Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/yt5YmNztSi0bnaVSyDy9Vk3Itss.roa
File:                     yt5YmNztSi0bnaVSyDy9Vk3Itss.roa (raw, json)
Hash identifier:          Xzgdq5utRR9yXnyYFi9o3lAhi4vlxpB/iUT0ZJbNg2E=
Subject key identifier:   CA:DE:58:98:DC:ED:4A:2D:1B:9D:A5:52:C8:3C:BD:56:4D:C8:B6:CB
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       43
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/yt5YmNztSi0bnaVSyDy9Vk3Itss.roa
Signing time:             Tue 01 Aug 2023 01:29:03 +0000
ROA not before:           Tue 01 Aug 2023 01:29:03 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     23816
IP address blocks:        203.95.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Aug  1 01:29:03 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=CADE5898DCED4A2D1B9DA552C83CBD564DC8B6CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:17:dc:ae:7f:4f:83:74:98:0f:02:ae:22:78:
                    4d:31:a9:bd:37:8c:37:e6:e5:7f:e0:7a:4d:60:c3:
                    bd:e1:38:35:c0:d2:a0:10:a7:6b:76:80:a5:64:2e:
                    1f:af:2a:72:88:c7:92:dc:a2:02:78:78:51:03:aa:
                    be:f3:c0:1e:8d:2a:42:23:49:fe:34:a3:ea:06:25:
                    8c:3c:20:ed:3b:05:3c:cf:96:a5:8c:56:73:a4:e6:
                    6d:ab:a1:bc:e6:8e:16:cf:84:4d:2a:0a:27:4f:4e:
                    d8:02:fd:fb:68:e0:c0:5e:05:f8:4f:39:1f:99:26:
                    58:3e:70:4d:87:a3:ab:ff:49:44:23:5e:92:4a:37:
                    fe:21:c4:56:dd:71:67:7f:93:e8:df:99:42:5b:f6:
                    42:ce:5a:88:3c:c7:d5:22:b1:66:67:d9:f1:ab:7f:
                    d3:ff:f0:70:cd:bb:37:5b:5d:fc:ee:13:5c:c3:d6:
                    5c:28:57:c9:52:a5:8d:43:b0:b7:01:3d:c6:b6:c1:
                    f5:96:95:23:36:e1:bf:75:1d:52:a4:60:11:19:5c:
                    9d:fb:a5:76:0d:9b:b4:f9:ac:c3:26:25:54:1a:42:
                    c3:49:7e:8d:18:4c:c4:d4:3c:53:6f:af:c3:ce:a4:
                    67:49:1b:e4:94:06:6e:3a:e4:03:cd:07:c0:71:26:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DE:58:98:DC:ED:4A:2D:1B:9D:A5:52:C8:3C:BD:56:4D:C8:B6:CB
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/yt5YmNztSi0bnaVSyDy9Vk3Itss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:4c:38:71:a0:51:1f:72:69:6b:de:5a:a1:15:24:28:2d:
         f2:89:f5:5f:3a:79:00:93:d2:01:07:d5:de:bf:b3:4b:27:a8:
         51:22:c3:65:57:cb:2f:97:fc:cb:6f:e0:71:9b:47:0d:f4:b8:
         25:7e:db:dc:b3:37:e5:0d:5b:c4:8a:79:d3:2e:b4:68:04:b0:
         cf:3b:c5:63:29:eb:42:12:47:55:96:b1:9f:ca:5c:54:02:a4:
         10:15:83:9c:be:17:fa:5b:a4:14:9e:b1:f2:9e:c8:8f:10:c7:
         62:eb:02:7a:0e:84:08:03:8e:97:01:1e:1d:b6:8a:37:ce:ce:
         9e:32:de:69:8e:20:4f:15:24:88:bd:b6:1a:10:c4:0b:bb:e2:
         de:e2:45:60:97:c7:96:78:87:96:a9:97:8d:af:7a:2b:a6:2b:
         c6:ee:2b:10:51:e4:c7:9d:00:1b:13:47:4a:ae:bc:b9:ff:15:
         b3:b9:e9:ab:ec:ce:5b:4a:64:28:57:40:a5:3e:a6:c6:4d:23:
         7c:be:9a:5b:6f:40:fd:c1:ec:1a:4a:77:42:e5:b1:1c:1d:8f:
         53:ba:17:c0:31:21:80:2e:3f:aa:20:fc:c1:e8:c7:47:2a:1b:
         8a:4d:22:d3:0a:9b:96:58:e1:3f:97:b8:d2:e2:2f:d6:d9:19:
         dd:5e:72:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:25 2024 by rpki-client on console-fra.rpki-client.org