Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/TTxToM4lIegbyibe3PLoyxkW3Gw.roa
File:                     TTxToM4lIegbyibe3PLoyxkW3Gw.roa (raw, json)
Hash identifier:          6r1RB9WOdvoTuUvE34SsXvM84LFm3Tve86y4bzS1FWg=
Subject key identifier:   4D:3C:53:A0:CE:25:21:E8:1B:CA:26:DE:DC:F2:E8:CB:19:16:DC:6C
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       50
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/TTxToM4lIegbyibe3PLoyxkW3Gw.roa
Signing time:             Tue 04 Jul 2023 00:43:48 +0000
ROA not before:           Tue 04 Jul 2023 00:43:48 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9622
IP address blocks:        103.24.168.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Jul  4 00:43:48 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=4D3C53A0CE2521E81BCA26DEDCF2E8CB1916DC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:75:57:fe:0c:ab:30:f9:0f:8d:40:35:b4:
                    f0:15:87:e1:2e:40:e2:9a:d2:5c:a3:0b:60:1b:3b:
                    d5:06:b1:af:91:e4:0d:cf:a9:6f:2b:d5:50:09:5f:
                    c2:54:f8:30:cf:08:ee:4f:3a:eb:b9:09:01:1a:6a:
                    12:2c:20:da:be:fa:59:fa:0b:40:4a:48:d5:28:8f:
                    50:1a:ea:b1:c3:e9:1d:b7:3c:8c:4e:31:ae:34:e0:
                    90:43:27:f9:44:c9:13:66:f5:75:c6:0b:1a:30:8c:
                    c6:59:42:e7:f1:8c:06:19:54:50:70:cd:95:ca:ea:
                    33:9e:af:fb:b0:12:e0:73:c4:5b:0a:41:68:ac:6d:
                    bc:b8:1e:45:4b:24:98:46:4a:6e:73:32:6d:2a:76:
                    5f:3d:67:96:9c:98:a6:90:6e:d3:2e:80:f1:e7:42:
                    fb:99:28:cf:8d:d7:0b:2b:63:aa:00:33:e2:a9:ab:
                    c7:d0:d3:58:ef:ab:8e:40:df:dd:d5:bb:a2:7f:8f:
                    67:7f:96:53:f2:36:94:8a:3f:e1:2e:b2:7e:76:93:
                    91:b1:75:18:d4:6c:b5:a2:97:90:33:14:7b:23:c0:
                    37:a2:15:64:96:ca:30:1d:4c:57:f9:11:01:cd:bb:
                    33:6a:48:47:fc:e2:69:40:6d:a4:49:71:55:0a:ec:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3C:53:A0:CE:25:21:E8:1B:CA:26:DE:DC:F2:E8:CB:19:16:DC:6C
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/TTxToM4lIegbyibe3PLoyxkW3Gw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:da:4e:0c:38:37:b4:cc:51:8e:53:d6:a5:6d:37:a9:52:b3:
         b2:62:aa:86:9d:31:74:80:1d:22:05:e8:4b:b4:83:76:0a:bb:
         b1:82:10:0e:7f:f6:74:bb:94:5e:4d:86:94:b7:d3:71:0d:85:
         0e:2f:c2:ed:e4:4b:95:ea:20:83:7b:17:c7:22:4f:0f:13:34:
         b2:6d:42:bb:b1:cb:b8:36:05:50:52:a8:c3:4d:b0:1a:77:02:
         f0:12:1c:2d:0a:8a:c4:6d:53:fe:8d:9d:6e:6b:ed:10:72:81:
         a9:b9:3e:a8:a5:26:c3:a7:18:15:0b:b1:c4:36:2f:30:44:49:
         8a:ef:69:e2:43:06:9c:14:0c:11:09:85:7a:d1:b9:0f:2d:75:
         2f:b5:e8:38:20:32:b3:7c:df:25:33:08:d6:b8:9f:40:a8:16:
         80:b1:cb:fe:70:a7:ea:fc:da:4b:e6:78:72:70:7d:29:89:83:
         fc:0a:94:8e:0f:50:82:dd:6b:fb:ad:75:69:f6:91:80:27:91:
         12:0c:12:3a:75:59:56:e9:98:fe:38:6e:db:39:4e:89:13:7e:
         36:76:25:a3:43:94:97:29:4f:74:77:71:8a:02:ec:6f:18:b3:
         d3:1d:af:a3:ef:28:d1:d2:8a:f4:b6:63:08:a3:20:25:9c:94:
         b3:7a:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org