Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/doumaF7KF7f41JHor3y-nhuVTwo.roa
File:                     doumaF7KF7f41JHor3y-nhuVTwo.roa (raw, json)
Hash identifier:          D3pBiRXhvR3i7ighU+0B9RjH+p01SHrJG8U+VLnCGVA=
Subject key identifier:   76:8B:A6:68:5E:CA:17:B7:F8:D4:91:E8:AF:7C:BE:9E:1B:95:4F:0A
Certificate issuer:       /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial:       36
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/doumaF7KF7f41JHor3y-nhuVTwo.roa
Signing time:             Fri 01 Dec 2023 08:19:26 +0000
ROA not before:           Fri 01 Dec 2023 08:19:26 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     131925
IP address blocks:        160.237.160.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 01:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
        Validity
            Not Before: Dec  1 08:19:26 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=768BA6685ECA17B7F8D491E8AF7CBE9E1B954F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:b6:76:c3:af:79:18:ea:d9:23:40:bd:0a:
                    eb:f4:eb:d1:21:78:d5:ea:c7:90:7e:2b:73:3d:4b:
                    7b:03:a3:a3:ee:23:ca:3f:e3:dd:62:16:d3:a6:30:
                    27:7a:a9:34:9d:61:f8:49:39:66:dc:f8:49:e9:d0:
                    e7:73:cd:ad:44:e9:c0:2a:fb:35:82:10:2b:5e:12:
                    9b:2b:28:fc:78:19:81:06:5f:63:11:44:2d:b1:6b:
                    7a:97:9d:e1:cf:44:56:de:2e:e0:5b:98:ba:04:a5:
                    7a:76:9a:f1:8b:c4:2a:a1:5d:bd:73:af:d7:df:a0:
                    51:08:1e:70:32:f2:85:f1:29:09:aa:dc:c2:f8:7b:
                    ce:a9:4c:97:57:76:bb:01:72:75:df:e5:c5:e6:5d:
                    fb:46:ec:85:a1:f2:85:48:15:86:aa:a2:9a:42:37:
                    94:5a:10:75:84:81:68:0e:1e:39:3f:42:4a:ea:27:
                    d7:70:7a:99:26:fc:b1:a2:3c:16:05:94:c9:74:ba:
                    83:5c:d5:95:37:1e:77:d2:6f:c9:6d:21:00:cd:a5:
                    64:46:04:ba:bd:52:e7:10:ba:0d:8a:63:69:28:5b:
                    8c:9e:a5:cd:6b:0a:0d:5d:68:76:f3:f1:75:af:9f:
                    62:02:bf:36:3c:e5:f8:83:c2:16:a1:e7:41:f9:d6:
                    37:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8B:A6:68:5E:CA:17:B7:F8:D4:91:E8:AF:7C:BE:9E:1B:95:4F:0A
            X509v3 Authority Key Identifier:
                keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/doumaF7KF7f41JHor3y-nhuVTwo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.237.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:42:47:42:74:76:13:f4:0d:32:23:e9:94:5a:e9:90:69:aa:
         5e:79:cb:ea:a6:6f:27:d1:99:f7:d5:4f:c1:0b:82:59:47:62:
         98:4a:4b:55:24:27:25:5c:52:fd:ef:88:21:80:b4:80:84:79:
         b0:42:6e:40:46:03:6a:1c:29:bc:2c:9d:d6:a1:55:cd:3c:ac:
         13:e9:e8:2f:b8:e9:2f:4b:b6:b5:7a:aa:05:4d:52:83:0e:c3:
         63:8f:c5:2f:08:37:3d:e8:3b:de:cc:ab:3a:62:01:a3:27:f0:
         66:bc:51:81:53:0c:e4:99:82:06:11:f1:0f:bb:f8:e4:94:00:
         9f:3d:f0:fa:b2:74:16:48:ce:f4:6e:bb:c0:fd:92:dc:f2:c8:
         cf:7a:04:a2:82:b9:11:21:bc:90:82:b2:71:eb:48:df:a1:90:
         2c:76:2f:9d:3a:b0:74:a2:dd:58:64:0f:15:19:b7:4b:12:38:
         35:0a:48:8b:15:eb:e5:aa:ec:e5:d2:b4:02:ed:3f:ed:5b:b3:
         b4:98:f8:fc:d6:c1:ed:7e:54:27:5c:17:e8:63:d4:9e:28:74:
         56:6d:70:8f:cb:92:fb:dc:3e:9e:d1:10:fd:ad:04:34:1b:b4:
         ef:ff:5c:cc:f4:78:07:7c:68:ce:87:9a:ac:ed:01:31:79:3c:
         2a:7a:18:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 03:53:35 2024 by rpki-client on console-fra.rpki-client.org