Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/VeBJUnZe1KsUZnPCXpJnZj3ttgg.roa
File:                     VeBJUnZe1KsUZnPCXpJnZj3ttgg.roa (raw, json)
Hash identifier:          rJk1ay8VbnTfnNxCZnYsmvmPGvUzs+1HRelDHMpgygA=
Subject key identifier:   55:E0:49:52:76:5E:D4:AB:14:66:73:C2:5E:92:67:66:3D:ED:B6:08
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       49
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/VeBJUnZe1KsUZnPCXpJnZj3ttgg.roa
Signing time:             Fri 01 Sep 2023 01:29:47 +0000
ROA not before:           Fri 01 Sep 2023 01:29:47 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     131896
IP address blocks:        103.239.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Sep  1 01:29:47 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=55E04952765ED4AB146673C25E9267663DEDB608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7c:6f:8d:7a:df:c5:67:9b:6e:f2:ab:7a:55:
                    93:0d:b8:4c:bb:78:0b:45:45:2b:f3:2e:00:a8:71:
                    40:ef:f7:ec:e2:af:26:99:3c:a3:ef:ac:fc:02:33:
                    ae:53:35:46:54:9c:ac:5a:ce:7c:8b:4b:34:3b:8e:
                    30:f9:ca:cc:d5:d0:48:42:e4:75:73:71:2a:5a:ee:
                    3e:21:99:51:6d:aa:12:48:82:f3:53:da:fc:25:aa:
                    50:19:3c:be:18:ef:df:20:02:e6:74:ce:56:c5:83:
                    26:05:db:69:69:cf:62:1b:72:71:f8:27:57:1f:e5:
                    a5:f5:6b:f9:f1:72:bf:46:e0:49:bf:26:03:79:45:
                    46:2e:1b:72:70:71:2e:ac:ef:36:15:db:81:90:38:
                    64:1e:ec:fb:ba:b1:b4:30:cf:35:52:a4:79:15:ac:
                    b0:76:b3:5a:1c:82:c4:a7:a0:70:c4:ad:b6:f1:ed:
                    49:37:bd:20:00:92:09:9c:b7:68:14:82:53:85:b4:
                    0b:6b:5f:db:c4:e0:fd:81:0c:c0:dc:b8:29:a8:59:
                    c6:ae:69:63:aa:62:c9:f8:c2:22:1e:17:40:ab:74:
                    68:4f:92:c8:24:9c:bb:d0:c5:99:57:a6:be:df:4f:
                    67:ac:5c:76:75:2c:60:85:29:fe:82:7e:43:74:21:
                    99:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E0:49:52:76:5E:D4:AB:14:66:73:C2:5E:92:67:66:3D:ED:B6:08
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/VeBJUnZe1KsUZnPCXpJnZj3ttgg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:29:f7:1a:3a:4a:95:0b:b8:93:17:eb:43:1f:fc:d4:85:f8:
         c6:41:89:6e:aa:97:3a:2c:49:a9:58:61:4e:56:73:94:7e:1f:
         43:44:66:be:4a:65:0f:b2:7a:db:37:fe:16:0c:6d:71:e6:5f:
         39:22:d3:9e:dd:2e:15:e8:64:fd:8f:f0:b6:70:e2:7f:4a:00:
         08:47:c4:51:d8:f6:55:1b:44:5c:04:c1:ff:d9:58:50:96:24:
         c5:c7:13:ef:9f:1d:a6:fe:53:cc:6c:82:18:54:e1:85:48:1e:
         86:92:40:91:57:8a:58:26:75:13:f7:92:28:95:34:4e:61:fd:
         45:06:8f:1e:e9:a5:8c:59:e2:65:d6:85:b5:93:4c:54:6c:55:
         3c:b4:a5:c4:d2:11:a5:26:44:5e:26:f0:71:6b:da:a9:5f:ce:
         77:3c:1b:64:6a:69:d2:33:c2:33:c1:a4:92:2f:e5:e6:37:d3:
         93:0a:be:85:43:e9:ab:0d:76:e7:75:b0:eb:b8:7c:a9:54:d4:
         8b:98:bd:a6:c2:17:4a:07:81:89:e4:de:f8:5e:ef:99:41:b5:
         1d:e4:6f:c8:4c:d6:69:53:8c:21:8b:06:a7:43:b6:5d:2b:6a:
         a7:54:42:0f:46:fa:8c:32:cd:4c:7f:ac:90:53:00:4b:7b:be:
         9f:1c:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org