Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/oHXV37Dp-EBGoqGLvDxkeo0tVSQ.roa
File:                     oHXV37Dp-EBGoqGLvDxkeo0tVSQ.roa (raw, json)
Hash identifier:          RZEOuuYm5KnlI9gqCqvI6h+4Vzz8nicFhyOeghN7h3g=
Subject key identifier:   A0:75:D5:DF:B0:E9:F8:40:46:A2:A1:8B:BC:3C:64:7A:8D:2D:55:24
Certificate issuer:       /CN=85FE0FA704460AA4FAEF8FA8CA609F00C4CDE008
Certificate serial:       10
Authority key identifier: 85:FE:0F:A7:04:46:0A:A4:FA:EF:8F:A8:CA:60:9F:00:C4:CD:E0:08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/oHXV37Dp-EBGoqGLvDxkeo0tVSQ.roa
Signing time:             Sun 01 Oct 2023 01:29:06 +0000
ROA not before:           Sun 01 Oct 2023 01:29:06 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2518
IP address blocks:        133.200.0.0/13 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85FE0FA704460AA4FAEF8FA8CA609F00C4CDE008
        Validity
            Not Before: Oct  1 01:29:06 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A075D5DFB0E9F84046A2A18BBC3C647A8D2D5524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:cf:04:a3:d0:05:b8:c0:a4:ff:34:b5:30:
                    d8:23:8b:9f:dd:b4:d2:57:39:6f:8f:b5:d1:ea:24:
                    41:39:75:25:ce:e8:b9:83:db:c5:36:52:c5:91:72:
                    8b:49:3c:13:8f:62:94:af:4c:ac:a8:21:5f:72:61:
                    15:e7:67:03:48:50:91:4b:a4:48:5b:59:e5:82:4f:
                    52:b2:fb:34:f7:c9:00:3a:3c:57:95:cc:9e:e3:b9:
                    21:57:12:b1:30:ae:9b:d9:ba:e8:ca:b0:a5:30:74:
                    18:f8:84:b8:81:03:b0:67:7e:52:b8:ea:2e:45:ff:
                    9f:ad:8b:aa:94:a3:e4:6b:bb:8e:fa:89:76:9d:29:
                    df:fc:0b:f5:e3:bc:2c:fc:e3:cf:e4:2a:61:09:21:
                    6b:30:ae:8f:7f:99:df:8c:30:24:eb:4a:25:7c:9e:
                    30:49:b5:e4:53:69:31:a0:50:0e:c3:0c:8a:47:cf:
                    95:67:ba:1a:2d:20:07:4b:95:9e:85:98:d1:a2:76:
                    a9:8c:3c:b7:33:dd:80:8f:4d:6d:18:cd:09:15:79:
                    9d:9b:22:2d:33:88:b2:83:ad:12:55:59:c8:a3:13:
                    bf:f8:68:c9:28:e1:61:6e:9b:a4:e6:0d:31:f8:30:
                    c4:10:1a:f3:93:0c:48:2f:39:d6:aa:57:4d:e4:09:
                    7f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:75:D5:DF:B0:E9:F8:40:46:A2:A1:8B:BC:3C:64:7A:8D:2D:55:24
            X509v3 Authority Key Identifier:
                keyid:85:FE:0F:A7:04:46:0A:A4:FA:EF:8F:A8:CA:60:9F:00:C4:CD:E0:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/oHXV37Dp-EBGoqGLvDxkeo0tVSQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.200.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         db:ca:42:45:64:71:25:b1:c7:36:da:30:f1:fb:63:74:f2:9e:
         53:b8:ef:f0:71:bf:9a:99:d7:6c:c7:81:ab:00:63:45:71:7c:
         ff:b1:e6:e1:3c:c2:a8:fc:81:04:5b:09:db:61:f6:08:4d:fa:
         c7:10:cb:24:ed:54:ca:4e:e3:ac:38:8d:26:dc:07:7d:0e:b4:
         e2:c1:38:bb:39:0d:84:b2:fb:76:7e:90:a1:fb:34:8f:be:7a:
         81:dd:e8:9e:50:46:5c:0d:41:f2:fb:0c:1e:2d:ed:dc:8e:83:
         91:04:ba:c2:04:39:9c:d5:30:61:8c:d8:99:0f:62:fb:cc:16:
         f8:e3:a5:50:83:a9:91:39:94:5b:fb:61:b9:6a:e4:01:73:3a:
         4c:a7:18:f4:f3:1d:c0:f6:9c:34:83:e4:eb:42:f6:a1:59:8f:
         e6:81:58:c4:dd:6c:c7:a1:e1:0e:e9:6b:b9:9e:77:1b:9d:b7:
         41:fb:76:81:46:2c:63:67:9c:f2:2a:91:c7:f4:81:6d:e1:72:
         ba:3e:49:74:2e:4c:10:6f:ee:2f:bd:6d:d5:95:b7:59:3e:1e:
         ed:24:07:85:bc:0f:ac:be:5b:ac:48:95:ee:ec:21:67:c2:31:
         3d:29:27:55:21:cc:d4:b8:14:af:8b:ca:51:76:90:44:86:e5:
         ce:ec:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org