Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jsdP9Q8pkhJ6GFfGBKpEo_jikW8.roa
File:                     jsdP9Q8pkhJ6GFfGBKpEo_jikW8.roa (raw, json)
Hash identifier:          7Dvv88PdozGNFamG7h6KmDmyLRrKlj8HUcyPVOnzTSI=
Subject key identifier:   8E:C7:4F:F5:0F:29:92:12:7A:18:57:C6:04:AA:44:A3:F8:E2:91:6F
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       33
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jsdP9Q8pkhJ6GFfGBKpEo_jikW8.roa
Signing time:             Mon 01 May 2023 01:29:43 +0000
ROA not before:           Mon 01 May 2023 01:29:43 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4694
IP address blocks:        61.206.32.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: May  1 01:29:43 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=8EC74FF50F2992127A1857C604AA44A3F8E2916F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:93:c3:59:ef:fd:3f:73:a3:b7:0f:13:ce:
                    cb:06:ea:4a:9a:7f:7e:6f:6f:c6:bc:55:57:bf:00:
                    ed:fc:dc:3d:a0:38:8b:61:4d:ed:28:84:7d:26:e2:
                    9e:89:10:29:67:9e:98:2e:5b:cc:11:d9:74:9b:45:
                    3f:dd:1a:9b:3e:70:b5:9b:2b:e4:94:30:38:ae:4d:
                    d0:5f:34:e1:ea:84:a7:3f:45:4e:93:32:f3:da:27:
                    cb:4f:a9:46:9b:d9:8d:89:bd:50:f7:76:7a:1a:b3:
                    2a:52:7b:25:2f:40:94:c4:b0:09:22:00:49:10:23:
                    7a:dd:d5:b0:d4:10:55:00:52:61:ce:25:45:84:9d:
                    06:ee:d1:e6:c5:92:54:d2:a4:31:7c:aa:c1:5a:15:
                    26:30:6a:73:d1:d2:ca:b5:28:28:99:38:1b:8c:8e:
                    7e:ac:7a:e5:c8:8e:45:82:5e:9d:c2:f2:ff:a2:c9:
                    1e:ae:e0:fd:0f:67:d1:c7:6e:a6:55:23:dc:f3:d6:
                    75:a8:1e:50:98:6f:14:5b:e6:d1:6c:02:43:95:83:
                    80:1b:a0:f0:2e:82:58:b9:0b:de:ef:0c:1a:aa:f0:
                    f8:67:b8:f8:ef:92:3a:8e:7d:94:c7:bc:ec:28:ea:
                    a5:c3:a0:69:e8:8b:87:5d:d0:9b:1f:33:d6:2b:39:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C7:4F:F5:0F:29:92:12:7A:18:57:C6:04:AA:44:A3:F8:E2:91:6F
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jsdP9Q8pkhJ6GFfGBKpEo_jikW8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:42:91:4d:b1:9f:4a:47:9f:54:80:8f:b9:c3:c9:b9:34:89:
         e6:cb:d7:4b:03:91:57:9e:94:7f:40:5f:bb:d9:78:30:83:9d:
         b0:1e:69:61:68:16:91:d2:43:46:37:02:ce:7f:92:88:28:9d:
         06:00:6a:db:79:b5:4a:e8:c1:52:7c:ea:88:b4:99:e2:62:5c:
         c6:b3:39:32:51:cf:7d:70:ca:d5:92:f7:a5:7a:ef:64:b7:17:
         10:e1:78:99:a1:bd:66:45:21:17:16:a9:75:91:21:bb:d9:80:
         63:e5:ad:64:9d:b7:9f:02:21:d9:d5:0d:ac:48:d1:42:f9:e6:
         fe:69:00:86:5b:2e:05:06:3d:ad:52:76:8b:d5:47:c3:8c:3d:
         8c:fa:08:79:e8:57:0b:38:f2:1f:31:48:e3:3b:f4:0a:1c:c5:
         55:f7:82:ab:0c:54:24:cb:42:46:d9:ce:48:29:de:97:5f:76:
         0d:14:fe:47:13:58:56:bc:d6:7f:ab:80:e2:c3:af:2c:a2:0e:
         dc:7d:24:96:d4:0a:95:ff:05:9b:43:a7:78:2f:9b:53:30:af:
         f6:17:ae:b2:dd:9b:5d:62:36:cd:71:31:49:6f:75:07:51:d1:
         f9:15:e7:2f:56:73:99:36:0c:b3:d6:0b:b3:24:9e:5b:7b:e5:
         e1:8c:d2:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org