Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20187/zT-Gr71W4woRas4CBchjgmjLXO8.roa
File:                     zT-Gr71W4woRas4CBchjgmjLXO8.roa (raw, json)
Hash identifier:          qL9Dp8vfyk2TBXy1azVSid4d2D9EOX4Fn1SMP3zclMg=
Subject key identifier:   CD:3F:86:AF:BD:56:E3:0A:11:6A:CE:02:05:C8:63:82:68:CB:5C:EF
Certificate issuer:       /CN=332874E6AF24CD5868A83C329202D6C7FB7BA213
Certificate serial:       0F
Authority key identifier: 33:28:74:E6:AF:24:CD:58:68:A8:3C:32:92:02:D6:C7:FB:7B:A2:13
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Myh05q8kzVhoqDwykgLWx_t7ohM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20187/zT-Gr71W4woRas4CBchjgmjLXO8.roa
Signing time:             Sun 16 Jul 2023 00:12:28 +0000
ROA not before:           Sun 16 Jul 2023 00:12:28 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     63795
IP address blocks:        103.187.126.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332874E6AF24CD5868A83C329202D6C7FB7BA213
        Validity
            Not Before: Jul 16 00:12:28 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=CD3F86AFBD56E30A116ACE0205C8638268CB5CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:98:f2:86:81:e4:67:71:7c:9f:4f:94:76:e1:
                    bd:4d:a4:7e:86:85:f9:fd:2f:26:b6:c8:de:cf:43:
                    84:0c:42:be:bc:64:e8:97:af:f0:bd:f4:e6:a0:3d:
                    fd:7e:ee:e3:29:11:93:6c:ef:40:b9:77:75:44:6c:
                    ff:c0:0b:94:ad:39:ff:03:a4:29:d3:2f:1a:4b:25:
                    1e:62:b3:9b:c5:aa:94:68:8c:eb:d0:a1:b2:17:b7:
                    d0:8a:c0:ad:56:d8:8f:39:4c:44:7d:cb:89:a8:9e:
                    54:cc:4a:3e:e2:32:cf:d2:b1:72:81:9b:df:e6:75:
                    37:ac:2d:93:47:f0:17:df:fb:d3:32:07:23:57:47:
                    79:5e:d8:c6:07:95:15:53:0c:1a:11:9d:10:9f:60:
                    52:70:42:df:4d:90:ed:77:a8:82:6e:d0:37:d9:34:
                    d4:f7:98:ba:d9:48:a1:76:68:ac:ab:4f:fc:83:8c:
                    b8:c6:fd:1a:3c:36:70:26:8f:c7:67:b7:35:9b:5c:
                    74:a0:cb:c1:f4:bd:73:88:d0:b9:25:d5:06:7c:82:
                    0a:88:8f:0b:9b:17:29:69:67:2f:e9:22:be:49:05:
                    f3:a8:dc:ca:4e:a9:b8:c2:16:1d:84:d3:41:92:59:
                    4e:84:5e:f4:27:83:35:3a:72:42:54:6a:93:ce:84:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3F:86:AF:BD:56:E3:0A:11:6A:CE:02:05:C8:63:82:68:CB:5C:EF
            X509v3 Authority Key Identifier:
                keyid:33:28:74:E6:AF:24:CD:58:68:A8:3C:32:92:02:D6:C7:FB:7B:A2:13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20187/Myh05q8kzVhoqDwykgLWx_t7ohM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Myh05q8kzVhoqDwykgLWx_t7ohM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20187/zT-Gr71W4woRas4CBchjgmjLXO8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:a7:ec:8d:75:4e:80:58:87:05:07:79:31:a7:a8:2d:64:75:
         20:3d:2e:f2:64:79:7c:c2:37:b7:3e:19:54:8a:e0:95:c6:65:
         88:e5:a7:ff:c5:e9:44:71:ac:c3:0d:a8:72:c7:a5:94:0c:b3:
         f7:aa:3d:9d:da:56:bb:6e:06:fd:7e:58:3c:3c:e2:f2:ba:9f:
         e7:fd:2b:c5:fe:70:d8:62:c6:72:6d:f9:10:41:47:0f:6e:85:
         00:e6:34:60:97:48:f3:39:8f:2d:d0:d1:c3:20:49:85:d3:1b:
         2d:51:18:aa:d5:8c:0b:7c:91:30:c3:3f:05:f8:6c:7d:f2:7a:
         ad:37:bf:10:cf:38:c8:19:0a:eb:c7:79:0e:fa:2c:4d:d1:ab:
         02:48:80:df:b1:32:75:39:63:60:af:3e:21:d9:59:88:6b:74:
         3c:c2:c2:48:04:9e:e6:8a:8d:16:b7:24:06:6e:65:3b:51:6d:
         d2:58:62:b2:78:51:9d:cc:f0:ed:70:85:88:7b:a5:54:60:37:
         47:ca:7c:88:f6:12:2b:1c:44:fe:a1:38:58:0b:79:15:f6:ae:
         f1:91:51:d7:05:af:a8:0a:c2:4a:be:95:18:30:d8:47:eb:20:
         63:05:2f:4e:dc:77:06:0f:5c:98:9e:f7:7a:c4:ad:ce:53:a5:
         2a:cc:f2:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:25 2024 by rpki-client on console-fra.rpki-client.org