Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/uwyXM9T06g5wfEJt8nOp0v9CUY4.roa
File:                     uwyXM9T06g5wfEJt8nOp0v9CUY4.roa (raw, json)
Hash identifier:          SMnU2p8L+NtFjmVMGxgK6ls1myPsrxwba/1dvPlWyFo=
Subject key identifier:   BB:0C:97:33:D4:F4:EA:0E:70:7C:42:6D:F2:73:A9:D2:FF:42:51:8E
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       2A
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/uwyXM9T06g5wfEJt8nOp0v9CUY4.roa
Signing time:             Fri 29 Sep 2023 06:36:55 +0000
ROA not before:           Fri 29 Sep 2023 06:36:55 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10000
IP address blocks:        203.129.96.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Sep 29 06:36:55 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=BB0C9733D4F4EA0E707C426DF273A9D2FF42518E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:20:b8:44:e3:41:61:91:38:72:1a:34:e2:
                    73:f9:5f:d6:cd:31:f9:ac:7c:29:cb:14:e4:2d:cb:
                    ce:7c:53:6b:42:ff:99:37:48:8e:c8:23:f6:3b:db:
                    ae:86:0c:17:4b:e9:e3:eb:99:dd:33:d8:43:70:d7:
                    97:aa:6e:66:28:e7:3c:c2:cb:01:d7:92:be:c9:da:
                    5f:69:4e:95:7a:57:67:e8:79:bb:69:b7:d9:4a:0e:
                    90:0e:b1:4b:bc:36:6b:c5:40:aa:21:d1:1c:99:87:
                    fa:09:8e:e0:73:bf:d4:be:90:04:56:b9:40:c6:c6:
                    5e:5e:e3:af:33:2d:d3:a7:68:26:b0:3c:f0:ed:b0:
                    1e:ad:8c:af:c3:ab:e4:17:27:a5:d5:aa:d0:3b:7d:
                    45:b3:76:d4:85:47:fb:13:a2:e3:1d:15:ee:ed:d2:
                    29:24:6d:59:40:48:c0:75:ce:fc:f5:93:30:da:6d:
                    ec:dc:34:34:72:a7:59:54:46:a0:15:d3:39:3b:52:
                    04:64:e5:ed:8c:cf:6b:c2:97:19:a7:88:ce:8f:fe:
                    e0:12:1b:aa:d2:dc:4f:88:7b:49:8c:80:0c:a6:a1:
                    69:db:ab:9c:63:88:38:0e:03:57:e1:43:00:50:8b:
                    8b:a4:8b:de:8a:53:d7:7a:7a:54:4a:c9:e3:76:7d:
                    62:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0C:97:33:D4:F4:EA:0E:70:7C:42:6D:F2:73:A9:D2:FF:42:51:8E
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/uwyXM9T06g5wfEJt8nOp0v9CUY4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:02:da:8f:09:57:bc:df:7b:4c:a5:06:21:fd:5e:45:5f:88:
         ac:23:76:05:fd:81:f1:8b:30:b7:54:f2:a6:b5:e8:3f:b8:1d:
         1f:d1:41:47:7e:75:2b:80:52:fb:75:fb:95:91:7c:41:0b:7f:
         34:3b:12:57:1c:52:7d:54:40:31:26:c2:e0:27:0c:cf:7c:bc:
         a9:b9:02:88:fa:4a:39:59:93:34:27:c8:c7:0d:46:5b:67:04:
         5d:5d:86:c7:7e:a7:2a:92:6b:4a:e1:55:5e:00:aa:19:8f:7a:
         62:03:2c:ae:99:fb:e6:91:6b:89:a7:1a:bb:5c:a1:43:35:cf:
         bd:49:ed:c5:15:63:17:2e:05:50:fb:dc:24:38:d0:c8:85:9c:
         1c:5d:81:f9:73:3f:e8:35:c3:c5:e7:a3:60:bb:99:a8:ad:a7:
         aa:11:bd:fb:ea:26:d8:5d:0a:58:06:40:64:de:1d:5a:2e:f0:
         0a:8e:2a:f0:c9:22:bf:0d:be:ea:5a:93:e9:fd:61:ce:a6:58:
         70:0a:7a:cd:91:ea:a3:4c:79:6b:06:d7:57:0f:2f:9c:f5:d8:
         35:4c:8c:c3:f4:73:89:93:34:bd:bd:ef:6e:9a:78:67:a6:11:
         5a:97:d7:f6:51:08:1d:a3:43:46:05:47:a8:60:6b:b3:2f:ae:
         9d:1b:08:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org