Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/FvACKF59wuGCdIRflWAoXkVO3sk.roa
File:                     FvACKF59wuGCdIRflWAoXkVO3sk.roa (raw, json)
Hash identifier:          6HpMagjM4CyJTNTtJSeLCAPMaXLB28Hmya0NwuCwgCo=
Subject key identifier:   16:F0:02:28:5E:7D:C2:E1:82:74:84:5F:95:60:28:5E:45:4E:DE:C9
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0421
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FvACKF59wuGCdIRflWAoXkVO3sk.roa
Signing time:             Thu 13 Apr 2023 09:52:27 +0000
ROA not before:           Thu 13 Apr 2023 09:52:27 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:27 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=16F002285E7DC2E18274845F9560285E454EDEC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:11:87:a0:d5:89:58:2a:85:cd:4e:02:e9:
                    ce:14:5c:80:ff:cc:40:42:c7:56:0f:f2:77:f1:96:
                    9e:12:90:46:ad:9b:7a:e2:a2:e2:85:9b:17:fc:dc:
                    39:0e:d2:66:16:a4:c3:58:44:7c:18:d4:ba:26:30:
                    91:f3:6b:45:51:81:d4:d5:06:1b:80:8f:8c:c9:2d:
                    67:3e:d6:e4:36:be:f5:b0:55:c6:6a:00:90:68:41:
                    f7:a4:a4:d8:0c:d2:a7:6a:f0:c9:ec:43:21:99:fe:
                    be:4d:0b:3a:12:1f:79:21:cb:b5:c1:89:48:df:fb:
                    34:2c:c2:35:5d:8e:23:af:46:46:4e:1c:1d:c1:5c:
                    f7:53:f5:97:93:bd:d6:35:85:05:c7:a0:d8:ac:0c:
                    8b:c9:7f:2b:55:27:d7:09:b6:94:a7:1b:33:48:87:
                    6a:5c:b4:9b:a4:7a:84:1b:e4:2d:4b:a2:41:f1:a2:
                    90:a2:17:11:38:e3:a2:90:26:8b:e4:2a:25:6c:d3:
                    b0:a0:85:d0:d1:46:15:93:ad:16:46:65:d6:68:61:
                    98:ef:50:21:2c:c6:db:d9:8a:c3:f0:7d:d6:11:60:
                    aa:d1:36:6b:ff:7a:83:67:51:0c:f6:a7:84:ac:f1:
                    ab:ed:8a:fc:b9:c5:7d:ea:1d:28:51:bc:c5:e4:73:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F0:02:28:5E:7D:C2:E1:82:74:84:5F:95:60:28:5E:45:4E:DE:C9
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FvACKF59wuGCdIRflWAoXkVO3sk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a8:91:ac:99:70:b0:ea:8e:3e:d9:8b:87:d9:d3:6d:b4:56:
         17:46:f6:f6:85:85:14:f8:25:10:35:bd:34:1b:17:c9:52:bb:
         4c:bb:7c:1b:35:45:41:17:75:21:01:64:50:b0:3d:17:43:c3:
         f1:52:b5:d2:04:e3:cf:88:c8:82:ab:14:c2:dc:e8:0f:a5:2f:
         21:6a:ec:a1:30:31:a8:0b:5e:1a:f2:a6:26:ef:b6:9b:f8:b8:
         b3:59:ff:13:95:08:94:99:fa:2f:d7:66:83:10:41:9d:34:32:
         14:6b:76:38:dd:7f:5b:ad:5f:8d:13:e7:92:5d:bc:89:38:81:
         23:26:b7:2b:8c:29:4c:c4:dc:6d:ff:95:13:20:7a:8c:41:f9:
         42:a1:8d:5e:fa:cd:e7:b6:c9:a9:69:1f:66:86:3b:dc:57:ef:
         a1:ae:c7:13:d7:3a:08:91:78:3d:c8:73:c0:a0:ef:93:f6:2f:
         00:7e:f5:62:28:f2:8d:59:b1:ff:03:2b:f8:9f:c2:d0:17:ca:
         87:2a:65:fd:79:86:88:96:4b:63:8a:79:f4:58:a3:a9:38:af:
         c6:cc:0c:48:53:6a:8d:c8:6a:5b:94:c0:c3:1a:3b:cd:a9:f8:
         97:9f:c7:0f:09:3e:4b:ba:f9:f5:54:e6:11:ad:7c:5f:20:e3:
         ac:24:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org