Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20217/XV1vITt9KYQ0ty8jwIIX50B8XFc.roa
File:                     XV1vITt9KYQ0ty8jwIIX50B8XFc.roa (raw, json)
Hash identifier:          sYzbkuB7TdFTxzujAT+RoYkHiJzGcg1HsjaOGzaLKjE=
Subject key identifier:   5D:5D:6F:21:3B:7D:29:84:34:B7:2F:23:C0:82:17:E7:40:7C:5C:57
Certificate issuer:       /CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
Certificate serial:       07
Authority key identifier: 44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/XV1vITt9KYQ0ty8jwIIX50B8XFc.roa
Signing time:             Sat 03 Feb 2024 07:15:32 +0000
ROA not before:           Sat 03 Feb 2024 07:15:32 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     150362
IP address blocks:        103.149.4.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 17 Mar 2024 12:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
        Validity
            Not Before: Feb  3 07:15:32 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=5D5D6F213B7D298434B72F23C08217E7407C5C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:db:6e:c1:21:b5:9e:c6:90:dc:91:0a:f9:0b:
                    35:ef:89:60:05:05:70:e5:2e:d9:2b:cf:0b:0d:fc:
                    6e:e1:76:7f:35:3e:c7:23:a6:b6:a6:a8:34:5b:a3:
                    e1:fd:97:42:d4:50:f3:30:af:ed:94:36:31:8d:e4:
                    27:b2:f1:2e:e7:82:b3:be:60:72:3f:b5:0f:1c:31:
                    96:d6:f0:d8:d2:cf:71:b7:2f:2d:18:3d:5e:83:c7:
                    e8:9e:57:d4:e6:94:8a:59:9f:16:25:68:07:75:bf:
                    bd:bf:4a:5c:7c:b6:ab:25:57:82:d3:e9:55:76:5c:
                    61:e0:2d:7a:86:e7:46:39:8d:63:90:ba:6d:42:33:
                    7d:fd:39:17:95:61:8b:da:1a:46:e7:cc:85:28:fc:
                    f7:2b:bb:b9:16:2d:eb:6d:be:33:44:ad:2c:96:3d:
                    b2:5f:1c:ab:7b:2c:fc:c3:80:be:70:2b:f9:7c:b8:
                    53:ac:64:32:94:c0:63:78:e1:fa:55:94:84:1a:80:
                    e1:74:f3:c2:de:73:95:97:89:50:f0:2b:e9:3b:57:
                    cc:db:80:4f:78:42:52:9e:85:ee:c8:d5:bd:1f:53:
                    73:a8:9d:16:cf:3e:1e:cd:bd:c3:c3:bd:92:87:2a:
                    b1:2f:7d:42:05:e4:e6:2b:36:70:26:c4:bf:45:d9:
                    97:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5D:6F:21:3B:7D:29:84:34:B7:2F:23:C0:82:17:E7:40:7C:5C:57
            X509v3 Authority Key Identifier:
                keyid:44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/XV1vITt9KYQ0ty8jwIIX50B8XFc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:6f:0f:67:19:7b:f7:30:ab:76:6e:d6:35:b9:bd:47:60:3f:
         39:fa:cd:4b:12:3d:90:66:22:ca:bb:98:67:a2:ed:c5:de:37:
         f8:ce:b5:76:53:a6:3e:69:df:74:91:87:00:e9:5d:91:a2:b2:
         b7:f7:55:b2:af:14:cd:a4:f9:da:72:f7:cc:86:13:58:8b:cb:
         9d:b6:54:b3:34:7f:33:67:15:7e:78:95:48:5f:88:e2:34:88:
         d6:b0:c5:f3:ea:20:f7:ea:ee:ff:2b:f5:3a:ff:b6:d8:86:eb:
         87:57:6a:14:40:9d:e7:c4:bc:ff:d8:94:5e:af:c0:1b:8e:17:
         9f:d8:05:36:34:5e:36:57:94:02:a6:9f:22:82:88:a0:c3:1b:
         f6:d8:f2:7a:f5:66:b6:18:fb:c6:96:a9:6b:bf:82:5d:3f:ee:
         5e:bc:fb:89:a1:25:0e:e9:fd:00:82:6d:70:ca:09:f9:20:47:
         a6:6d:30:91:51:55:f9:e6:64:b4:78:a0:7a:27:38:9d:69:1c:
         a2:90:db:01:b9:c8:7c:50:cc:40:43:76:6d:19:be:5c:60:1a:
         78:64:2c:13:50:4b:bf:f2:39:0f:5a:84:cf:f3:05:e8:4f:31:
         6f:92:1e:09:e8:72:45:e5:ac:4b:74:23:a8:7c:84:18:74:1b:
         70:21:00:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org