Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/4nG55604y9d0A2j6tYdjRcsgFyE.roa
File:                     4nG55604y9d0A2j6tYdjRcsgFyE.roa (raw, json)
Hash identifier:          xC/GKDcdIgALFWmXl22K/OOmbs7g0ckogT5CExNXyGI=
Subject key identifier:   E2:71:B9:E7:AD:38:CB:D7:74:03:68:FA:B5:87:63:45:CB:20:17:21
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       7A
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/4nG55604y9d0A2j6tYdjRcsgFyE.roa
Signing time:             Fri 08 Dec 2023 12:08:24 +0000
ROA not before:           Fri 08 Dec 2023 12:08:24 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     131976
IP address blocks:        113.192.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 01:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Dec  8 12:08:24 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=E271B9E7AD38CBD7740368FAB5876345CB201721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:45:4d:1b:af:35:d5:29:fb:56:26:dd:a9:
                    da:08:f2:3b:0c:30:57:28:e6:31:df:d5:b9:6d:18:
                    46:73:fc:8f:1b:84:5e:6a:7c:10:cc:15:74:0c:c9:
                    76:2f:31:44:38:5f:42:c4:81:48:fa:4e:d2:42:ea:
                    c7:a9:f4:0c:9e:38:a9:7c:6d:76:ed:99:a5:02:83:
                    29:b8:5a:80:47:09:07:59:f7:55:49:2f:22:93:d9:
                    1a:de:8f:19:21:35:50:8e:a3:23:f8:af:a2:67:c3:
                    2b:f0:8b:65:7d:e9:41:be:82:17:9d:02:4d:ff:81:
                    46:84:5e:fa:3d:cf:e3:fb:17:57:b7:4d:ff:2b:15:
                    6b:a2:e5:64:09:4a:0e:c9:2a:40:83:ac:76:8c:30:
                    8c:4a:aa:44:b5:31:04:fc:18:31:6e:40:3a:52:d2:
                    f3:8d:89:b7:ec:9e:35:ea:0e:a9:4d:82:13:44:fb:
                    56:fb:45:bc:4b:1b:78:f2:ed:d1:d9:72:fa:22:be:
                    a6:ef:19:08:29:21:a7:b9:f6:36:14:e6:d9:71:de:
                    74:ae:f0:01:43:bf:98:03:dc:f3:2e:eb:a7:05:4e:
                    66:f1:0a:54:61:08:02:b9:03:82:7b:6b:a5:d0:4d:
                    99:fd:73:4d:1a:f4:e3:24:78:ae:c9:de:cb:35:aa:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:71:B9:E7:AD:38:CB:D7:74:03:68:FA:B5:87:63:45:CB:20:17:21
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/4nG55604y9d0A2j6tYdjRcsgFyE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:82:cc:da:ec:41:f6:54:35:ab:74:d9:8e:1a:d5:86:8b:ee:
         4c:18:a0:db:19:d2:6d:a7:6d:89:fc:b7:bf:61:29:3f:b4:ac:
         f4:c8:fa:97:11:ba:87:f0:d6:02:a2:20:63:49:a2:f5:dd:3b:
         e3:33:bc:9d:29:94:44:da:d6:62:89:7d:6e:a6:8a:19:ce:2c:
         23:89:99:0e:c1:d7:12:b7:93:2b:13:a4:ce:1f:71:12:74:1d:
         13:af:97:75:15:e2:91:ff:60:69:02:ca:77:6a:61:9d:de:b2:
         ef:bf:4e:3f:39:b5:58:6f:06:8a:de:8c:6d:76:f0:4a:29:41:
         bb:29:ec:ba:ba:2e:ae:a3:12:0c:ba:df:79:da:c0:69:ab:61:
         7b:08:a2:44:3c:d0:25:65:b8:ab:bb:10:20:57:27:1b:95:41:
         c3:f9:69:94:50:cc:5b:0a:f1:e3:3e:c1:c4:fd:60:62:38:85:
         06:79:21:4f:b7:2f:2e:52:0d:11:dd:33:85:71:1b:3e:c8:f2:
         a8:6d:4b:ea:eb:91:66:d7:d4:36:21:ac:b7:2c:5a:80:e2:46:
         11:11:4f:c7:0d:c9:22:e7:3a:0c:eb:69:04:71:ba:60:64:7e:
         2b:cc:f9:67:6c:1f:78:ee:af:eb:2a:45:01:80:36:ed:e2:ee:
         2a:12:06:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 03:53:34 2024 by rpki-client on console-fra.rpki-client.org