Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20189/QC4SpFL7oqkEo7wH1DfY_hdbKzs.roa
File:                     QC4SpFL7oqkEo7wH1DfY_hdbKzs.roa (raw, json)
Hash identifier:          5LvXp8uX2wLt5PBQZ4PauGANsvd86SBuSb+KHr7fmO4=
Subject key identifier:   40:2E:12:A4:52:FB:A2:A9:04:A3:BC:07:D4:37:D8:FE:17:5B:2B:3B
Certificate issuer:       /CN=E4543A3366CE0D6A5DA4DD46307D2993DDA026B4
Certificate serial:       10
Authority key identifier: E4:54:3A:33:66:CE:0D:6A:5D:A4:DD:46:30:7D:29:93:DD:A0:26:B4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/QC4SpFL7oqkEo7wH1DfY_hdbKzs.roa
Signing time:             Wed 28 Jun 2023 05:57:40 +0000
ROA not before:           Wed 28 Jun 2023 05:57:40 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     146981
IP address blocks:        103.189.188.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4543A3366CE0D6A5DA4DD46307D2993DDA026B4
        Validity
            Not Before: Jun 28 05:57:40 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=402E12A452FBA2A904A3BC07D437D8FE175B2B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:77:08:30:e7:5a:d8:aa:98:75:19:c0:aa:32:
                    a5:ba:38:94:79:e6:5e:f6:4c:3b:8a:4e:0a:a4:ed:
                    36:5e:c9:cf:e1:e4:e9:3c:56:b8:34:80:24:ae:72:
                    e7:aa:80:f8:e1:4e:3c:cd:a1:9a:2e:7a:b2:e6:6e:
                    75:15:87:e8:c0:ca:ea:8c:fa:d0:fc:c6:5d:be:6a:
                    95:cb:1b:7b:78:80:d6:76:04:7a:5b:01:b1:f2:db:
                    4d:76:2a:de:38:fc:a4:d8:42:9c:2d:ab:56:2e:57:
                    87:22:9f:43:51:4e:01:54:78:fb:ec:d0:28:0b:d9:
                    50:07:fc:f3:0e:a1:d2:59:bd:1a:ec:82:96:eb:7f:
                    29:62:0a:fd:13:65:e3:0a:07:8b:1a:5f:87:84:80:
                    d4:5f:31:8f:a9:bf:35:76:33:6b:f2:b2:16:fb:12:
                    22:14:c3:92:be:38:3d:c2:b6:3c:f3:73:4b:a1:06:
                    8b:2f:91:4f:6c:0d:f9:f0:c2:01:ce:9e:95:c3:47:
                    9a:1a:10:7a:a5:44:9e:85:fa:ec:3c:20:d6:23:19:
                    89:e6:17:ab:58:cc:1e:24:e3:12:92:cb:9a:21:a8:
                    04:fa:77:81:95:a7:7e:16:7e:b7:7a:b3:79:23:3d:
                    56:3d:5c:c9:7c:ab:a9:52:95:48:b2:5b:25:12:9f:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2E:12:A4:52:FB:A2:A9:04:A3:BC:07:D4:37:D8:FE:17:5B:2B:3B
            X509v3 Authority Key Identifier:
                keyid:E4:54:3A:33:66:CE:0D:6A:5D:A4:DD:46:30:7D:29:93:DD:A0:26:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/QC4SpFL7oqkEo7wH1DfY_hdbKzs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:94:56:0b:5c:1e:be:6a:44:41:4b:fe:b7:2e:c3:0a:92:6f:
         23:21:5c:59:8a:4e:21:3e:ba:44:ea:24:8d:8b:aa:bd:29:c6:
         c6:9b:88:63:ae:86:af:07:fd:71:b5:ad:b2:9d:f5:50:3e:a3:
         64:94:24:4d:a7:67:ee:61:19:23:98:9c:42:cb:ac:e9:51:8e:
         e9:36:29:20:b2:91:78:3a:21:4a:c9:c3:31:1e:c7:ca:48:ac:
         5d:ee:18:04:7d:e6:3b:33:69:1e:22:9b:52:a9:ec:59:0d:d1:
         86:da:d1:9c:8b:24:7d:3a:6a:76:d5:fa:bf:a4:f6:4e:8c:e5:
         b0:1a:38:71:cf:a0:ab:46:f5:ba:a0:ef:8d:fa:00:12:19:1a:
         b0:61:65:89:17:f5:58:55:78:8b:2b:bd:0b:92:48:a7:30:2a:
         2d:c8:af:6a:a2:52:ff:89:aa:02:d1:50:11:c1:a1:2c:0c:51:
         68:d1:bb:91:e6:37:c7:c9:5d:21:2e:9c:88:c3:d4:04:5f:49:
         9a:73:ad:bd:72:5f:cb:f0:34:ce:f3:5f:6f:c4:4f:8a:ae:61:
         91:84:76:09:b1:b7:87:7a:03:c0:6b:23:5d:d9:be:a6:90:ef:
         6b:7c:da:f4:aa:e1:66:a5:5a:96:cc:72:05:fe:7b:53:56:a9:
         a7:e0:52:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org