Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/NwDHr04HdeRGQWW2aQlPtFySHi4.roa
File:                     NwDHr04HdeRGQWW2aQlPtFySHi4.roa (raw, json)
Hash identifier:          UKb6hdQRkxdOLg4zsRZndSK4r18UH/T5n3Dt56qclz0=
Subject key identifier:   37:00:C7:AF:4E:07:75:E4:46:41:65:B6:69:09:4F:B4:5C:92:1E:2E
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       2E
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/NwDHr04HdeRGQWW2aQlPtFySHi4.roa
Signing time:             Mon 01 May 2023 01:29:40 +0000
ROA not before:           Mon 01 May 2023 01:29:40 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2554
IP address blocks:        61.195.160.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: May  1 01:29:40 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=3700C7AF4E0775E4464165B669094FB45C921E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:1c:cf:37:dd:e4:14:9a:68:30:08:3d:06:
                    ac:92:e1:d8:8c:52:49:44:51:e2:72:ce:85:dd:32:
                    84:c2:04:1b:a8:ff:ed:ba:68:57:8e:15:c7:72:c7:
                    74:d6:f9:6c:01:c7:07:2a:95:30:d7:83:da:82:e2:
                    52:83:85:26:10:20:86:f0:3d:bd:1c:2d:bb:c0:e3:
                    5d:26:59:e2:34:fe:64:41:31:ad:32:f0:9d:d6:cc:
                    89:94:32:b7:e0:e9:7a:1c:35:8b:bc:d1:44:a0:f0:
                    91:15:07:1e:56:1f:e7:44:9f:28:3e:8d:d4:b4:8f:
                    43:85:e3:56:4c:30:03:b3:1d:4c:90:2c:a2:4e:2e:
                    a0:fc:de:f4:a9:19:b8:5f:54:29:24:da:e7:f2:61:
                    d2:77:cc:77:84:60:3c:f4:d0:53:2e:c2:8c:89:41:
                    ba:46:28:a7:57:f2:e4:dd:10:77:88:36:ef:f8:28:
                    23:3c:e9:43:7a:2f:49:4d:37:e2:ce:d1:0f:74:46:
                    54:3b:da:19:84:d2:51:e1:00:b0:b0:05:c8:d1:c9:
                    41:fa:00:14:73:e8:47:65:55:2c:59:22:27:f8:fe:
                    97:11:00:86:4e:90:1e:ed:ff:02:4a:68:f1:bb:f2:
                    24:d5:07:35:d7:33:6c:5f:a5:f7:08:46:3c:29:ff:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:00:C7:AF:4E:07:75:E4:46:41:65:B6:69:09:4F:B4:5C:92:1E:2E
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/NwDHr04HdeRGQWW2aQlPtFySHi4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:ab:3d:2a:39:21:7f:7f:a1:66:02:a5:d1:c3:c7:26:d6:99:
         74:03:a4:b7:4f:99:ad:a3:e5:8f:f3:a8:95:27:e4:31:4a:3a:
         6f:2a:95:b4:b3:b2:46:a4:20:e4:46:a2:d8:3a:cd:18:0b:36:
         e8:de:24:fc:f1:43:f3:84:19:22:3a:ba:ca:b4:1f:33:09:ed:
         7f:89:ab:82:97:8a:20:8f:3f:4c:2a:b0:c5:ef:e6:dc:43:ba:
         33:98:b8:45:df:cd:4a:35:90:47:f8:93:02:cb:92:e8:e7:68:
         06:6c:4a:c1:49:a1:62:ce:a6:84:df:52:15:8a:45:5a:5e:af:
         b6:a8:cf:57:c3:a1:0d:9f:53:5f:8a:d7:42:43:b3:65:90:e6:
         68:e2:96:a1:8a:3a:09:86:60:a9:d0:40:72:cc:5c:0c:9a:83:
         6f:fe:39:44:37:18:09:45:a1:8b:fc:ea:40:6a:0e:45:de:3b:
         6f:77:54:ca:2e:0e:6a:22:bb:b3:f0:07:13:cf:f6:20:51:62:
         46:b6:65:2d:1e:86:18:df:f8:8b:ed:ff:76:44:bd:44:7e:2f:
         fd:86:69:1f:c6:69:8d:c4:bc:d2:60:71:1d:b8:e4:cf:fd:3d:
         e1:26:e1:ed:bc:8e:1d:da:dc:eb:49:59:6e:6c:16:56:c7:77:
         66:86:e5:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org