Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/bCEPbRcCetzhwD5QiovRkqBIraQ.roa
File:                     bCEPbRcCetzhwD5QiovRkqBIraQ.roa (raw, json)
Hash identifier:          fS2hAMxlzjGNu5S58tlReZnJwYHGH3pZVNbsz2sJ8fE=
Subject key identifier:   6C:21:0F:6D:17:02:7A:DC:E1:C0:3E:50:8A:8B:D1:92:A0:48:AD:A4
Certificate issuer:       /CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD
Certificate serial:       2C
Authority key identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/bCEPbRcCetzhwD5QiovRkqBIraQ.roa
Signing time:             Tue 01 Aug 2023 01:29:02 +0000
ROA not before:           Tue 01 Aug 2023 01:29:02 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     24296
IP address blocks:        154.34.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD
        Validity
            Not Before: Aug  1 01:29:02 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=6C210F6D17027ADCE1C03E508A8BD192A048ADA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:40:e0:87:9f:d0:c8:55:ac:71:0e:36:0b:
                    75:10:ab:07:db:3a:1d:82:7d:76:20:de:ac:22:8a:
                    7f:f2:d2:e7:6d:43:40:e1:1d:22:a5:e8:39:d2:da:
                    ce:9d:1b:97:49:93:29:5c:11:cd:f9:d6:ec:0d:b7:
                    ba:e3:24:54:32:c2:fb:7e:e0:cf:32:c4:af:a3:d0:
                    45:16:17:df:75:67:a2:a9:c4:52:b3:85:d9:5f:85:
                    82:55:2f:23:4f:c3:78:fb:72:f6:1c:92:61:f3:b9:
                    33:38:b9:88:dd:05:9f:6d:c3:d7:68:83:9f:34:54:
                    c1:a0:24:ce:a1:14:1b:a9:83:f4:1d:f1:b6:f0:ef:
                    72:15:93:d9:4c:ec:75:63:1a:42:6a:c1:4c:3b:33:
                    a8:01:5b:5d:20:5b:33:96:04:23:01:cf:e6:b2:3d:
                    2c:76:f1:56:0c:54:a5:09:63:4f:09:55:79:4a:ad:
                    26:e8:0e:9e:83:46:ba:63:bd:72:f6:ce:52:5f:9d:
                    ff:70:10:fe:d7:ff:4a:ab:63:ef:c4:e7:02:8b:97:
                    65:ba:f4:be:78:ee:95:fc:b4:8e:3a:df:61:18:b7:
                    95:75:c5:cd:63:19:f3:9e:d2:54:fd:cb:d1:d2:64:
                    a0:87:42:ac:02:d3:27:81:a3:9a:5c:6e:cc:62:29:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:21:0F:6D:17:02:7A:DC:E1:C0:3E:50:8A:8B:D1:92:A0:48:AD:A4
            X509v3 Authority Key Identifier:
                keyid:85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/bCEPbRcCetzhwD5QiovRkqBIraQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.34.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b9:fb:85:83:48:4e:3d:83:eb:f1:fd:35:4d:56:f7:35:1f:41:
         05:47:5e:f4:c1:83:cf:c2:80:fc:f0:44:ff:a8:9a:2a:f6:9b:
         1d:00:8a:f0:cd:33:57:f4:a5:9e:59:bc:91:2e:b1:3e:af:ac:
         84:1c:36:13:ae:4e:bb:34:8e:a4:56:92:67:63:b3:71:01:ae:
         55:11:86:cd:f7:ca:48:7b:2d:ad:dd:04:d1:55:62:aa:8c:13:
         14:d9:b6:15:b7:7b:da:02:82:83:51:39:d9:71:57:b0:af:9e:
         9c:38:b5:e9:e2:6c:fb:23:f9:c7:0b:84:0c:96:15:66:53:1b:
         31:45:10:71:57:2b:92:e6:9a:df:d8:89:0d:15:a5:37:b4:5f:
         0f:69:10:50:67:b1:f9:d9:da:6d:4e:4e:c7:7c:48:b8:9e:02:
         57:e3:07:50:02:76:e4:c1:52:2d:38:c7:ef:c9:e7:58:7b:3b:
         88:20:6a:5d:70:ba:dd:61:7f:e7:63:dd:c6:49:6b:17:46:be:
         11:a1:d8:24:5c:44:27:56:a0:8d:2a:59:ce:28:bd:b2:e9:d7:
         ad:11:44:b1:31:45:c3:cb:f8:ca:d0:ad:e2:77:79:77:eb:32:
         3b:78:3e:eb:91:8c:bd:c9:8c:9c:15:5a:f7:97:8b:3a:96:da:
         96:50:c4:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:25 2024 by rpki-client on console-fra.rpki-client.org