Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/PZrnUWfw3gmgibsipzNYL9x46pQ.roa
File:                     PZrnUWfw3gmgibsipzNYL9x46pQ.roa (raw, json)
Hash identifier:          zo3pHmi75y8AwIW23bb0VsgUaPi34dIAftZkezMZ3ik=
Subject key identifier:   3D:9A:E7:51:67:F0:DE:09:A0:89:BB:22:A7:33:58:2F:DC:78:EA:94
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       047B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PZrnUWfw3gmgibsipzNYL9x46pQ.roa
Signing time:             Thu 13 Apr 2023 09:59:52 +0000
ROA not before:           Thu 13 Apr 2023 09:59:52 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        116.68.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147 (0x47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:52 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=3D9AE75167F0DE09A089BB22A733582FDC78EA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:ef:d8:a5:f6:03:1b:62:de:76:29:58:d2:
                    51:a3:95:60:18:4a:72:54:52:6f:77:53:a9:64:23:
                    32:28:8c:3f:c8:7a:b3:ea:60:45:61:96:f8:94:84:
                    ba:54:84:af:0d:49:03:10:65:52:7a:6b:59:59:a2:
                    41:8c:85:59:b6:ee:b1:21:7a:2c:4b:7b:a8:d7:a2:
                    fe:b0:e0:59:91:7c:71:f2:bb:88:0e:d1:e3:ac:5f:
                    69:5b:d0:cd:55:31:8d:ba:a1:4a:b4:3e:c6:71:a8:
                    bc:69:af:5b:f1:61:50:73:6f:fc:1f:84:94:fb:9d:
                    e3:fb:6e:10:a3:05:1a:0a:f6:12:93:07:8a:09:22:
                    23:65:3a:c3:b0:5c:28:7a:2a:a5:89:4c:df:0b:d8:
                    94:10:54:f0:3c:fa:39:73:77:07:42:37:73:31:54:
                    53:08:a4:08:a4:18:6d:87:ea:02:79:f9:d5:91:55:
                    4c:60:e8:9c:9d:d6:17:ae:90:62:1e:d1:0e:a1:de:
                    f6:aa:d4:71:aa:78:35:23:fd:c6:75:e3:d3:e2:e8:
                    83:73:1d:99:76:8f:15:5b:44:5f:57:b0:57:0e:86:
                    b2:ad:27:10:e0:6f:2e:38:62:08:6d:47:19:7a:04:
                    61:d4:e1:ad:d3:81:d4:69:40:e0:ee:6e:99:aa:f7:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9A:E7:51:67:F0:DE:09:A0:89:BB:22:A7:33:58:2F:DC:78:EA:94
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PZrnUWfw3gmgibsipzNYL9x46pQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:7e:5d:65:69:b7:9c:36:08:2e:38:f9:e8:c8:2d:87:ec:e6:
         af:77:5a:47:3f:45:08:9a:09:e5:ff:0b:f1:b3:d7:fb:43:f9:
         66:79:fb:b7:5e:ce:45:a0:a1:66:33:61:6e:7e:68:7b:f3:3c:
         65:9e:21:48:6f:72:fe:c6:1e:c3:15:1d:68:20:2f:2f:ff:56:
         8d:4b:12:75:ba:7e:36:4c:50:fe:f9:02:ba:3c:f0:37:31:5f:
         f7:48:45:c4:e3:75:e7:57:f9:05:8a:d8:a7:97:f6:e5:70:10:
         0b:20:5d:94:34:75:ed:c9:e1:09:41:55:e9:d6:24:f1:26:52:
         29:d1:e9:99:9e:09:d0:36:a8:e6:4c:39:9e:ce:42:5f:cc:68:
         66:12:f4:09:b8:93:82:a0:6b:d7:e7:61:78:b1:1d:f4:f3:0b:
         e8:43:a7:6f:a8:ac:71:60:4e:b0:31:2f:84:00:a5:15:66:bc:
         7b:c8:43:57:bb:d7:a1:e4:7c:e8:5c:a1:20:28:df:d0:b3:d4:
         32:3d:01:ac:29:81:8e:f7:e5:8e:6c:92:7d:41:8b:cc:a8:58:
         f1:0a:ee:9a:7b:d9:eb:e5:b0:ac:e9:9e:99:d0:fd:ea:73:ab:
         af:45:b4:f6:7d:10:f1:d8:39:b8:6d:12:10:eb:e2:43:95:82:
         94:81:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:05:49 2024 by rpki-client on console-ams.rpki-client.org