Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/tpD3lA5TBgouN8_Qt5mYsIjiyUc.roa
File:                     tpD3lA5TBgouN8_Qt5mYsIjiyUc.roa (raw, json)
Hash identifier:          r8E9c5LqMXfj3HxZ6vGLzvGWSj38KBpGqoHOtXAK7Vk=
Subject key identifier:   B6:90:F7:94:0E:53:06:0A:2E:37:CF:D0:B7:99:98:B0:88:E2:C9:47
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       3F
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/tpD3lA5TBgouN8_Qt5mYsIjiyUc.roa
Signing time:             Mon 01 May 2023 01:29:09 +0000
ROA not before:           Mon 01 May 2023 01:29:09 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     10019
IP address blocks:        219.105.176.0/20 maxlen: 32

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: May  1 01:29:09 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=B690F7940E53060A2E37CFD0B79998B088E2C947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a6:77:d6:51:a4:1a:f7:9d:ee:7f:c4:38:9e:
                    ce:e7:15:c5:8d:bc:5f:21:44:e9:f7:06:53:99:d7:
                    64:63:16:ea:4f:c6:f7:7e:de:ca:a2:63:ea:8a:01:
                    fd:a2:a0:25:07:f6:69:d0:ab:ca:a3:00:13:44:dc:
                    42:72:ec:48:9a:e7:a3:1d:78:4f:e2:39:0a:72:68:
                    a4:f4:af:c5:14:49:dd:bf:78:c4:fe:93:25:de:4e:
                    96:f7:a2:3d:b9:44:99:0a:03:4b:14:60:7d:f8:7e:
                    76:27:ee:73:95:7f:71:ec:28:a6:76:73:f4:da:d7:
                    1f:cf:0a:bf:64:7b:78:ea:d5:c6:a7:40:84:2d:e8:
                    f6:ea:b1:c3:0c:4d:65:a4:4c:a9:b3:43:d3:0f:13:
                    c1:57:98:76:d0:84:d3:b1:6a:53:af:ed:83:b6:b7:
                    50:6d:da:b8:d4:3f:f4:2a:af:19:ea:c9:f3:c3:12:
                    74:2f:cc:ef:0e:d8:24:cf:2c:10:9f:f8:1b:6d:6e:
                    c1:e8:fa:e2:d5:55:2c:8c:3e:04:ee:01:d9:94:e0:
                    8f:0b:00:b4:0d:d4:f6:76:e8:af:ca:2b:2c:d7:ed:
                    f6:9d:2c:10:e3:81:94:5f:3b:04:6b:73:da:df:e2:
                    d2:42:dd:67:77:ee:e8:9c:87:55:63:2d:10:df:60:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:90:F7:94:0E:53:06:0A:2E:37:CF:D0:B7:99:98:B0:88:E2:C9:47
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/tpD3lA5TBgouN8_Qt5mYsIjiyUc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:46:c1:73:54:28:cb:44:f5:29:76:0e:79:a1:53:1f:31:c0:
         4b:e3:db:f1:9a:8f:87:88:ff:4f:97:02:fb:30:de:5c:ff:b8:
         48:25:b5:9d:21:a4:08:92:b6:04:38:95:e2:1e:41:aa:f3:fb:
         90:12:0d:77:c4:bd:68:09:d4:ac:ed:47:4f:20:8c:30:de:27:
         b9:35:5f:4d:7f:7c:70:da:22:62:87:da:e1:0b:0f:05:02:a1:
         73:39:d8:15:84:e7:7f:81:72:ae:3b:71:4f:32:3f:42:07:d9:
         a4:3d:ee:90:8a:63:39:e9:a0:26:09:f7:0b:70:80:36:3f:4b:
         c9:34:a4:f4:0c:e4:df:42:64:02:5e:62:be:88:80:6e:be:4a:
         72:de:21:a0:67:cb:55:5e:42:9b:d2:2f:81:6e:32:f1:6e:5f:
         e4:d5:a6:3c:9d:1d:4f:a2:fd:25:e0:28:e2:9b:b0:0f:3f:06:
         ee:cc:f4:36:53:c9:17:3f:bd:19:6c:0a:f1:84:6b:08:bf:87:
         8d:df:c4:b8:0a:6b:a1:f9:24:07:55:8b:74:ca:9c:d6:12:68:
         01:30:50:bc:29:ed:5b:aa:06:48:e5:b9:e2:6a:95:a5:88:49:
         c9:ee:60:3f:72:bd:08:04:45:79:59:c9:66:99:a3:fd:a2:16:
         1b:1c:53:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org