Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ee22KQ_aqwA5LZKGrylwmT1NWJU.roa
File:                     ee22KQ_aqwA5LZKGrylwmT1NWJU.roa (raw, json)
Hash identifier:          oOtd0s/qljdIQGY56uRRPuzsjwKspEOW874FONyOBkM=
Subject key identifier:   79:ED:B6:29:0F:DA:AB:00:39:2D:92:86:AF:29:70:99:3D:4D:58:95
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       44
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ee22KQ_aqwA5LZKGrylwmT1NWJU.roa
Signing time:             Thu 01 Feb 2024 01:30:04 +0000
ROA not before:           Thu 01 Feb 2024 01:30:04 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     4694
IP address blocks:        61.203.176.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 07:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Feb  1 01:30:04 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=79EDB6290FDAAB00392D9286AF2970993D4D5895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:62:dc:dd:24:7a:f9:ac:73:70:5e:11:8b:
                    02:8d:a7:90:e3:b5:3a:30:11:41:a9:8d:1f:02:db:
                    c9:25:49:5b:4f:13:9e:fb:66:1e:3b:19:19:6f:cb:
                    43:bb:dd:e0:ee:52:56:dd:18:fa:f6:8b:a9:70:be:
                    41:19:2f:c6:47:2b:4d:83:56:ad:25:f9:ac:4c:9a:
                    27:a8:fb:48:16:24:05:61:e4:a2:2f:15:7d:e3:36:
                    e2:8e:a9:b2:58:df:dd:a5:bb:5e:fc:1c:f8:cc:82:
                    e8:00:63:09:26:74:c0:ce:a1:73:48:46:88:a3:a2:
                    a6:a7:9d:0f:9d:00:68:60:77:44:fc:be:f6:b1:c6:
                    13:9c:12:4b:d7:89:bf:06:e7:af:f0:db:9a:40:3c:
                    89:25:23:62:49:8f:9d:18:6f:5a:0d:02:9d:b7:10:
                    6e:ad:4f:5a:dc:13:fc:b2:db:79:de:c8:9b:3d:f2:
                    16:dd:41:e9:db:9f:62:69:4b:bb:3b:ea:89:8b:e3:
                    e4:6d:1e:e8:45:a3:e0:9f:5a:f6:2c:f5:1b:7f:c0:
                    39:f0:ad:42:9b:6e:d1:63:13:ef:e9:8a:4b:9d:9a:
                    b2:e6:90:23:52:c4:bc:85:1a:22:72:ce:e2:92:5b:
                    d4:12:22:aa:4d:31:3b:ac:da:21:1b:6a:33:1c:1e:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:ED:B6:29:0F:DA:AB:00:39:2D:92:86:AF:29:70:99:3D:4D:58:95
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ee22KQ_aqwA5LZKGrylwmT1NWJU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:84:41:a9:13:7a:a4:31:32:11:02:e6:59:8e:23:7b:97:2b:
         b9:ea:1e:64:50:3d:df:67:50:73:7c:59:7f:e1:f4:07:85:3e:
         63:b2:9c:0d:47:cb:ee:6d:14:df:d3:80:d2:2b:44:e8:6f:9e:
         08:d2:09:c4:44:e1:77:de:77:6b:4e:3d:cb:71:89:5f:dc:ca:
         61:9c:6b:67:b3:79:f8:55:c3:36:6c:32:c5:8a:0f:c3:42:20:
         ef:d6:53:b0:89:93:6b:6c:8c:f1:81:e6:96:dc:a5:0a:36:bc:
         bf:cc:d6:14:fe:8c:26:1a:e9:b3:b8:76:fb:c4:dd:3b:8e:c5:
         b3:ea:63:7c:ec:5c:39:36:1f:14:15:05:b2:d0:8c:4f:9a:16:
         30:4f:f6:79:7c:19:97:c9:ad:46:94:2a:c5:0f:18:7f:0f:4f:
         88:ac:94:2c:97:05:f0:cc:57:4e:70:5f:8f:c7:29:5f:be:3b:
         c4:5d:2d:10:4b:e1:54:f5:49:b6:f9:3c:72:4a:ef:c5:ad:f4:
         ba:a9:8c:06:d2:6b:7f:c3:06:36:31:2a:5a:a5:36:4f:d8:18:
         3f:9c:76:d2:b0:31:f0:76:26:44:c5:be:8f:10:f8:34:61:a7:
         6d:27:c4:f0:03:64:a9:ee:4f:cb:2e:56:e1:ae:9b:36:38:55:
         1a:00:60:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 28 08:56:17 2024 by rpki-client on console-fra.rpki-client.org