Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/MnnFPS_9Jwly8z4Dl1VkUZ0if5A.roa
File:                     MnnFPS_9Jwly8z4Dl1VkUZ0if5A.roa (raw, json)
Hash identifier:          rB9qeiHMPFaVctxnSzphrCgTjelxqAswpvFIFxlOd+U=
Subject key identifier:   32:79:C5:3D:2F:FD:27:09:72:F3:3E:03:97:55:64:51:9D:22:7F:90
Certificate issuer:       /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial:       34
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/MnnFPS_9Jwly8z4Dl1VkUZ0if5A.roa
Signing time:             Fri 01 Dec 2023 07:49:13 +0000
ROA not before:           Fri 01 Dec 2023 07:49:13 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     59125
IP address blocks:        160.237.128.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 01:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
        Validity
            Not Before: Dec  1 07:49:13 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=3279C53D2FFD270972F33E03975564519D227F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:52:5d:17:5c:73:6a:21:09:96:c6:9f:80:
                    9e:ce:dc:d1:a5:ef:97:39:a8:c2:12:42:a5:c2:85:
                    15:7a:86:e9:40:f7:4f:e6:d7:1a:bf:26:24:23:1d:
                    2b:55:17:67:cc:8b:e3:74:af:3f:15:ca:a0:62:cf:
                    57:f9:57:82:6d:23:10:ad:6b:0d:f9:c2:7f:b7:d9:
                    9b:d5:06:ee:b2:94:e6:f4:cb:8b:6c:b9:0c:57:fc:
                    89:f3:62:63:63:dc:c0:d9:ee:2e:3a:ac:58:0d:91:
                    bb:85:5c:90:af:28:c7:3d:da:25:44:f9:0f:64:fd:
                    48:ce:af:05:66:21:10:19:b9:f4:6a:55:ed:f5:9a:
                    e8:c8:da:8c:5a:32:08:bb:98:7c:9b:f6:43:2a:f9:
                    72:6c:e7:c8:08:c6:3d:ed:52:a2:f3:19:dd:31:bb:
                    3b:b7:9e:77:50:a6:33:2b:4e:b9:bb:b8:45:0b:ac:
                    d7:dc:0c:ad:58:fe:61:31:6f:2a:b7:5f:a3:4f:9d:
                    0e:14:06:aa:b1:6f:42:33:d5:55:13:1a:ef:04:d6:
                    00:12:ba:78:ee:76:45:75:55:ec:43:44:fa:a1:43:
                    4e:7c:3a:0c:90:ca:2b:cd:89:5e:7e:48:9d:1e:b2:
                    02:71:25:e8:fb:f2:7a:b8:63:f5:91:8f:de:27:10:
                    30:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:79:C5:3D:2F:FD:27:09:72:F3:3E:03:97:55:64:51:9D:22:7F:90
            X509v3 Authority Key Identifier:
                keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/MnnFPS_9Jwly8z4Dl1VkUZ0if5A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.237.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         68:30:24:53:86:3c:ac:93:bb:ab:0f:6c:24:7f:cf:b7:04:56:
         7a:87:bb:9b:69:b6:f9:32:e6:6c:d9:7e:00:9b:f7:94:0b:37:
         9f:26:90:b8:63:c3:a5:be:14:7f:ca:23:d8:91:ef:b4:75:02:
         1c:30:89:0d:bc:df:fc:c7:25:a4:8d:98:9e:d1:76:00:73:1a:
         63:9c:4b:7f:01:6b:db:55:a6:49:dc:d6:bc:99:37:80:33:dd:
         3b:59:84:2f:b1:ac:d8:84:02:e2:20:2f:0a:00:1e:b7:6a:12:
         75:bc:0b:fc:19:03:2e:bd:3f:03:25:e1:66:a2:32:dd:84:48:
         f1:7d:96:99:6d:92:be:09:43:d9:68:2c:f4:1b:ce:9d:56:76:
         0b:1a:9f:f6:ab:ab:bc:fa:90:f3:bf:fd:16:60:0c:3a:e6:e8:
         85:96:d9:1d:12:aa:64:49:f9:5e:e2:72:bf:9f:99:bf:a2:e8:
         c9:bd:25:e5:ed:0f:6f:c8:6d:c5:60:e5:25:ae:fc:90:1f:26:
         9b:1f:b6:65:6e:0a:0f:7f:e2:c1:10:49:18:7c:b5:fe:3e:ad:
         c2:ec:bd:7f:49:25:88:2f:53:da:5f:54:c3:9a:6e:aa:7e:f5:
         3a:a0:ca:69:7f:dd:6a:5e:a6:ad:89:a7:42:9a:be:a4:31:0e:
         24:99:bb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 05:07:19 2024 by rpki-client on console-ams.rpki-client.org