Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/vK03_2Eigy5lDPjlZZVPwzwCKaE.roa
File:                     vK03_2Eigy5lDPjlZZVPwzwCKaE.roa (raw, json)
Hash identifier:          93tgFvifJAFTWyVBOFdb37d9UaK3F86MD533jk4wDe8=
Subject key identifier:   BC:AD:37:FF:61:22:83:2E:65:0C:F8:E5:65:95:4F:C3:3C:02:29:A1
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       69
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/vK03_2Eigy5lDPjlZZVPwzwCKaE.roa
Signing time:             Thu 22 Jun 2023 00:36:55 +0000
ROA not before:           Thu 22 Jun 2023 00:36:55 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:36:55 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=BCAD37FF6122832E650CF8E565954FC33C0229A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:8d:53:36:4a:c2:38:4e:07:64:45:15:ed:
                    4f:05:43:03:d4:eb:e9:9e:4a:88:77:5c:c4:24:0b:
                    40:0a:82:99:e9:ee:49:49:9b:fb:2b:71:c8:4f:db:
                    9c:9d:47:fd:2e:92:e3:65:a1:b0:c9:b3:6b:2f:2d:
                    78:b7:9c:6d:04:47:69:ab:41:c4:e4:d5:0e:87:68:
                    03:ef:89:b7:78:72:06:f7:66:29:7b:1e:e5:48:66:
                    18:35:85:57:19:3b:f6:13:b6:50:92:c4:52:7a:60:
                    a8:cb:3d:85:ae:49:78:d5:89:88:38:86:f7:e2:76:
                    00:7d:c6:ef:02:8d:18:c9:ed:9d:ba:47:d0:f7:76:
                    8e:a0:d2:7c:02:3b:96:55:3a:23:4e:b0:1e:16:4c:
                    0f:b7:be:4e:21:98:59:5c:d3:1b:a2:6d:a3:ea:e1:
                    88:26:28:78:26:89:73:43:f8:ff:9b:f6:fc:48:54:
                    ff:78:12:6a:25:d7:df:42:6d:fc:67:ee:4c:e3:34:
                    5d:f9:45:58:31:23:76:37:35:f1:41:d3:6d:82:a1:
                    c7:a3:27:d5:4f:9c:49:b6:d8:b2:1f:9f:39:5c:3e:
                    c1:3c:ce:63:93:8b:5f:1e:b1:e4:cd:69:2e:31:82:
                    71:f7:24:0a:f8:44:f5:bf:2e:3f:fc:a0:d6:f9:c3:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AD:37:FF:61:22:83:2E:65:0C:F8:E5:65:95:4F:C3:3C:02:29:A1
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/vK03_2Eigy5lDPjlZZVPwzwCKaE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:29:39:43:bc:5a:fb:99:17:9f:05:ce:47:2c:d9:de:30:62:
         a3:17:11:4e:a0:f0:2e:b1:c6:92:50:c4:1a:28:ce:e7:ca:1b:
         fe:d5:17:47:f2:cd:d3:37:bc:e9:b5:ce:8e:21:56:0c:b5:43:
         e6:f2:84:a7:92:1d:3d:32:e9:5d:e1:8e:9a:44:d8:ea:6d:24:
         7f:e2:be:b5:10:49:ee:4b:cd:ae:38:92:1a:2c:cf:93:91:4b:
         19:32:31:60:92:31:51:3a:16:e4:42:e2:78:79:47:66:cf:f4:
         79:46:f9:dc:87:a3:5a:07:72:53:71:ee:bf:0e:87:6a:9e:98:
         e7:09:6f:ee:4b:d4:70:2d:27:41:86:e0:8f:9c:ff:56:4d:fa:
         87:5e:f0:bd:b4:87:61:c8:22:c7:5b:ec:55:8e:ec:30:03:af:
         45:cc:58:65:57:3c:54:54:85:95:6e:cc:d6:b1:ae:57:f5:2b:
         65:cc:33:fa:5d:c5:e2:81:00:83:11:47:20:8a:12:76:f7:e6:
         37:96:bb:52:df:1b:20:b7:e7:cc:ce:da:c3:f2:57:b9:99:ff:
         15:39:ed:67:57:c7:2d:ac:9b:3c:32:e0:36:46:69:c4:0a:d0:
         79:b9:2c:48:ac:08:2f:a7:5f:90:1c:4e:f5:1c:05:71:57:7b:
         e2:05:7f:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org