Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/4DjZGfE_5wIwLQ9HbuZ5r2xs-O4.roa
File:                     4DjZGfE_5wIwLQ9HbuZ5r2xs-O4.roa (raw, json)
Hash identifier:          LKm/MQOpwcVg/LpwGw4fdTErd4zQIGM2MlQc0qxzuDA=
Subject key identifier:   E0:38:D9:19:F1:3F:E7:02:30:2D:0F:47:6E:E6:79:AF:6C:6C:F8:EE
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       45
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/4DjZGfE_5wIwLQ9HbuZ5r2xs-O4.roa
Signing time:             Tue 01 Aug 2023 01:28:55 +0000
ROA not before:           Tue 01 Aug 2023 01:28:55 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     23816
IP address blocks:        182.22.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Aug  1 01:28:55 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=E038D919F13FE702302D0F476EE679AF6C6CF8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:a2:21:e4:b6:34:b6:93:bd:25:33:65:6a:
                    37:45:48:e9:f5:58:cf:af:ba:82:d0:60:83:77:19:
                    1b:0d:fc:7e:cf:47:dd:c5:64:1c:51:ca:7a:7f:13:
                    fc:29:a5:8d:84:3a:d2:f1:a7:61:26:ce:b6:82:97:
                    52:ff:28:0b:53:bf:68:36:03:f2:dc:5a:2f:75:4c:
                    d0:cf:6d:41:f4:3e:2c:e7:e1:7b:3b:cb:d1:c0:66:
                    86:46:ef:aa:7d:e1:fb:7a:9f:13:2b:12:15:2c:dd:
                    18:dc:b1:fc:23:56:54:af:c4:a2:11:aa:78:91:e8:
                    a5:c0:a2:75:af:9b:f1:a3:00:49:89:3e:69:6b:e4:
                    43:8d:66:a2:73:59:a1:d9:9c:29:7c:11:81:69:a9:
                    92:35:b0:f7:f8:8e:bc:6a:06:9d:a2:79:51:a7:96:
                    06:1b:6e:4c:0b:44:b4:1b:62:a0:95:f4:fe:f6:43:
                    e4:88:7d:db:50:58:6d:0b:ab:93:43:ac:ed:09:5b:
                    8b:5a:80:8e:04:63:c2:6d:16:cb:6d:ef:05:dc:e4:
                    ed:76:b5:ac:02:d2:84:b1:81:4d:4e:87:77:99:b1:
                    01:10:1c:ad:d4:2b:83:a2:86:18:36:6a:c0:71:10:
                    81:20:c6:1b:5f:90:aa:c4:e6:e7:87:42:18:36:20:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:38:D9:19:F1:3F:E7:02:30:2D:0F:47:6E:E6:79:AF:6C:6C:F8:EE
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/4DjZGfE_5wIwLQ9HbuZ5r2xs-O4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.22.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5e:bf:91:10:5a:74:87:53:5b:ab:bf:6c:74:f2:49:03:99:e8:
         64:d8:b4:21:7c:25:4b:fd:72:bc:4e:c8:0d:3b:bf:60:e5:da:
         c8:1f:93:8d:8a:6a:14:84:af:f3:1b:4a:71:37:f0:01:dd:9a:
         d4:b2:4d:c1:2e:9c:cd:2e:45:6e:f6:6a:77:57:bd:0c:49:7e:
         18:9e:31:38:28:71:50:e1:af:26:1a:75:1d:f2:54:71:1c:36:
         d4:73:6d:ae:4a:06:f2:6b:67:85:64:9e:ca:b5:60:2c:61:f6:
         98:bf:94:f9:f1:fc:48:bc:60:ae:98:bf:bf:24:8a:d9:f4:f9:
         b4:3a:36:d8:de:d4:0a:87:2d:76:d6:ed:1e:38:a5:84:37:02:
         7d:b3:30:b4:b6:aa:04:31:55:3d:ed:d7:17:ff:f5:fb:ce:eb:
         31:51:00:bd:47:a1:2c:97:d8:3f:0e:6f:58:c9:a8:c1:c3:d7:
         98:73:78:a8:41:13:0a:71:08:4e:d2:cd:ba:9f:75:fe:a7:bc:
         e4:8d:38:32:15:c1:1f:c8:59:21:13:93:23:0a:1d:61:50:37:
         90:e6:78:b2:0b:58:78:0d:c1:bc:3a:4f:c0:32:83:4a:bc:24:
         3e:85:17:9d:a4:5d:f7:b6:68:a0:5d:f0:c2:72:90:b1:5e:3c:
         d4:ee:38:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:41 2024 by rpki-client on console-ams.rpki-client.org