Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/5JL_18RgDcV6HmXKvcvNgOyxL2c.roa
File:                     5JL_18RgDcV6HmXKvcvNgOyxL2c.roa (raw, json)
Hash identifier:          6iSZTWXxqxi9Rzi7LLvMdhKssgPw/zgRlsvjQZWG5hI=
Subject key identifier:   E4:92:FF:D7:C4:60:0D:C5:7A:1E:65:CA:BD:CB:CD:80:EC:B1:2F:67
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       3B
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/5JL_18RgDcV6HmXKvcvNgOyxL2c.roa
Signing time:             Mon 01 May 2023 01:29:08 +0000
ROA not before:           Mon 01 May 2023 01:29:08 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     10019
IP address blocks:        202.91.144.0/20 maxlen: 32

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: May  1 01:29:08 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=E492FFD7C4600DC57A1E65CABDCBCD80ECB12F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:f6:4f:a4:c3:ed:9f:db:b2:7f:e5:1c:bf:
                    76:8b:18:2c:ff:2d:73:cf:9e:af:a4:e0:75:87:af:
                    24:ae:2d:56:be:82:50:f1:94:75:e1:6e:df:e2:fd:
                    49:e3:e8:04:f0:85:b3:25:4a:e1:23:c0:48:d5:76:
                    f1:f7:70:03:a2:ed:49:5c:f3:e3:3c:4c:05:92:e5:
                    94:77:0a:71:a5:63:95:bd:52:72:0f:e9:d2:57:a2:
                    33:01:23:6f:1f:41:ce:89:10:f3:51:21:6f:6d:a0:
                    e2:f7:15:5d:28:97:ab:cf:01:1f:41:de:48:4b:60:
                    d4:2e:6b:ab:16:e0:ae:f7:09:08:67:6f:1e:61:d7:
                    f7:fc:db:1f:72:b9:5c:66:80:9e:aa:7f:d9:bf:aa:
                    f1:46:98:46:a9:bc:a5:f8:af:54:4b:75:fb:13:d5:
                    7c:4a:d0:f0:14:25:bc:b3:13:7f:4a:42:59:85:ea:
                    80:37:1c:76:6d:31:d5:f7:99:ce:f7:2f:b5:0a:44:
                    4c:40:1e:b7:07:4b:08:69:da:f2:40:e3:f7:b2:96:
                    7f:3e:ad:e1:91:f7:27:cf:6b:47:dd:d9:d0:ba:fd:
                    c2:de:77:26:40:b2:57:19:ba:06:50:c0:3f:81:35:
                    79:44:b6:34:16:1e:17:10:ba:26:64:d6:71:30:c7:
                    3f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:92:FF:D7:C4:60:0D:C5:7A:1E:65:CA:BD:CB:CD:80:EC:B1:2F:67
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/5JL_18RgDcV6HmXKvcvNgOyxL2c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:f0:40:ff:b3:51:fd:95:fa:2c:35:de:c7:f7:24:a0:8f:43:
         63:3f:cd:46:9a:b5:33:92:4b:56:65:ae:3d:33:14:43:ee:c1:
         88:47:45:f9:cd:9b:f9:e7:a1:10:e3:3d:84:67:13:8b:ac:5e:
         93:7a:ec:33:cc:eb:42:2c:64:25:cf:62:ce:3f:2b:61:f2:1d:
         64:b9:75:60:76:d6:52:42:36:e2:92:0f:96:b6:9f:ab:c8:a6:
         74:2d:d2:3e:bc:32:4b:22:46:43:f3:21:62:81:5d:79:5c:fc:
         52:ac:f8:9c:03:7b:66:0e:ad:1c:5d:d5:b1:48:8e:3b:c1:75:
         d9:1d:7c:ac:37:12:72:94:60:fe:62:f6:bf:ef:83:ce:e1:14:
         3f:8c:98:2d:08:89:6c:b0:7c:28:4b:e3:73:e6:b4:dc:27:5d:
         52:7d:1f:a7:f5:9f:b2:94:aa:5e:e8:f5:3d:26:7e:9d:44:d2:
         ae:6b:a3:e5:59:99:5e:e0:e5:6c:0b:9b:d7:c1:89:0e:d1:9f:
         e3:fe:4a:d0:f2:a4:f6:d9:26:ab:0d:12:e3:d8:ae:9a:94:dd:
         29:bb:e3:7e:a4:f7:e9:d5:83:d9:a0:64:a3:82:a7:9a:34:93:
         ab:ba:d9:fa:10:4f:2c:dc:97:5e:c6:63:5e:90:25:ee:4b:e5:
         60:6f:e6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org