Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/rginyRaNXzY4zb4WxZUPKo4W0Ig.roa
File:                     rginyRaNXzY4zb4WxZUPKo4W0Ig.roa (raw, json)
Hash identifier:          MxtYvH+fL3mHAcBtayY2+mkz+nf/W5EoQaQ2o5YXJxY=
Subject key identifier:   AE:08:A7:C9:16:8D:5F:36:38:CD:BE:16:C5:95:0F:2A:8E:16:D0:88
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       6E
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/rginyRaNXzY4zb4WxZUPKo4W0Ig.roa
Signing time:             Thu 22 Jun 2023 00:36:57 +0000
ROA not before:           Thu 22 Jun 2023 00:36:57 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        203.160.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:36:57 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=AE08A7C9168D5F3638CDBE16C5950F2A8E16D088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:82:f5:b0:c2:de:d6:aa:0f:29:8b:c1:6f:12:
                    25:c8:63:40:45:ee:90:eb:68:ae:02:f0:3a:39:5c:
                    99:a8:dc:5f:0a:b8:8b:93:d1:6e:e9:ed:13:d3:73:
                    9f:64:a0:ba:82:0c:d4:a8:96:19:71:ff:7b:3d:ca:
                    2b:81:e8:46:cc:7a:32:7b:55:d3:66:ed:59:b4:a7:
                    f1:77:33:81:e4:2c:be:c0:6a:8e:ba:73:0e:aa:db:
                    05:cc:9f:3d:f6:ed:0a:29:1a:e9:98:25:8c:44:32:
                    94:13:e7:c9:dc:74:cc:04:0f:75:c5:b1:f9:bf:31:
                    40:fe:2b:94:32:1f:4f:7b:a4:ed:9e:09:3c:b0:8f:
                    31:ad:57:eb:91:7e:39:43:bc:fe:a5:b1:93:e3:3b:
                    84:f4:60:86:4e:ba:b4:d0:fe:c0:d1:45:0d:3a:fe:
                    8f:40:9e:0d:4f:d9:fe:6e:f8:43:ae:b8:26:3a:0d:
                    e6:a4:ec:84:6a:4a:31:ad:84:f9:41:2d:2f:a2:a9:
                    9d:3a:dc:05:d9:67:b7:81:93:d8:c3:86:45:20:d4:
                    ed:1e:18:c7:5e:ff:8c:94:8a:6f:85:6e:32:68:af:
                    f2:90:5c:13:39:11:d6:0f:30:f1:69:0f:84:55:64:
                    e9:8c:37:92:12:06:5a:c8:53:6c:7f:1c:2c:ab:79:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:08:A7:C9:16:8D:5F:36:38:CD:BE:16:C5:95:0F:2A:8E:16:D0:88
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/rginyRaNXzY4zb4WxZUPKo4W0Ig.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.160.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a8:6f:cb:1f:3c:71:7e:e0:ce:98:72:62:26:fe:e8:ac:0e:
         89:b0:8c:97:6b:d4:68:24:91:9f:02:8a:64:26:0c:98:09:fb:
         b7:33:ba:08:a0:4c:bb:f6:6c:77:2b:0f:37:b7:ce:ed:02:4b:
         2b:4a:43:ac:25:1e:14:67:b9:ab:b9:e8:76:48:a1:65:34:3e:
         22:fd:0f:49:d8:a3:d4:83:10:ca:de:62:68:51:9d:f3:58:e5:
         71:e1:86:34:80:03:fb:84:75:43:e3:a1:03:7f:65:19:ba:9d:
         99:f1:2e:5c:bf:77:01:12:b5:14:bd:8b:da:c5:f8:39:46:c6:
         68:f0:e2:39:73:ac:e3:00:48:5a:89:17:81:de:8c:03:ff:78:
         7b:08:6d:0a:54:43:d1:a4:a4:f0:34:71:d1:bc:4a:9c:1e:9d:
         73:43:af:49:a7:b5:9c:7c:26:4d:fc:f2:45:30:c3:5c:a0:c2:
         23:56:20:a7:7f:32:6c:e2:a2:ae:7a:0c:40:60:c9:7a:40:8f:
         30:b0:60:ae:d5:46:af:5a:fb:87:99:fc:8c:a0:aa:78:ba:5c:
         01:fe:a6:24:a3:c8:2b:ee:5e:5c:f4:d0:7f:ea:e6:b9:cf:29:
         da:9b:ef:b5:56:f0:78:36:f6:c1:86:a3:66:d9:93:a9:b5:c9:
         cf:b9:10:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org