Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/v5Hqi-__sMVQzgbt7nQ1-LFLd8A.roa
File:                     v5Hqi-__sMVQzgbt7nQ1-LFLd8A.roa (raw, json)
Hash identifier:          Q9UohJRlXdYjj+Uvi/J3VtT+jmODULHC154FKvHvZ60=
Subject key identifier:   BF:91:EA:8B:EF:FF:B0:C5:50:CE:06:ED:EE:74:35:F8:B1:4B:77:C0
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       48
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/v5Hqi-__sMVQzgbt7nQ1-LFLd8A.roa
Signing time:             Sat 31 Aug 2024 01:31:01 +0000
ROA not before:           Sat 31 Aug 2024 01:31:01 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     23637
IP address blocks:        180.211.72.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 06:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug 31 01:31:01 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=BF91EA8BEFFFB0C550CE06EDEE7435F8B14B77C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:cf:39:2e:94:82:ab:c6:3a:20:3e:32:31:
                    4f:be:15:39:4d:e8:ff:85:47:85:ef:74:f2:c9:a6:
                    f0:cb:ba:d6:c3:c1:a3:d4:36:1c:ce:e8:a1:fb:fc:
                    49:cd:2c:5d:74:05:ea:81:19:49:50:33:97:d2:04:
                    3f:40:3c:be:10:c7:bd:7b:46:1b:1a:57:e2:db:dc:
                    b0:d0:21:ef:ca:15:4d:bb:39:62:74:21:6e:b3:c9:
                    a0:56:f2:4c:d4:b0:4f:02:e2:81:8a:6d:7a:35:ba:
                    1f:17:cb:1b:a0:18:75:60:58:9e:53:35:c1:96:96:
                    a9:5c:44:17:e1:09:25:22:55:12:b3:d2:60:4a:8b:
                    dc:0d:c7:6e:52:70:a9:e2:1d:bd:72:d1:be:b2:48:
                    c2:03:8b:40:d4:fa:25:27:c5:da:a2:ac:ba:c8:e6:
                    c7:a4:85:e2:51:a1:b4:be:86:f5:df:09:80:0f:2a:
                    6f:dc:50:53:65:95:86:b0:92:b8:47:70:82:55:27:
                    5b:f3:dd:b5:da:72:f4:02:2d:72:25:e6:7a:13:37:
                    69:0c:93:d5:9c:8c:f2:65:1d:5e:da:7e:1b:14:d7:
                    25:38:db:2f:75:4f:c1:05:4e:1f:d2:0f:7c:fa:29:
                    f2:e8:f6:0f:b9:a6:72:4e:15:09:71:33:81:0a:34:
                    61:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:91:EA:8B:EF:FF:B0:C5:50:CE:06:ED:EE:74:35:F8:B1:4B:77:C0
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/v5Hqi-__sMVQzgbt7nQ1-LFLd8A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:57:70:49:83:0a:c4:51:59:7c:c1:36:51:e0:b7:59:31:b3:
         ed:a7:fe:cb:cc:ff:16:32:c8:74:27:2d:71:6c:8e:0b:ff:ef:
         d3:81:a3:40:1c:e2:d5:27:02:a2:79:8d:d9:4b:84:ef:20:fe:
         7a:8f:4a:0c:25:7e:ce:27:d2:8a:27:29:2d:3d:9e:4b:60:5d:
         20:b4:00:69:ba:1f:b2:85:30:30:59:71:f6:ae:a5:05:d5:43:
         09:b0:f5:4e:9a:26:19:6a:a9:49:f5:ce:88:97:f8:ea:dd:e2:
         6e:67:34:4c:de:66:c0:29:25:b0:da:e8:59:63:dd:f7:c3:99:
         2b:9f:2f:97:74:f0:cf:8b:72:2a:99:04:47:8f:24:c5:3b:80:
         43:c5:4c:af:64:f1:b1:42:51:10:d8:95:03:a4:7f:fe:df:39:
         d0:02:42:d0:a5:6f:d9:0e:04:57:f5:68:45:87:37:46:34:a1:
         68:0b:72:a4:da:c5:c4:38:8d:fd:35:33:4a:bd:99:cf:d5:90:
         ba:42:9e:d4:98:13:ef:7f:06:1c:51:28:5b:50:4c:d0:7b:d6:
         20:9c:47:31:8f:ab:e9:60:e7:11:a4:2c:4c:92:85:fc:0a:35:
         ed:8c:7b:14:86:d3:1a:9b:7b:69:02:78:20:54:75:7e:73:41:
         a5:02:52:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 1 08:29:41 2024 by rpki-client on console-fra.rpki-client.org