Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/kUsgZ2DhdHkcpXui0XnAI_8mhgU.roa
File:                     kUsgZ2DhdHkcpXui0XnAI_8mhgU.roa (raw, json)
Hash identifier:          NYS6ioA6hHvERBneNqmsOZeYmuVdg03Xs1mycXcE4uY=
Subject key identifier:   91:4B:20:67:60:E1:74:79:1C:A5:7B:A2:D1:79:C0:23:FF:26:86:05
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       044D
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kUsgZ2DhdHkcpXui0XnAI_8mhgU.roa
Signing time:             Thu 13 Apr 2023 09:57:45 +0000
ROA not before:           Thu 13 Apr 2023 09:57:45 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        180.233.96.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101 (0x44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:45 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=914B206760E174791CA57BA2D179C023FF268605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:e8:6f:4d:70:90:e4:ad:c2:d9:27:6b:59:
                    e6:65:59:71:d0:f0:fe:6b:03:77:6b:a8:ba:8f:ec:
                    2d:f7:4e:7e:bf:bc:c9:87:b3:d3:b3:02:c9:a9:08:
                    de:19:9b:09:4d:93:bb:0a:b8:57:3a:5b:66:af:8c:
                    52:ef:0a:f7:d7:bf:21:22:4a:52:04:2b:c4:36:8e:
                    5a:df:e9:56:31:de:6c:92:0d:dd:84:5f:3e:d0:7b:
                    b7:3b:fa:25:ac:5b:04:0c:29:8a:05:09:3e:87:33:
                    27:d2:27:b0:f4:52:20:dc:9d:3f:2f:fe:9d:ce:3b:
                    5b:d7:5a:5f:ec:e4:04:8d:86:48:ed:83:9e:13:20:
                    c2:38:93:30:d6:04:47:4f:97:75:d5:13:4f:22:04:
                    f0:05:ba:57:84:63:3f:c6:23:14:41:67:63:c7:65:
                    37:f5:e5:08:cf:14:29:99:cd:94:85:2e:ef:2b:c1:
                    aa:0f:c9:16:d0:11:a8:ed:47:ad:f6:10:b1:b9:66:
                    af:8f:b2:e6:68:84:d8:de:fd:5d:43:8c:5b:ab:28:
                    1b:0a:f4:22:ce:26:74:cf:09:fd:7f:53:35:51:5a:
                    55:bb:1f:10:db:81:7d:be:db:6c:47:f6:4e:bd:81:
                    b8:2c:4c:97:3b:06:66:12:e5:ca:ca:9a:fd:f3:31:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4B:20:67:60:E1:74:79:1C:A5:7B:A2:D1:79:C0:23:FF:26:86:05
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kUsgZ2DhdHkcpXui0XnAI_8mhgU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.233.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:bc:ac:d2:09:31:0e:5a:69:14:1f:1c:54:8f:b7:99:59:67:
         77:0f:f6:3a:04:53:89:1e:6d:7d:2a:e7:54:33:75:2d:2d:ed:
         4f:21:1f:6c:f3:a2:42:00:a0:28:7f:ba:7b:f5:dc:dc:fd:07:
         21:21:56:67:c2:08:b1:d3:76:53:b0:73:01:88:65:5f:7e:1f:
         14:e1:e8:0e:a8:ef:f7:5a:38:c8:b1:bd:c4:f4:6b:f5:6b:9e:
         82:68:f5:f1:8d:24:1b:a4:5d:df:e7:1a:2f:dc:13:1d:56:69:
         93:e6:0d:d6:1c:08:47:1a:80:2f:b0:2f:e7:07:9d:9e:7c:7f:
         38:a1:30:c8:86:ef:80:1c:f2:18:b0:a3:ac:4d:2d:d6:a0:e0:
         54:e6:d6:a6:9e:36:34:1c:32:4f:73:3b:c8:68:1d:0b:d7:39:
         48:89:63:6b:ce:8f:e7:c0:4c:39:3a:ae:2a:b7:e9:96:1b:f1:
         e7:82:cd:0d:db:e6:57:e1:6e:67:cd:40:4c:cf:58:18:ee:28:
         68:7b:dd:ee:df:31:2d:48:f0:ef:97:97:e9:e7:2f:6a:f1:f3:
         83:09:b1:ba:5d:eb:d9:bc:d1:74:7f:79:1b:40:5e:0d:56:ff:
         eb:19:9a:52:f5:93:43:f6:cf:26:ba:49:b5:1b:86:cb:fd:96:
         28:ca:d0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org