Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/I3us7nV0_L76GV6ZHSH36cF79hk.roa
File:                     I3us7nV0_L76GV6ZHSH36cF79hk.roa (raw, json)
Hash identifier:          6oyRTCVlH0QfdWqArZ/RBKkKCwfV1mVPiL3hsy15lHM=
Subject key identifier:   23:7B:AC:EE:75:74:FC:BE:FA:19:5E:99:1D:21:F7:E9:C1:7B:F6:19
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       49
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/I3us7nV0_L76GV6ZHSH36cF79hk.roa
Signing time:             Sat 31 Aug 2024 01:31:01 +0000
ROA not before:           Sat 31 Aug 2024 01:31:01 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     23637
IP address blocks:        180.214.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 06:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug 31 01:31:01 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=237BACEE7574FCBEFA195E991D21F7E9C17BF619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:56:97:51:d3:5e:3e:2c:97:d6:98:1e:b5:
                    aa:9d:e8:48:64:cc:6e:f2:bf:22:c9:68:bd:46:c5:
                    88:4b:ab:7d:af:a6:4b:33:7a:5d:5d:e9:ac:c5:ca:
                    3d:09:14:40:c3:be:e1:b7:34:8e:f2:c1:00:c3:0e:
                    b7:cd:c7:ba:1d:f6:75:29:68:e8:89:2a:65:7b:62:
                    d3:df:7e:4b:0f:bb:df:24:7c:a7:ab:37:68:f7:0a:
                    dd:07:e0:6a:54:86:9c:0d:bc:18:d7:42:26:d3:98:
                    d6:56:71:16:80:3b:86:b3:7f:1a:07:d0:de:d8:af:
                    7b:41:67:c7:74:d7:40:7a:97:0c:02:47:41:91:17:
                    98:cb:7c:87:93:12:78:e8:06:83:c4:05:6e:a2:5f:
                    3a:e7:7b:c8:56:ad:6e:03:7a:10:db:cc:99:c2:16:
                    86:98:56:39:1c:4d:92:f8:26:2e:ee:3b:ef:63:71:
                    80:68:ea:c2:14:18:4b:32:8a:5e:33:24:c4:c6:11:
                    23:57:90:53:92:0a:a9:1e:35:e5:a5:ae:cb:7b:28:
                    fd:f6:47:04:86:a1:28:bc:75:21:92:91:a9:03:46:
                    99:64:f0:6c:71:5d:11:1b:d7:2a:f2:9d:09:d0:47:
                    b3:c3:19:3f:eb:1f:65:8f:b6:df:8a:93:a4:77:43:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7B:AC:EE:75:74:FC:BE:FA:19:5E:99:1D:21:F7:E9:C1:7B:F6:19
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/I3us7nV0_L76GV6ZHSH36cF79hk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:e2:d6:95:d8:54:f0:17:6a:e0:4b:1e:c3:16:b7:5f:e6:ea:
         ff:74:a4:e4:f4:b2:05:7a:08:a5:0d:23:7a:80:0f:90:c3:2a:
         0b:52:15:b0:ca:b3:d0:45:6d:12:9d:02:f0:a9:db:a4:46:f0:
         5e:1a:d1:5e:11:b3:05:b9:ad:d8:e8:b4:25:6f:2d:3a:2f:b3:
         57:7c:6d:1e:a1:2e:94:c5:ac:88:50:a3:cc:ac:a8:27:e7:38:
         da:da:48:7e:58:dc:64:01:36:76:2a:64:68:f7:50:38:68:69:
         61:6e:2e:ef:cc:7e:37:f7:90:cb:d9:09:0c:b6:a8:66:5a:50:
         97:ba:05:35:f1:94:a1:7a:7d:3c:03:22:af:64:4e:e1:51:3e:
         0d:77:4b:00:7a:09:03:45:f0:d8:86:99:af:dd:69:8c:32:79:
         57:e2:1b:d2:84:03:3e:bf:2d:21:d4:d6:47:8b:db:16:10:a0:
         ff:5e:c4:c1:3d:1c:fe:bd:bc:f6:91:58:78:05:5a:2f:30:80:
         ce:f5:8f:62:8b:92:49:3f:06:55:80:10:6e:4b:8c:93:73:88:
         58:70:d9:a6:82:02:3b:ae:03:92:36:72:e8:6c:f0:5f:47:40:
         bc:bd:5b:1a:28:9b:58:24:9c:6d:28:4d:6b:77:c7:dc:68:3f:
         eb:47:49:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:05 2024 by rpki-client on console-ams.rpki-client.org