Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/YoWAIMqjyLjJPBbqkqTp7ZT2orE.roa
File:                     YoWAIMqjyLjJPBbqkqTp7ZT2orE.roa (raw, json)
Hash identifier:          fi65XqBWaBdeRfkKBPMJs55Btw+p3/qmg06QdnJn/yM=
Subject key identifier:   62:85:80:20:CA:A3:C8:B8:C9:3C:16:EA:92:A4:E9:ED:94:F6:A2:B1
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       0B
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/YoWAIMqjyLjJPBbqkqTp7ZT2orE.roa
Signing time:             Wed 26 Apr 2023 11:30:52 +0000
ROA not before:           Wed 26 Apr 2023 11:30:52 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     63796
IP address blocks:        103.37.88.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: Apr 26 11:30:52 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=62858020CAA3C8B8C93C16EA92A4E9ED94F6A2B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:63:2c:d7:bc:15:16:56:b2:5d:14:0f:1f:
                    16:31:a7:8b:77:58:27:30:4f:2c:0d:dc:f5:8a:49:
                    1c:90:41:68:e6:a0:85:c0:ef:b0:4d:6e:7e:68:18:
                    6a:cd:94:01:a9:17:b4:42:72:e0:af:16:6d:4d:f6:
                    de:97:d3:4c:3f:92:b4:8c:db:eb:6e:ad:1d:8e:c2:
                    e0:73:ec:30:0d:2b:48:5d:ef:4c:ca:6f:d8:67:7c:
                    b1:43:d6:86:c6:09:cb:4b:30:f0:f9:ec:1d:83:0b:
                    17:1c:07:a1:dc:01:90:8a:6c:dc:91:60:cb:d5:65:
                    1e:40:08:b9:a5:4b:36:a3:cb:36:32:0b:c9:58:17:
                    5c:90:ab:a5:6f:9a:39:a1:cb:d0:d5:9c:72:1a:ea:
                    e8:f9:fe:ce:c3:4a:ca:3b:9d:59:8c:a9:37:d1:3d:
                    05:42:f9:6d:42:fc:1f:1e:76:d5:7e:6a:f8:3e:0e:
                    e7:e7:fc:89:54:2d:aa:a0:10:65:c8:7c:16:9f:fd:
                    4d:99:7d:9e:cb:6e:5d:a9:1f:df:cf:11:e7:fc:ec:
                    61:c2:19:5f:ed:47:aa:4f:0e:5b:22:dc:67:b9:61:
                    85:07:b8:1c:f4:6f:43:86:5e:eb:7b:d6:56:2d:19:
                    eb:3d:96:a1:11:35:7a:e1:e4:4b:00:c8:92:32:4e:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:85:80:20:CA:A3:C8:B8:C9:3C:16:EA:92:A4:E9:ED:94:F6:A2:B1
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/YoWAIMqjyLjJPBbqkqTp7ZT2orE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:90:58:df:f4:27:e2:c6:b2:7b:89:ae:74:cc:3d:87:22:
         6a:14:33:ed:d8:f0:dc:d4:38:73:3f:d1:8c:55:b0:f1:94:b0:
         4a:58:32:d2:fc:75:00:95:c7:55:41:40:d6:d6:c4:ba:a6:45:
         dd:8f:43:60:8a:d3:1a:4d:1f:57:f2:53:a8:74:c6:12:16:ce:
         58:79:92:32:c4:dc:3b:94:91:e9:9e:f3:0c:05:33:37:80:87:
         61:46:fe:07:0e:c7:0a:b0:ad:0c:52:66:b1:ad:85:11:91:f8:
         b8:83:5d:e9:19:8c:0a:3e:ee:c2:6b:26:ba:d6:69:b7:f4:59:
         46:d7:1a:59:f1:44:79:0d:4a:b9:a2:5a:eb:1e:97:b7:56:cd:
         19:a2:b4:a5:82:b7:65:cc:89:c6:ff:00:03:24:1d:a9:80:fe:
         4a:c6:08:2c:df:50:22:bb:1e:20:9d:73:7d:7f:ef:68:19:77:
         56:59:16:38:78:06:a1:0f:b6:0a:23:4e:6d:40:22:d6:57:0a:
         8f:75:21:0a:73:54:12:b8:43:13:25:bf:5f:3f:b2:26:49:74:
         cc:13:73:ba:f4:47:12:14:65:d8:8e:3b:03:4d:db:72:be:9f:
         b2:27:df:22:d7:f6:1f:8f:8b:54:da:67:93:c5:b8:12:bd:3e:
         c4:ef:06:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org