Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/eRvWZ2Z8ofI_FZgsDceW1UH74oY.roa
File:                     eRvWZ2Z8ofI_FZgsDceW1UH74oY.roa (raw, json)
Hash identifier:          IgRaZnt9zRlCo04t35fZ+81i2mWkSS8LgJf/7+eqv6I=
Subject key identifier:   79:1B:D6:67:66:7C:A1:F2:3F:15:98:2C:0D:C7:96:D5:41:FB:E2:86
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       3D
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/eRvWZ2Z8ofI_FZgsDceW1UH74oY.roa
Signing time:             Mon 01 May 2023 01:29:08 +0000
ROA not before:           Mon 01 May 2023 01:29:08 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     10019
IP address blocks:        218.45.32.0/20 maxlen: 32

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: May  1 01:29:08 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=791BD667667CA1F23F15982C0DC796D541FBE286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:54:6e:91:3f:17:e8:06:92:66:fa:44:2a:da:
                    02:2c:03:0e:88:ec:cb:93:2a:93:f4:1d:53:e0:eb:
                    fd:d8:6d:bc:96:94:67:20:d6:4c:d2:75:50:83:d6:
                    d1:d3:db:33:69:63:b4:9f:33:f9:79:b7:fc:a1:1c:
                    bd:b7:84:df:e0:3f:2a:c6:80:2c:5d:01:e9:55:e1:
                    88:9c:2f:4a:d9:35:47:24:12:4e:28:7c:39:31:1f:
                    0c:6f:ad:c0:29:fc:55:0a:d1:3b:4e:94:f6:40:e2:
                    e8:24:37:a7:e6:6e:94:3a:4a:2f:d9:47:cb:12:05:
                    29:34:0c:4f:79:0e:65:4f:42:e7:06:87:6c:3a:03:
                    c3:4c:f2:1b:f7:eb:8b:b9:1b:ee:ff:57:55:f5:00:
                    d7:f9:fd:a0:f5:bb:8d:ed:bb:92:25:a8:c2:dd:22:
                    2c:85:b9:4f:8b:f9:fd:a2:01:49:5a:51:cb:aa:49:
                    60:76:97:27:0b:67:e0:f8:70:5b:bd:b7:b7:5e:a6:
                    5e:80:f8:78:70:11:8f:b5:56:fc:4b:4b:5c:cb:f3:
                    c5:61:6e:7e:2f:e1:f1:7f:f6:42:18:20:28:ea:eb:
                    ee:d4:cb:30:2b:e4:f2:73:00:c0:ef:cb:6a:c3:7e:
                    69:46:4e:c8:97:62:70:d5:44:47:35:25:d5:e8:76:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1B:D6:67:66:7C:A1:F2:3F:15:98:2C:0D:C7:96:D5:41:FB:E2:86
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/eRvWZ2Z8ofI_FZgsDceW1UH74oY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:96:74:c7:c4:f3:1f:ca:50:ee:24:63:fc:d1:b9:a7:67:d2:
         93:6f:07:54:59:ff:cd:60:eb:57:ac:f7:fd:51:d7:08:ac:42:
         5b:75:06:d8:73:8f:59:2d:6f:73:bb:e2:67:e8:7f:3e:6c:a5:
         40:16:28:d8:6c:d7:a6:f7:c1:df:61:e2:cc:f3:75:4e:27:69:
         ec:c2:28:09:db:87:1d:1d:7b:28:60:54:fe:d8:bf:fe:ec:d5:
         77:7c:59:aa:85:77:cd:57:a6:98:a1:ef:67:0b:30:1f:90:fe:
         01:80:eb:4b:aa:c2:3a:2e:75:33:14:57:a0:f6:81:d3:97:61:
         72:bb:ff:d7:79:d0:ad:ac:ff:84:b8:18:75:4e:22:b4:ed:9d:
         f1:6a:f7:ef:f7:93:63:54:3c:76:f6:11:7b:d6:24:7e:9b:7e:
         df:84:88:52:17:d4:ed:e5:7b:20:66:37:e0:f7:6b:7c:8a:3c:
         1d:9a:59:92:16:9c:d9:22:53:8c:5a:60:30:7b:0e:61:39:8d:
         f9:03:fa:c4:ed:d6:ba:1d:15:f4:b9:c7:64:c8:a7:f9:27:f1:
         61:93:70:6c:4e:94:c1:1b:8c:81:10:d6:98:cd:86:1a:0e:f3:
         e4:81:4f:d4:f0:35:79:75:c7:0d:be:0a:1e:a2:e6:20:a8:35:
         49:c0:37:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org