Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/IGkUfOcSG0fqzCIpFt2mkp48HtM.roa
File:                     IGkUfOcSG0fqzCIpFt2mkp48HtM.roa (raw, json)
Hash identifier:          T+2vQHYqiyHA9QPKWtZnI4/KpQNEHf3uLmM65uSA9aA=
Subject key identifier:   20:69:14:7C:E7:12:1B:47:EA:CC:22:29:16:DD:A6:92:9E:3C:1E:D3
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       0E
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/IGkUfOcSG0fqzCIpFt2mkp48HtM.roa
Signing time:             Fri 18 Aug 2023 02:28:17 +0000
ROA not before:           Fri 18 Aug 2023 02:28:17 +0000
ROA not after:            Sat 17 Aug 2024 02:01:09 +0000
asID:                     9597
IP address blocks:        202.133.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Sat 03 Aug 2024 02:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug 18 02:28:17 2023 GMT
            Not After : Aug 17 02:01:09 2024 GMT
        Subject: CN=2069147CE7121B47EACC222916DDA6929E3C1ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:20:f5:ea:d8:08:95:82:25:61:54:f3:60:fa:
                    1c:b9:0b:cb:ff:93:b0:5d:d7:f6:7d:5a:a8:af:0e:
                    3c:5b:61:35:f8:21:39:90:e2:85:35:a0:d1:8a:c8:
                    09:66:5e:50:b8:71:e4:85:a6:05:1d:a9:8f:b4:3f:
                    e5:16:de:0f:bb:40:00:0c:8f:09:56:e5:f2:9e:5f:
                    c4:f3:e8:05:9b:dc:7f:ec:3a:74:08:fe:9c:5b:7d:
                    fd:03:f2:b4:6d:36:00:1d:23:85:db:b5:39:b6:64:
                    4f:8c:a8:74:64:5a:7f:5a:93:b5:26:5a:bb:c5:e3:
                    48:92:27:8b:f1:bb:3c:dd:ee:cd:d6:4a:1d:8f:58:
                    f7:ce:63:4e:c3:9d:9b:b1:92:a7:26:94:28:38:58:
                    c9:ea:d1:c8:44:0c:f7:f1:b2:60:e9:ad:3a:d0:b7:
                    8a:83:3d:15:e4:83:bb:2d:32:43:67:d5:d3:1b:d7:
                    54:de:e9:33:5f:06:0a:27:86:7e:b8:02:e8:c0:0d:
                    76:2e:67:d7:e2:46:77:37:2b:ef:a9:cc:06:6c:ae:
                    5f:14:23:43:96:01:39:3e:fb:84:19:36:90:57:2b:
                    16:37:7f:76:32:5c:14:7e:63:06:a2:73:ed:25:dc:
                    dc:b4:0c:c0:ec:8c:97:7e:0d:0f:16:fb:e7:01:b2:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:69:14:7C:E7:12:1B:47:EA:CC:22:29:16:DD:A6:92:9E:3C:1E:D3
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/IGkUfOcSG0fqzCIpFt2mkp48HtM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.133.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:d3:10:88:5d:77:74:bd:55:a0:82:40:c3:27:30:15:b2:40:
         62:17:50:14:d4:42:32:7e:48:73:78:93:f3:87:11:5d:85:3f:
         ce:4c:32:f6:52:95:e4:91:c4:b4:5a:c8:de:10:b9:d6:f8:1a:
         af:98:98:eb:97:f7:ff:4c:24:b3:1d:fc:b9:c4:eb:a7:d4:83:
         a5:0f:c8:c2:32:c4:e8:4b:ed:5a:f8:f3:70:81:b2:ff:27:f2:
         08:03:77:0b:f4:a5:0c:1b:8e:20:42:62:52:53:61:7e:d4:2d:
         b4:33:66:53:1c:bd:fd:8b:43:5e:8a:73:1a:44:57:37:11:9d:
         60:cd:37:c0:92:82:c0:d2:f0:63:a9:bd:b1:e1:a0:27:e1:44:
         7a:0a:70:da:8e:b2:e6:86:af:be:45:aa:1b:e1:0a:c8:35:1d:
         7e:64:06:14:39:25:54:81:61:2f:27:d2:ca:14:04:01:94:b5:
         15:81:17:81:c0:71:21:ae:58:5b:10:4d:e3:85:30:b8:8e:ae:
         b3:d4:d7:d9:78:b7:53:70:bb:44:3b:bf:69:eb:55:0f:4a:3c:
         90:b7:2c:92:d7:6f:48:ed:c8:10:15:c1:4e:51:7f:9a:17:05:
         f6:fd:9b:a1:50:3f:0b:bb:46:58:2e:14:bb:62:7d:16:55:e0:
         08:d8:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 04:02:58 2024 by rpki-client on console-ams.rpki-client.org