Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/Slqv_AIY5ILUUeNHZxnxNocItDU.roa
File:                     Slqv_AIY5ILUUeNHZxnxNocItDU.roa (raw, json)
Hash identifier:          OvieWw70NciiwqNBQUozfGc5TdVeiaXnGMJhV5CSr58=
Subject key identifier:   4A:5A:AF:FC:02:18:E4:82:D4:51:E3:47:67:19:F1:36:87:08:B4:35
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       37
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Slqv_AIY5ILUUeNHZxnxNocItDU.roa
Signing time:             Mon 01 May 2023 01:29:06 +0000
ROA not before:           Mon 01 May 2023 01:29:06 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     10019
IP address blocks:        61.122.208.0/20 maxlen: 32

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: May  1 01:29:06 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=4A5AAFFC0218E482D451E3476719F1368708B435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b7:3f:42:fd:eb:01:0d:9d:69:98:d4:1f:4f:
                    50:bb:1b:79:0c:80:30:a1:6f:b6:9f:12:36:ce:e7:
                    13:cb:08:23:b4:b8:df:1e:ad:bd:97:43:4f:71:4b:
                    6d:b3:a7:67:d4:4f:d3:f7:00:ea:4d:02:ca:98:53:
                    23:a3:a6:47:4b:7b:5b:75:b8:77:ea:ab:ea:83:e9:
                    ba:60:53:c0:db:0d:65:33:af:52:2a:43:ba:14:0f:
                    4d:cb:01:69:4f:b0:c5:d6:7e:7b:6f:ec:a3:cd:bd:
                    25:3c:7e:f2:0f:10:ec:d5:d7:16:c3:ba:96:74:bf:
                    f6:f6:0a:d8:1c:1d:c6:58:df:47:bd:34:51:34:80:
                    5a:b6:27:ce:ff:1c:50:c8:ae:28:fb:57:7c:ba:48:
                    91:7d:1e:39:74:8e:fa:ad:ca:d4:71:e7:23:f7:eb:
                    44:d3:82:dc:5f:1c:35:9b:85:f7:c1:8c:ba:d9:6a:
                    9b:6e:30:de:3a:d0:4d:36:e0:fe:48:3f:ad:e7:7d:
                    68:d4:4d:77:57:d7:22:2b:62:f2:51:36:d4:05:1a:
                    f4:b3:71:81:a4:71:86:a7:6b:24:06:20:8f:4d:cd:
                    62:bf:82:51:2b:14:ae:93:2e:9f:dd:6d:02:b4:02:
                    67:4c:f6:6b:43:8b:fa:93:19:59:b7:f8:e5:80:c5:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5A:AF:FC:02:18:E4:82:D4:51:E3:47:67:19:F1:36:87:08:B4:35
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Slqv_AIY5ILUUeNHZxnxNocItDU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.122.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:7c:94:d1:24:0f:4b:dd:50:75:39:c5:c6:29:01:48:3c:f7:
         16:cb:44:a1:27:48:a0:0d:0e:43:b2:26:f7:e1:fb:5e:ec:9a:
         4f:2b:90:97:9d:53:69:69:02:a6:d3:00:61:d2:b1:d5:38:22:
         6e:06:bd:93:2a:ea:cd:63:5d:21:5b:15:cc:88:92:cf:f2:79:
         6e:94:42:57:c8:e3:88:45:4f:75:fc:7e:f9:e7:a6:bf:8b:21:
         85:ca:51:e4:46:79:d1:6f:4c:dd:93:5d:5e:12:0a:87:36:d5:
         cb:7b:55:c9:a3:72:70:5c:6c:b7:e3:21:01:cd:7b:b2:ee:b0:
         20:ab:0e:fa:51:20:6d:88:02:c7:50:e3:43:4f:13:59:e8:1d:
         49:bc:a3:d1:b5:6a:e1:ae:ca:be:61:62:0e:f0:e8:6b:f8:46:
         e4:d4:56:a7:76:fc:19:86:6c:45:e0:9c:bb:3a:e2:3c:68:85:
         f7:42:54:5f:0e:34:ba:a9:7c:6d:af:2a:1a:e7:d4:47:a2:08:
         67:49:24:31:e8:d3:64:3f:ca:b3:3c:2f:18:00:44:35:3f:66:
         73:af:bc:5b:ed:41:eb:fc:d0:a0:36:ab:8d:8d:c7:af:23:7b:
         6d:d7:06:b3:d1:5c:5d:f1:95:c5:36:b9:4c:7a:03:07:6d:53:
         ed:81:bc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org