Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/fRXkMMgjc7ZhjRiueEn_DQgoAcA.roa
File:                     fRXkMMgjc7ZhjRiueEn_DQgoAcA.roa (raw, json)
Hash identifier:          ZdyAmhSpIRgDkXL42tWmNK2AaVBopFBU6fjvZztNC5I=
Subject key identifier:   7D:15:E4:30:C8:23:73:B6:61:8D:18:AE:78:49:FF:0D:08:28:01:C0
Certificate issuer:       /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Certificate serial:       14
Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/fRXkMMgjc7ZhjRiueEn_DQgoAcA.roa
Signing time:             Wed 27 Sep 2023 04:29:50 +0000
ROA not before:           Wed 27 Sep 2023 04:29:50 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     55376
IP address blocks:        103.136.138.0/23 maxlen: 32

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
        Validity
            Not Before: Sep 27 04:29:50 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7D15E430C82373B6618D18AE7849FF0D082801C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7f:6e:29:bd:de:af:da:60:3f:ca:a9:55:a3:
                    dc:7a:e4:cf:33:22:cc:0b:95:9f:5b:d3:db:e6:a6:
                    7f:3b:35:00:54:cf:2b:49:09:62:ab:3d:dd:90:b0:
                    6b:e8:75:24:d2:30:22:72:a7:41:55:c3:7b:56:0f:
                    d9:a4:33:43:5a:dd:c2:53:3c:b1:fa:74:42:85:65:
                    0f:48:1a:1a:fe:84:6e:68:90:df:af:fb:5c:fd:20:
                    47:cb:dc:2e:64:8e:d3:f6:07:1d:04:7d:79:7b:30:
                    3d:c7:22:a5:3a:10:42:33:37:b8:16:7c:5d:44:5b:
                    71:74:44:e3:45:b2:a4:f8:f7:cd:ad:b0:75:14:6a:
                    00:46:90:ff:5b:fe:02:ee:6e:a8:10:40:26:31:0a:
                    6d:55:7b:1d:eb:77:88:d0:dd:a0:ad:18:23:f0:93:
                    8c:eb:10:d2:33:e6:1e:5f:85:e6:82:5f:fc:6e:c6:
                    75:aa:a0:75:29:6e:d7:ad:03:f3:ef:1f:3c:7e:17:
                    ef:3c:cf:35:08:65:6f:83:52:dc:70:e6:c0:91:fd:
                    9a:bd:1b:3f:42:ef:45:de:c8:68:ea:74:86:46:7e:
                    35:bf:d0:fe:4c:01:e5:f1:8a:ad:7f:1b:00:b3:b4:
                    f8:d3:14:26:4d:81:0e:39:b0:91:a8:9f:91:25:34:
                    f3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:E4:30:C8:23:73:B6:61:8D:18:AE:78:49:FF:0D:08:28:01:C0
            X509v3 Authority Key Identifier:
                keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/fRXkMMgjc7ZhjRiueEn_DQgoAcA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:db:72:47:21:57:ad:45:0a:9f:a6:e0:ef:4b:79:e1:1c:39:
         a1:6b:3f:32:a9:f7:d1:73:c7:da:7b:04:8b:cc:9e:ec:28:58:
         b8:98:4d:04:ab:36:f5:56:a8:50:f5:be:20:91:5b:34:00:93:
         a2:d1:fc:35:97:87:aa:b9:48:c4:f9:04:f9:5f:5b:35:a4:57:
         95:2f:a6:59:f7:2f:ef:0b:70:b3:d8:d7:d8:ab:ed:95:0d:16:
         f3:93:cd:32:b3:79:1c:0f:00:86:28:9d:1c:c9:6d:8e:f9:06:
         ca:6a:da:f6:96:77:35:81:36:27:99:54:9c:96:75:4c:aa:5f:
         a7:a4:6d:81:ac:83:12:2e:0c:59:d8:a0:61:22:4d:44:11:1e:
         41:e3:ab:1b:e0:5a:74:23:5b:a0:c7:6c:1e:ac:ba:a0:fb:5a:
         34:36:c3:6e:95:36:a7:57:00:d2:db:4b:5a:6d:c6:79:a6:76:
         e9:c9:ca:78:9e:95:dc:7a:91:53:22:82:d1:0c:94:ff:5c:a8:
         c6:78:84:3b:22:27:23:e4:db:b4:4a:c0:b0:d3:30:0d:9d:08:
         c1:12:7a:77:36:2d:91:a5:f9:4d:32:78:9b:27:cb:80:f9:7c:
         53:67:29:60:19:f5:04:ac:2a:62:f5:31:d2:4a:57:18:69:3d:
         70:18:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org