Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8xA5YSRXug2e_l5zQF7xI-OI8tg.roa
File:                     8xA5YSRXug2e_l5zQF7xI-OI8tg.roa (raw, json)
Hash identifier:          5mUKdC/3eBCaIGgs0ME/NKYiKu6Hsj3o6b2yu0vNosQ=
Subject key identifier:   F3:10:39:61:24:57:BA:0D:9E:FE:5E:73:40:5E:F1:23:E3:88:F2:D8
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       56
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8xA5YSRXug2e_l5zQF7xI-OI8tg.roa
Signing time:             Sun 31 Mar 2024 01:30:38 +0000
ROA not before:           Sun 31 Mar 2024 01:30:38 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4694
IP address blocks:        211.133.128.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 07:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 01:30:38 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=F31039612457BA0D9EFE5E73405EF123E388F2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:3f:dd:54:3a:74:5f:ab:1a:42:f4:78:7c:
                    af:16:0c:87:8a:10:51:c2:03:24:50:4c:3b:19:1b:
                    65:14:6a:bf:ad:81:46:11:10:30:c8:93:99:8d:0f:
                    44:7d:66:10:7d:be:e5:d3:e3:60:82:2c:cb:4c:cd:
                    6a:46:23:90:28:ad:e1:a6:ae:0e:e2:8b:2b:b1:1e:
                    d6:94:a5:90:cb:5b:80:fc:e1:b1:bb:2f:18:cf:ce:
                    46:65:76:38:c1:93:5b:ab:fa:c9:9c:b7:b2:b4:f7:
                    28:9a:3d:0b:5c:fc:cf:53:94:d7:f6:1a:06:0b:bd:
                    9d:8d:8f:a5:09:3b:98:0d:fe:1e:98:07:9b:e1:54:
                    9f:fa:12:19:92:06:bd:2b:4c:b3:b1:97:01:15:22:
                    de:19:9e:23:d0:05:b1:18:94:df:06:20:7d:14:9d:
                    da:e1:e8:40:84:9b:56:2b:52:97:c4:a7:bb:38:88:
                    0e:94:d8:ed:12:7e:2d:8d:db:77:44:83:4a:7c:17:
                    5a:41:9b:bb:f9:5c:80:bc:88:d5:38:d6:71:08:06:
                    3c:9d:8c:c1:68:80:b8:5e:b4:c8:c0:63:75:eb:24:
                    78:7d:d1:00:4b:c9:d2:84:11:e5:f1:dc:90:af:a0:
                    d2:2a:fd:c1:b5:9e:d5:f2:82:68:ff:10:c3:a5:b3:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:10:39:61:24:57:BA:0D:9E:FE:5E:73:40:5E:F1:23:E3:88:F2:D8
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8xA5YSRXug2e_l5zQF7xI-OI8tg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.133.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:ed:8a:b9:8c:0f:a4:7d:6f:a5:b0:1e:16:d1:8a:0d:4f:17:
         82:48:74:2c:28:c9:75:9b:93:1b:c9:dc:be:ec:94:be:05:91:
         3d:49:46:8d:3a:40:6e:e2:2d:ae:6a:6e:e3:2d:fb:85:ab:4b:
         e9:a8:b2:f2:b0:c9:07:a0:93:cb:bc:77:9d:6a:51:de:6a:23:
         2e:71:f0:0b:85:b1:80:12:23:91:c8:b5:5c:d3:4c:02:e2:b7:
         e2:c2:ef:33:e2:be:72:5e:61:40:83:13:25:9b:86:f2:f1:90:
         f7:6f:12:f6:d4:db:67:75:97:78:16:38:e0:9f:6d:ba:98:07:
         ef:13:65:a3:51:d6:40:32:dc:78:5f:e9:c9:c1:2f:76:e1:ba:
         59:13:5f:a3:b9:2f:56:15:63:84:20:a0:bc:a4:a5:a9:20:7c:
         b7:07:6a:ea:d1:27:c1:2a:80:92:e0:0c:59:d3:5a:84:d3:8b:
         b2:a9:18:37:ce:08:94:4c:73:a0:3b:81:73:dc:ec:b3:6c:2b:
         a1:66:69:2d:8e:25:fe:bf:8d:b5:50:62:c0:40:50:84:ec:ed:
         44:5d:97:fb:92:8a:02:17:31:0a:40:f5:93:d0:fc:8e:12:fa:
         4b:91:fb:7e:e8:fc:b4:f2:15:2b:24:9c:69:d2:90:71:80:76:
         e1:bd:dc:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 28 09:40:50 2024 by rpki-client on console-ams.rpki-client.org