Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/kRyUIkkIFW0HnUTcRa15jca-FY4.roa
File:                     kRyUIkkIFW0HnUTcRa15jca-FY4.roa (raw, json)
Hash identifier:          81wW0JmcpVzKNWXelXNuHVIAuxhBykBww3NTUNik7yU=
Subject key identifier:   91:1C:94:22:49:08:15:6D:07:9D:44:DC:45:AD:79:8D:C6:BE:15:8E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       046B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kRyUIkkIFW0HnUTcRa15jca-FY4.roa
Signing time:             Thu 13 Apr 2023 09:59:46 +0000
ROA not before:           Thu 13 Apr 2023 09:59:46 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.48.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:46 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=911C94224908156D079D44DC45AD798DC6BE158E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cc:2d:5b:0b:02:ff:7d:3e:87:35:62:10:22:
                    c2:b3:f7:88:6e:74:80:d8:f9:a5:fc:b5:30:3c:cd:
                    17:71:d3:c5:6e:e3:80:eb:4a:5d:98:bb:a7:83:e9:
                    1f:b0:3b:5a:df:0b:f6:71:5f:3e:e5:31:ce:91:76:
                    7e:f1:54:a4:58:cc:9f:a5:7f:02:a7:a5:50:94:86:
                    f7:63:18:5f:56:40:fd:42:06:44:67:f0:de:3b:61:
                    1a:32:f0:f7:99:46:3a:58:3a:23:ea:16:5d:17:6f:
                    d0:6d:78:83:b4:b9:a7:a4:e5:df:14:c4:03:b8:76:
                    af:32:59:8a:24:d2:b4:0f:41:ca:0d:7f:52:f9:cb:
                    c1:9d:e1:38:65:ef:95:64:c3:7f:9e:9a:40:3b:6d:
                    96:21:b3:81:33:9f:65:bd:c9:17:ac:f5:da:40:79:
                    49:a6:7e:4b:74:d2:f0:db:33:97:dd:2c:ed:83:34:
                    de:ce:55:7c:31:42:6c:cd:e7:14:c2:59:eb:2a:f1:
                    61:78:48:a3:51:15:91:44:01:47:12:73:26:e1:c8:
                    6e:da:8f:1e:a8:7f:45:39:af:31:0c:8a:17:01:2b:
                    5c:87:0a:fd:18:1b:f3:c5:88:33:7d:60:75:1a:69:
                    5e:fb:7b:21:39:27:2c:20:6a:8d:cf:83:fb:58:38:
                    26:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1C:94:22:49:08:15:6D:07:9D:44:DC:45:AD:79:8D:C6:BE:15:8E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kRyUIkkIFW0HnUTcRa15jca-FY4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ca:65:f4:83:33:7a:02:3a:43:43:8e:6c:8e:2a:fa:32:ad:a1:
         56:5b:79:9e:6d:d4:6e:de:7f:a0:13:26:2b:6f:b2:55:78:dd:
         88:1f:31:3b:12:e6:43:ba:f3:09:bb:f1:0c:fc:0f:75:4d:20:
         da:b5:f0:e2:9e:51:78:53:ef:2e:e7:b7:c8:32:66:8e:b1:7f:
         56:b5:c0:61:16:8f:7a:1a:64:d9:a8:3b:da:bd:ad:26:94:e7:
         88:d5:32:f2:e7:90:b7:ce:2f:f6:f5:43:99:71:01:e1:4a:9c:
         5c:5c:56:d6:fd:8e:8c:ab:49:35:f2:90:8e:82:d2:aa:12:b0:
         9a:8c:58:d3:a6:ce:35:b5:53:80:1e:ae:90:3c:a7:f1:29:1e:
         b8:a9:d3:75:73:4f:5b:35:61:b5:57:0d:4f:86:1e:97:fc:92:
         37:3f:57:15:6c:1a:19:17:75:2e:d2:18:ad:d7:67:9f:92:a4:
         92:2e:6c:89:a9:9f:91:5f:24:bc:64:11:f0:3a:9f:c7:de:91:
         88:59:7b:e9:ba:e7:fa:aa:28:8d:01:66:f7:32:f4:39:43:41:
         81:06:0d:15:48:10:d0:d7:cb:c3:34:b1:3a:2e:ac:3b:fa:d2:
         21:da:c8:d9:a5:bf:a3:60:d2:67:28:a5:68:43:be:8c:72:37:
         e8:f3:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:05:49 2024 by rpki-client on console-ams.rpki-client.org