:05 +0000
ROA not before:           Thu 22 Jun 2023 00:35:05 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        122.128.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:35:05 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=AB976ED33D8A29EB312372C1E0EBADE9DFF090A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:28:b9:b7:7f:4c:9e:40:ec:30:ef:73:54:
                    91:f2:c2:bf:36:3e:6f:83:8e:f9:7e:ff:4b:f9:2b:
                    0d:b8:24:e0:c5:e3:4c:30:9e:36:cd:85:91:0e:c6:
                    42:61:98:c6:8e:12:e6:dd:ca:88:dc:32:b4:20:fe:
                    23:85:56:62:c7:92:de:7f:5f:fb:af:a4:ef:11:db:
                    10:f4:53:92:c0:be:88:02:ef:ef:ff:d2:81:89:b8:
                    97:5a:90:3b:e6:c7:5c:7a:bc:75:45:6b:5a:f9:2e:
                    ff:ca:e6:29:c0:7f:68:3e:e5:d2:b5:1e:fd:f7:b2:
                    8d:77:48:32:7f:86:6a:b1:c4:2f:0f:10:5f:bc:0f:
                    4d:6d:4d:e5:0d:f3:e1:5d:c0:27:1a:98:8e:40:0e:
                    56:5a:94:ac:51:e9:ef:39:9d:06:bf:e1:4e:35:05:
                    d7:13:af:dd:23:e7:84:3c:72:78:7b:71:f0:66:b2:
                    be:45:0b:47:58:66:d6:85:21:d9:7a:f9:01:18:ca:
                    84:32:c2:31:59:1b:6d:7b:6e:02:0e:d4:f9:03:d4:
                    dc:73:5e:3e:83:0d:8d:c8:c3:93:37:fe:e2:f8:ee:
                    55:22:9b:57:29:37:db:c5:d3:3c:c9:7c:03:d3:c5:
                    e9:04:cb:32:8d:c9:21:5f:c7:1b:cc:4a:90:48:e2:
                    a6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:97:6E:D3:3D:8A:29:EB:31:23:72:C1:E0:EB:AD:E9:DF:F0:90:A6
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/q5du0z2KKesxI3LB4Out6d_wkKY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:21:9f:d6:2a:e1:82:b5:1b:db:d6:fa:31:4a:64:1e:57:b4:
         a1:05:76:e8:5a:42:ea:df:ea:7e:69:40:46:de:d6:6a:c3:26:
         db:e6:d5:b8:20:52:90:97:32:14:b6:d5:de:75:83:53:11:e4:
         85:39:fc:c3:8c:5e:45:e1:18:37:a2:a0:01:61:a0:39:65:32:
         e8:f7:22:9b:9b:a5:6e:5e:4a:45:2a:7c:7f:19:77:97:2c:a6:
         6f:e5:a1:8e:5a:28:aa:c6:32:54:09:b3:8f:db:0c:a7:32:3b:
         7b:e3:01:77:20:58:f0:45:43:52:8f:36:5e:cc:28:2b:a4:b5:
         cd:34:e4:71:19:f3:37:39:05:b0:58:5c:e5:fd:fa:6f:bc:9d:
         3f:33:c1:5b:0b:50:5b:b5:c2:b6:2a:9e:d7:09:fd:7b:37:fd:
         f3:e2:72:e7:4c:24:b5:4d:de:31:74:e0:a6:e2:ce:29:c3:ae:
         b6:ed:03:2a:92:6c:db:24:0d:d8:bc:51:65:64:d2:cb:4a:6e:
         65:88:39:f5:ea:6e:c6:e2:67:ad:f2:51:b1:8c:5b:bb:88:80:
         aa:8c:76:50:09:ab:93:c8:60:8f:d3:21:c0:7d:dc:fb:b4:18:
         6a:ae:fb:3a:fd:64:b2:69:7a:8b:df:91:4e:cf:34:b9:3f:5f:
         a9:0c:f1:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org