Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/KbfnlODOR5R3nIrWOKrb-5jMhXQ.roa
File:                     KbfnlODOR5R3nIrWOKrb-5jMhXQ.roa (raw, json)
Hash identifier:          Ye7trCuPGu209oOfCLfBVIP/SXDbzAjqlbslOm2DAVc=
Subject key identifier:   29:B7:E7:94:E0:CE:47:94:77:9C:8A:D6:38:AA:DB:FB:98:CC:85:74
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       0D
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/KbfnlODOR5R3nIrWOKrb-5jMhXQ.roa
Signing time:             Fri 18 Aug 2023 02:28:16 +0000
ROA not before:           Fri 18 Aug 2023 02:28:16 +0000
ROA not after:            Sat 17 Aug 2024 02:01:09 +0000
asID:                     9597
IP address blocks:        180.235.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Sat 03 Aug 2024 02:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug 18 02:28:16 2023 GMT
            Not After : Aug 17 02:01:09 2024 GMT
        Subject: CN=29B7E794E0CE4794779C8AD638AADBFB98CC8574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:5a:04:24:b2:41:72:e7:39:d5:75:1c:16:
                    8b:dc:d3:1c:e2:75:35:1a:dc:a3:55:82:f3:f7:45:
                    01:8c:0a:3a:23:84:b4:47:52:b2:3b:6f:29:fe:50:
                    5e:80:7c:a3:a9:0c:be:b7:00:b6:8d:51:25:80:1d:
                    9c:e7:04:74:21:3b:e9:60:87:af:6b:15:23:63:9b:
                    56:53:88:f2:51:1f:c8:05:3a:40:71:61:e7:b6:73:
                    ae:0e:d9:27:da:3c:f2:71:0b:28:93:d3:00:62:5b:
                    0e:bb:a3:52:d1:3b:d6:7b:36:3d:20:45:dc:6e:2a:
                    6f:92:4d:15:e0:ea:92:5b:5e:58:a2:92:97:d1:34:
                    2f:60:be:d5:4c:87:41:c6:83:9c:f4:34:ff:e8:65:
                    76:38:e8:de:b5:56:b6:34:ba:1b:32:ba:f1:70:e0:
                    47:0f:72:6b:d8:ad:f8:76:6c:e9:95:ef:9d:c4:33:
                    43:4b:4c:2e:32:09:72:79:6b:24:e7:8e:0f:0e:85:
                    47:62:1c:8d:15:bb:2b:fc:5b:83:3e:46:1d:4b:b0:
                    12:b3:42:a3:57:34:26:a6:32:3e:d7:4c:ef:71:d3:
                    73:63:01:49:f1:a2:eb:d7:c3:8c:4d:2a:6f:14:6c:
                    1f:44:de:f5:34:57:d6:31:ee:e1:f7:b8:1e:c5:6d:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B7:E7:94:E0:CE:47:94:77:9C:8A:D6:38:AA:DB:FB:98:CC:85:74
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/KbfnlODOR5R3nIrWOKrb-5jMhXQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.235.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:cd:1e:34:dc:30:a3:c9:b9:6d:89:47:aa:40:c0:61:08:2c:
         23:6a:66:e7:79:8d:81:26:88:16:6e:98:74:cb:38:74:71:a0:
         b8:4f:ab:96:b0:50:eb:85:db:01:dd:6b:61:31:94:11:a3:59:
         43:a5:df:98:fc:30:b7:8d:72:f4:7b:b0:90:29:e0:1a:3b:07:
         07:03:90:7f:14:e9:0e:a2:dd:1d:e4:7e:9f:07:f9:45:a7:49:
         02:6f:40:da:de:d4:5c:1f:9f:cb:e7:64:dd:b4:96:a6:8b:f6:
         1f:00:f4:11:54:ae:44:00:ed:5e:bd:38:b5:5e:9c:d0:ba:45:
         a0:8b:b6:8b:6a:e3:d1:cc:82:1d:71:42:fe:8a:75:2f:6e:0a:
         a6:3b:b1:44:71:dc:90:e3:f1:f2:77:47:a1:0e:4e:d6:06:64:
         37:3a:5a:65:1c:02:0f:5d:67:00:a2:c7:85:71:13:1f:d5:a7:
         d1:02:56:7c:54:03:d4:74:fe:ac:d0:8e:56:13:75:19:9d:ba:
         3c:c2:85:ee:91:3d:cd:83:3d:3d:a4:88:3b:a8:7c:4e:09:93:
         1e:11:23:a1:27:55:73:3a:ac:87:67:77:d0:ba:af:9f:20:c2:
         47:96:d0:bd:36:c8:22:59:99:00:fd:b2:ee:5b:79:6b:7d:5d:
         e3:32:91:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 04:43:56 2024 by rpki-client on console-fra.rpki-client.org