Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/O0hw9XJ9ecpg4LT6_pr8OlNyeqA.roa
File:                     O0hw9XJ9ecpg4LT6_pr8OlNyeqA.roa (raw, json)
Hash identifier:          Wj4T+VG5XcQQEIwOnY71ETfDa/7s935UP5yVzS5jfnc=
Subject key identifier:   3B:48:70:F5:72:7D:79:CA:60:E0:B4:FA:FE:9A:FC:3A:53:72:7A:A0
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0418
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/O0hw9XJ9ecpg4LT6_pr8OlNyeqA.roa
Signing time:             Thu 13 Apr 2023 09:52:24 +0000
ROA not before:           Thu 13 Apr 2023 09:52:24 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        183.86.128.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:24 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=3B4870F5727D79CA60E0B4FAFE9AFC3A53727AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:4e:1e:5e:21:8f:7f:43:c7:db:e4:5b:46:
                    f6:83:67:5e:4d:9b:88:36:1d:99:d0:d5:bc:57:90:
                    c3:1e:df:77:4b:66:41:48:fd:da:20:f4:0a:c7:f8:
                    df:bd:fe:37:a0:45:d3:26:f5:d5:64:aa:ae:30:e3:
                    b7:51:99:9c:59:49:9b:7a:f8:ca:40:4d:cb:86:88:
                    60:38:a5:2f:f5:31:14:6e:87:b8:71:4d:33:d6:21:
                    3a:62:2e:35:e2:2e:ff:1d:da:6f:6d:4b:22:b4:6f:
                    f9:a0:04:20:4e:dd:fc:e0:ac:7f:b5:e0:29:9e:01:
                    76:61:fb:a7:bd:d7:99:4e:e8:5c:9c:b8:2b:57:95:
                    18:05:53:ec:15:76:6d:44:03:4d:f4:6a:34:58:e8:
                    e9:6b:3d:bb:e5:d1:52:6f:f5:af:ec:b1:04:fd:2b:
                    c6:6f:de:67:e1:3f:f0:0c:44:17:c5:ed:bb:e7:10:
                    95:3f:26:db:c3:c1:bb:93:77:2e:21:8d:7d:51:ca:
                    c7:2c:91:95:11:07:d3:69:6a:93:1f:c5:d8:cc:3b:
                    6d:69:0f:96:2d:2e:04:bf:30:8a:98:46:f1:0d:46:
                    4b:1c:fa:20:b0:48:d1:d7:aa:75:d8:4b:bb:8c:2a:
                    00:8f:45:e6:ba:78:2e:de:25:14:33:ec:f8:7a:88:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:48:70:F5:72:7D:79:CA:60:E0:B4:FA:FE:9A:FC:3A:53:72:7A:A0
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/O0hw9XJ9ecpg4LT6_pr8OlNyeqA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.86.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         85:a7:f8:df:eb:26:c8:ad:c2:1c:3d:a6:95:43:7c:3d:8a:e5:
         c2:73:c9:92:fb:cb:50:95:b4:58:d3:46:c3:dd:ad:1f:4e:8c:
         0b:dc:c4:39:8c:25:53:4d:fd:8a:f3:78:55:d4:f1:b8:37:b6:
         07:9b:af:4c:06:f3:fa:5c:1b:97:b1:2c:1a:fc:61:50:d7:7f:
         12:1d:0a:71:30:c2:74:ee:d9:43:cd:a9:2f:ab:4d:4b:67:e6:
         88:5b:2c:72:0e:df:f3:a9:d7:2b:b6:89:c1:3b:07:a9:76:38:
         d0:bf:cd:b1:44:2b:be:78:e8:b4:7c:90:a8:f2:26:5d:b7:46:
         c1:79:40:7e:95:e0:1e:c6:3f:b5:1b:40:91:a4:3f:e7:c6:93:
         ae:d0:52:25:cc:a3:f2:d0:78:2f:d2:82:f4:1d:f1:53:28:ac:
         9b:72:e9:7c:c0:65:dd:f3:10:ff:73:81:58:b8:56:c7:e8:53:
         58:d5:b1:0b:e4:35:71:c9:76:a9:a1:de:e4:11:22:cc:99:60:
         82:cb:af:16:d3:ba:97:5d:d5:dc:26:6c:11:6f:8d:60:63:bc:
         77:37:f7:8e:32:e9:84:64:68:f2:b1:e7:1d:b8:3a:81:af:09:
         25:7d:63:d8:53:a8:0e:8b:1f:41:e5:ad:30:82:7b:0b:ba:4b:
         57:3c:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org