Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2154/V_xXLU_yzwTMPpo-xG2iL60Ts0g.roa
File:                     V_xXLU_yzwTMPpo-xG2iL60Ts0g.roa (raw, json)
Hash identifier:          yXML+ClFj2AuMunUvsdfvxxJJmRJuN+UbmvdPR/Yo4c=
Subject key identifier:   57:FC:57:2D:4F:F2:CF:04:CC:3E:9A:3E:C4:6D:A2:2F:AD:13:B3:48
Certificate issuer:       /CN=35892143C493B9B2CC1E79133F5231C72E152685
Certificate serial:       2B
Authority key identifier: 35:89:21:43:C4:93:B9:B2:CC:1E:79:13:3F:52:31:C7:2E:15:26:85
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/V_xXLU_yzwTMPpo-xG2iL60Ts0g.roa
Signing time:             Fri 01 Dec 2023 01:30:43 +0000
ROA not before:           Fri 01 Dec 2023 01:30:43 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     396982
IP address blocks:        202.250.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 01:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35892143C493B9B2CC1E79133F5231C72E152685
        Validity
            Not Before: Dec  1 01:30:43 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=57FC572D4FF2CF04CC3E9A3EC46DA22FAD13B348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:b5:76:55:b5:ed:c1:a2:af:91:a0:9c:f5:
                    50:17:24:da:ef:69:68:21:d9:dd:ea:2a:36:71:6e:
                    02:f1:eb:1d:ed:d7:c9:14:eb:da:88:69:98:f1:61:
                    0a:ef:0e:7c:d2:08:4e:70:fd:b3:63:0e:97:ec:fe:
                    60:84:16:39:47:43:a2:33:d6:d1:75:a9:37:69:5d:
                    88:73:fb:7a:49:47:b9:39:c0:62:5d:3c:e1:68:cd:
                    33:e1:6a:28:01:47:b5:04:7f:d0:9d:af:7e:11:ff:
                    6d:5e:5c:f4:bb:a4:33:6e:92:de:e4:61:d4:35:07:
                    64:83:40:6a:33:b2:24:72:34:b6:3d:98:5d:6c:d7:
                    48:7a:f8:67:01:86:df:4d:0c:b4:b4:88:f2:46:d8:
                    c3:a7:36:9b:39:92:c8:01:8f:49:7b:81:91:a4:0a:
                    6b:30:05:d9:e3:a1:12:8f:3d:37:a7:57:e5:ae:70:
                    5c:8d:84:1e:95:fa:7e:b6:0a:ef:22:a7:db:01:96:
                    b0:36:4f:0c:18:8b:dc:1e:d9:56:7e:30:f6:d5:8f:
                    98:bf:78:7a:11:1f:fa:76:b9:c4:39:64:ba:a7:83:
                    83:78:d3:64:6a:ef:88:e2:7c:0e:87:7f:a1:6e:ce:
                    21:6a:6a:1a:56:91:90:ea:12:5c:c6:bc:61:75:5a:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FC:57:2D:4F:F2:CF:04:CC:3E:9A:3E:C4:6D:A2:2F:AD:13:B3:48
            X509v3 Authority Key Identifier:
                keyid:35:89:21:43:C4:93:B9:B2:CC:1E:79:13:3F:52:31:C7:2E:15:26:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/NYkhQ8STubLMHnkTP1Ixxy4VJoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/V_xXLU_yzwTMPpo-xG2iL60Ts0g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.250.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a4:89:b8:3e:f0:65:0d:f0:b4:cc:de:74:dd:22:9d:dd:6b:
         4b:3e:59:ff:de:cd:64:9e:4d:fd:1a:cc:b7:b5:84:8e:5f:be:
         1c:f0:14:26:e2:e6:63:dd:da:5e:1d:82:3e:b0:19:5a:9b:51:
         65:6b:09:6c:76:b8:ec:a4:fd:d4:6e:16:e9:2e:30:82:fd:78:
         37:6b:1b:b0:ae:b7:23:8a:fe:36:a4:00:eb:13:4d:0e:10:0b:
         44:75:32:5d:ba:05:f5:6f:cf:8b:62:e1:1a:49:28:64:6e:ac:
         40:0a:60:f5:97:e0:7c:9b:98:36:9c:43:13:a0:f3:ff:e5:d2:
         3c:ed:72:f2:60:ce:c6:95:8b:b3:0e:e5:c7:63:5a:75:38:6c:
         a0:d7:9b:97:ba:c4:4a:2a:78:83:a7:3b:f5:6a:91:d2:ba:f7:
         15:72:8f:e5:b0:60:54:88:62:b9:95:48:88:99:16:65:37:80:
         b9:48:49:de:b1:4d:49:50:80:1e:25:cf:58:ca:8d:08:a7:c3:
         38:40:a4:b3:b7:d9:e7:12:98:1c:87:17:b9:a1:44:59:ed:64:
         77:8c:ea:ef:e8:42:3b:d0:60:23:f7:a3:7f:06:c9:51:1d:a7:
         89:ba:6d:27:0f:ea:96:9a:75:96:7f:ad:4a:71:88:28:5a:cb:
         bd:8c:6b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 05:07:19 2024 by rpki-client on console-ams.rpki-client.org