Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/QLL3YLK5nYmePVKSTJpQL_4nNl4.roa
File:                     QLL3YLK5nYmePVKSTJpQL_4nNl4.roa (raw, json)
Hash identifier:          syyKshE7dZke/RQhRiPBC6hwQN0hAh9kxwDoziheg/0=
Subject key identifier:   40:B2:F7:60:B2:B9:9D:89:9E:3D:52:92:4C:9A:50:2F:FE:27:36:5E
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       44
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/QLL3YLK5nYmePVKSTJpQL_4nNl4.roa
Signing time:             Tue 01 Aug 2023 01:28:55 +0000
ROA not before:           Tue 01 Aug 2023 01:28:55 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     23816
IP address blocks:        118.151.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Aug  1 01:28:55 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=40B2F760B2B99D899E3D52924C9A502FFE27365E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:7e:38:3f:7a:11:93:a6:43:58:e6:1a:eb:
                    cd:77:15:74:5f:0a:29:48:8b:2e:8e:8d:3a:59:72:
                    c8:4b:94:a2:f1:12:75:22:9a:25:b2:18:83:d6:8e:
                    30:c5:24:3f:03:07:46:cf:6b:f4:2f:25:aa:78:0b:
                    fc:f7:03:6e:54:ea:5d:16:8b:cf:8f:80:e6:8e:50:
                    f7:f8:f9:44:cc:33:6d:a3:2c:91:61:6e:ab:ef:f5:
                    ef:b7:b5:cb:29:c2:ac:5f:d2:a3:c2:e0:21:26:bc:
                    c4:30:f5:0d:4c:74:e7:80:de:b2:7a:3b:db:73:23:
                    2e:e4:80:40:10:36:77:74:71:d2:4c:ec:1f:f4:80:
                    0c:30:fb:95:32:38:c4:64:d0:ac:c6:93:d0:a3:07:
                    17:1c:bf:31:30:89:74:7f:59:02:88:34:23:16:3f:
                    cf:80:6a:b8:57:d3:6d:38:44:9b:45:ae:4f:3d:ce:
                    fc:de:6c:7b:9f:ce:4f:8a:b0:4b:9f:4f:12:46:04:
                    54:91:80:d1:09:cb:30:05:cd:67:c1:65:94:0f:e3:
                    7c:3c:07:93:54:e8:0e:af:bf:23:e7:fa:40:2c:74:
                    29:00:d9:61:72:43:11:36:c2:c3:95:a5:b8:17:b9:
                    39:92:00:66:f5:a2:61:50:e8:c9:4b:69:64:ea:ad:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B2:F7:60:B2:B9:9D:89:9E:3D:52:92:4C:9A:50:2F:FE:27:36:5E
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/QLL3YLK5nYmePVKSTJpQL_4nNl4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:f8:1e:c0:2f:72:39:8c:c0:2f:d2:24:a8:0b:00:c1:77:3e:
         59:77:86:4b:73:22:b0:3c:56:0f:ce:56:52:1c:3c:01:b0:9f:
         b2:df:ca:0c:f5:dc:ca:c1:b2:6e:1e:1b:32:02:6d:ce:7d:85:
         f6:1b:a6:34:c7:e0:fd:02:e8:eb:fd:2b:c9:1f:79:e9:1e:5a:
         d6:77:cd:ec:71:46:3c:1c:3b:66:ed:ed:50:2b:e4:ad:a3:aa:
         dd:db:46:2b:69:98:f7:ea:aa:f3:6f:fd:4b:9f:a6:1b:80:dd:
         a3:48:bc:74:fe:61:82:50:53:22:e3:d5:1d:f8:c8:50:f6:5a:
         86:06:4d:f5:4b:91:06:c1:75:a1:22:d5:dc:1b:3c:41:ba:c9:
         5e:4f:01:b1:e1:fd:5a:67:b0:38:67:23:20:54:1b:52:47:be:
         7c:ae:38:b5:7b:85:25:54:fa:39:21:47:25:44:75:c9:f5:7f:
         6a:49:f6:c8:65:e6:16:56:56:77:1e:ce:de:45:e3:e4:5e:4b:
         7c:67:11:4a:45:75:45:4e:73:e0:66:a7:42:8b:3a:37:11:7e:
         1f:e0:f9:f4:f6:07:3b:7e:ba:50:11:90:f3:e6:10:a5:99:37:
         7b:a1:87:82:ff:d8:51:cd:14:cb:a1:69:16:a1:05:2c:30:cf:
         f3:65:93:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:25 2024 by rpki-client on console-fra.rpki-client.org