Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/W_jJQyeAUImUtg0a9GSGLIn6bEw.roa
File:                     W_jJQyeAUImUtg0a9GSGLIn6bEw.roa (raw, json)
Hash identifier:          LF5EccKDCvmItSsKjAlc8LYqtQ8dL/RjB+kOjfIIhzQ=
Subject key identifier:   5B:F8:C9:43:27:80:50:89:94:B6:0D:1A:F4:64:86:2C:89:FA:6C:4C
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       2E
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/W_jJQyeAUImUtg0a9GSGLIn6bEw.roa
Signing time:             Fri 29 Sep 2023 06:36:56 +0000
ROA not before:           Fri 29 Sep 2023 06:36:56 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10000
IP address blocks:        218.216.0.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Sep 29 06:36:56 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=5BF8C9432780508994B60D1AF464862C89FA6C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:8d:3a:b9:38:99:2f:c9:36:cd:84:b4:6e:
                    69:5a:bf:e6:6f:3a:9c:fc:c1:f1:6c:35:54:9c:a0:
                    6c:b6:22:a6:28:84:d9:3b:87:14:66:b0:5b:41:d5:
                    48:da:87:01:bc:90:c9:9a:97:cb:54:2c:ad:87:9f:
                    14:90:6f:34:13:00:73:f9:81:88:32:02:fe:59:45:
                    39:b7:d5:7a:f9:7e:47:70:d6:f7:a7:9a:fb:06:27:
                    e2:2d:b8:87:10:b0:bd:9b:33:e5:8c:01:af:06:d9:
                    6e:c2:b2:fc:39:54:c6:69:af:89:8c:54:a6:b9:bf:
                    b7:30:11:56:ed:14:e1:2e:18:1f:18:45:16:62:7c:
                    29:6a:f9:f3:97:b6:36:5b:05:d9:e5:59:a1:c3:78:
                    cb:f0:df:f7:5a:81:94:c5:64:d3:6e:a0:a2:fe:3c:
                    ce:4d:93:33:ae:15:c2:1f:b0:ac:1c:62:c7:7b:f3:
                    81:b2:06:f3:8d:96:03:50:73:2d:22:37:36:cf:a0:
                    7a:bb:d9:03:5d:2b:af:48:5b:18:87:51:60:15:30:
                    8c:d5:80:1a:02:19:b4:50:83:84:54:4e:38:2e:f7:
                    3e:b5:67:eb:f1:12:b3:a6:46:48:9b:0b:00:16:54:
                    de:e4:eb:82:a4:26:ff:e2:1d:93:a6:c2:98:f2:3e:
                    e0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F8:C9:43:27:80:50:89:94:B6:0D:1A:F4:64:86:2C:89:FA:6C:4C
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/W_jJQyeAUImUtg0a9GSGLIn6bEw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:29:82:4e:c4:78:13:60:a2:19:fc:8c:f3:8d:55:b0:47:15:
         d7:4a:4b:c9:28:14:40:ee:bd:7f:35:c2:69:97:65:e0:5d:74:
         df:b2:8f:27:68:35:b2:12:a6:33:a3:0c:b6:b0:14:9f:b1:c0:
         13:c3:f1:80:52:e5:d1:72:13:98:1f:b2:79:b9:82:1e:54:f1:
         ee:3b:15:84:0e:54:b3:5f:0c:a2:aa:26:44:bf:8d:4e:24:a5:
         ef:03:66:bd:45:63:16:6a:2d:e2:df:36:63:b8:0c:f6:47:d0:
         c1:6b:75:0b:be:2f:9f:a3:73:1c:61:9a:65:2a:6d:f5:9b:9f:
         d6:31:b9:5a:b1:f3:b4:03:1d:9f:64:72:9a:24:b4:61:43:a3:
         3b:11:f6:de:00:ee:34:83:09:a4:59:2d:7c:03:78:ed:49:56:
         ee:e4:56:50:70:a9:8b:fc:bb:aa:6d:16:08:a8:09:86:48:20:
         52:65:13:33:a0:a2:2f:76:4a:f6:b1:6d:79:3b:21:ac:cc:fd:
         c2:f8:fc:ad:3f:79:25:17:23:96:97:ff:2a:17:13:df:53:62:
         6f:56:70:12:5e:27:d4:50:bd:d2:28:92:3e:ad:6e:d4:a3:b5:
         45:33:0b:9d:2f:ea:7d:17:81:a5:c2:6d:70:73:30:d6:fc:d1:
         a9:db:69:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org