Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/rHV6eDRCc7XESotV_7maPDO3ppE.roa
File:                     rHV6eDRCc7XESotV_7maPDO3ppE.roa (raw, json)
Hash identifier:          JqgP1z9drg9epy+b6r9yESIPPI4Otnq+v6enLCgBP7I=
Subject key identifier:   AC:75:7A:78:34:42:73:B5:C4:4A:8B:55:FF:B9:9A:3C:33:B7:A6:91
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       43
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/rHV6eDRCc7XESotV_7maPDO3ppE.roa
Signing time:             Tue 01 Aug 2023 01:28:55 +0000
ROA not before:           Tue 01 Aug 2023 01:28:55 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     23816
IP address blocks:        103.2.12.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Aug  1 01:28:55 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=AC757A78344273B5C44A8B55FFB99A3C33B7A691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:bb:38:6f:88:71:f2:de:ad:c3:ac:d8:cf:
                    8a:c2:61:fc:a0:8a:58:b0:54:ac:e4:e5:2c:88:a9:
                    0c:3b:8b:e7:4a:6c:92:74:b4:40:ed:f8:8c:e1:44:
                    fc:11:46:68:6a:e9:98:29:36:21:6b:fb:18:d8:3a:
                    69:ab:05:39:45:a0:22:e1:eb:51:6d:7b:5b:ed:d8:
                    20:db:b4:74:bc:64:1a:73:ba:59:85:d3:fc:56:57:
                    00:ec:07:ac:97:83:2a:05:23:8b:8c:66:96:c1:dc:
                    58:dc:2b:0e:ec:f6:7e:06:ab:54:e7:25:1a:c2:ce:
                    44:1a:b7:2d:cb:f0:51:11:d3:f4:9d:62:14:3e:06:
                    26:06:fc:2d:00:05:c4:ac:97:fa:49:97:07:73:40:
                    39:97:1e:2b:6c:89:be:15:f7:2b:1a:fb:37:5a:9d:
                    a1:fd:e2:f0:00:89:e8:74:28:44:29:4a:80:99:81:
                    7e:72:01:a9:ea:cf:2e:38:3a:67:f3:e1:f4:9f:da:
                    5b:75:e7:c8:43:4f:c3:26:52:e4:85:ae:22:20:5f:
                    d2:ba:c3:ed:5d:61:2f:79:aa:9c:6f:de:b8:c1:b9:
                    36:76:00:e4:5f:a3:b8:18:94:39:a7:86:87:1d:ed:
                    e5:47:21:10:b8:94:38:6c:4c:d8:e3:bd:01:ed:9b:
                    df:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:75:7A:78:34:42:73:B5:C4:4A:8B:55:FF:B9:9A:3C:33:B7:A6:91
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/rHV6eDRCc7XESotV_7maPDO3ppE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:1c:0f:03:f0:1d:31:5a:b8:fa:7d:88:b3:b1:57:84:1b:8c:
         fa:9f:d8:b2:75:be:43:42:f4:4b:7a:ad:eb:0e:3c:28:e6:1c:
         32:aa:07:4f:c3:6c:bb:61:d0:cf:88:5e:02:5f:7d:d9:94:66:
         71:00:a7:bc:85:e1:b6:03:a8:6f:79:72:b7:2e:99:51:73:f1:
         4f:90:e1:9a:bc:9a:4c:fb:e4:c7:de:e4:38:09:dc:6d:2d:74:
         83:96:73:bd:ec:ca:04:b1:5b:5c:22:b5:1f:38:85:c3:3d:0e:
         4e:91:7a:f2:66:a3:0b:a2:49:fb:a2:33:5f:d5:21:ea:67:61:
         a6:2d:e9:5b:f4:6a:f8:64:8d:5c:ed:9e:f4:de:d9:12:ba:db:
         31:6b:3a:bb:4a:6e:63:0f:b9:00:80:75:05:3a:73:f4:2c:28:
         a8:c7:66:de:fb:26:76:cb:e1:77:88:af:4a:40:4d:11:43:2f:
         3e:eb:68:ff:cd:6f:a3:bc:ce:2a:e8:88:4f:0e:90:7a:05:de:
         8f:e0:df:50:5e:e7:a8:5a:a3:95:d4:b7:3d:32:c8:42:05:5a:
         0d:d0:1c:36:db:c5:18:e7:6c:f6:b7:c0:49:45:b1:65:d3:e4:
         e5:43:9c:a5:49:7b:94:01:bb:2b:1c:c8:16:d5:b4:32:70:79:
         78:5e:d8:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:25 2024 by rpki-client on console-fra.rpki-client.org