Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/EDIj6XNQ0uDms0WEF5XJ54NURjs.roa
File:                     EDIj6XNQ0uDms0WEF5XJ54NURjs.roa (raw, json)
Hash identifier:          skeyUaNSp7lMFpanwf0gdmiQUnzulRvwNErlxLYtBUc=
Subject key identifier:   10:32:23:E9:73:50:D2:E0:E6:B3:45:84:17:95:C9:E7:83:54:46:3B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0455
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/EDIj6XNQ0uDms0WEF5XJ54NURjs.roa
Signing time:             Thu 13 Apr 2023 09:57:49 +0000
ROA not before:           Thu 13 Apr 2023 09:57:49 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        219.96.32.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109 (0x455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:49 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=103223E97350D2E0E6B345841795C9E78354463B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:2d:28:37:65:57:23:0d:82:97:3f:7b:e3:
                    19:36:d4:3d:61:70:96:fb:2f:25:45:03:dd:3c:77:
                    eb:b1:de:88:fa:19:a6:ce:5a:fa:65:bb:f4:90:32:
                    40:79:f6:52:69:ce:aa:95:5e:6f:ec:14:9c:70:e2:
                    94:2f:5d:6a:73:0f:a3:6c:79:a2:22:0b:f5:9f:c6:
                    eb:5c:81:d3:31:49:8a:3b:31:7f:79:cd:44:99:31:
                    6d:21:c2:e9:f8:ce:57:04:b5:93:9b:26:df:e8:34:
                    c0:1d:35:b0:89:48:52:d9:cc:98:98:b0:b7:e5:8b:
                    d3:77:df:13:37:16:d0:a3:7c:3e:06:4d:76:68:f0:
                    e9:99:da:75:01:12:46:8d:89:0c:25:52:9e:de:27:
                    cf:ad:a8:ca:28:99:3b:52:ef:b8:9d:16:3f:7c:b2:
                    ac:92:ed:b3:f6:e5:13:ce:9d:65:a6:41:6a:70:6d:
                    86:c8:c6:c5:31:60:0a:f9:9f:4a:8b:4b:71:b8:b8:
                    46:96:7c:8d:94:0c:16:59:e5:8c:00:b3:bb:8c:0a:
                    24:aa:9a:93:64:fc:e8:b6:e1:ff:8e:a4:52:7a:99:
                    f9:94:1b:44:c4:7d:8a:98:fd:e9:2d:be:f5:b9:b9:
                    31:8c:84:e5:1a:cd:47:d1:6e:dd:ac:ed:51:6f:2b:
                    a4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:32:23:E9:73:50:D2:E0:E6:B3:45:84:17:95:C9:E7:83:54:46:3B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/EDIj6XNQ0uDms0WEF5XJ54NURjs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:7e:42:84:14:63:ff:42:c0:6a:b2:0f:ec:2b:d8:7c:81:87:
         35:f5:62:c3:68:7a:e4:28:85:47:2a:c6:bc:fd:39:d0:ef:53:
         75:d2:07:06:56:20:a3:ec:79:24:81:72:12:d9:ff:bf:8d:97:
         f8:7a:b4:83:cf:19:11:c3:8e:4f:4c:0b:f8:5d:eb:f4:d0:ea:
         16:d4:ae:7a:b9:7a:ef:50:43:02:75:69:65:6b:2b:df:75:b9:
         0f:51:81:74:b8:6d:84:fd:c1:3d:94:6b:d7:06:07:71:fa:ac:
         a9:1e:a8:94:15:49:c9:31:7d:4b:9b:f2:df:a3:57:35:e3:f5:
         80:46:7d:64:c5:92:45:dd:8b:f9:2d:6b:98:a3:ef:d6:32:1b:
         ab:d3:f6:36:14:00:5d:f4:0e:ba:82:ee:9f:22:06:cd:6b:17:
         41:fb:2e:be:54:62:78:d7:73:18:89:4a:34:dd:53:7b:52:c4:
         ed:e4:9d:f7:58:86:af:9c:7a:a7:18:8d:d1:dc:8d:27:5f:9c:
         b2:ff:31:c7:cd:db:4a:c9:da:b8:da:e1:fe:1d:bd:1a:b8:96:
         47:f6:51:69:9c:26:ba:e3:e4:12:4f:c7:41:c0:3e:ae:eb:b2:
         d5:5d:c7:dc:ce:d2:2b:59:7b:a7:65:f1:80:13:49:4d:79:25:
         70:b4:66:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org