Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/jpwIICk2YNnNmcv6GlEXSm5u9q8.roa
File:                     jpwIICk2YNnNmcv6GlEXSm5u9q8.roa (raw, json)
Hash identifier:          yUFwa1Oop4MTi42AImAF57m5PTiigqPDNnqDQ3buCvw=
Subject key identifier:   8E:9C:08:20:29:36:60:D9:CD:99:CB:FA:1A:51:17:4A:6E:6E:F6:AF
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       47
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/jpwIICk2YNnNmcv6GlEXSm5u9q8.roa
Signing time:             Fri 01 Sep 2023 01:29:46 +0000
ROA not before:           Fri 01 Sep 2023 01:29:46 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     131896
IP address blocks:        103.239.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Sep  1 01:29:46 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=8E9C0820293660D9CD99CBFA1A51174A6E6EF6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:ae:ed:17:c2:84:45:e5:76:9b:d3:e9:7c:
                    1a:93:5a:35:d5:29:e0:f6:6a:e5:77:f7:36:d5:79:
                    5f:18:25:e3:c3:59:7e:19:cc:97:80:1b:29:e3:f7:
                    04:24:1b:ea:02:33:8b:8a:77:5b:e9:e6:da:a8:77:
                    b8:95:90:6d:a5:68:88:a6:d4:6a:49:6a:cd:8e:a1:
                    81:60:0f:b0:39:00:49:40:a7:58:6f:85:ad:ac:2b:
                    7d:4c:68:eb:eb:a8:63:69:e0:13:d9:fd:40:36:88:
                    43:6f:42:23:39:2f:77:89:e3:64:52:96:ea:8c:44:
                    16:1e:25:3e:5f:38:43:9e:2b:65:3e:14:38:a9:90:
                    33:b3:67:1c:24:96:94:88:8e:44:38:25:62:b1:fb:
                    e5:9c:9a:89:d8:3a:0e:65:05:19:a0:f2:42:dc:c7:
                    03:e9:7b:ab:a7:13:74:fd:d7:6c:c7:a2:f8:c5:b4:
                    01:67:5c:f6:01:10:42:cb:de:cd:b7:3f:29:a6:32:
                    c1:c6:10:64:29:f1:06:be:a5:e2:5d:48:ef:0d:2e:
                    80:94:8c:7e:a8:82:e5:b7:2f:11:69:07:10:31:fa:
                    23:60:65:fb:6f:55:9a:88:f1:98:41:0a:f4:66:80:
                    69:24:81:f0:a3:87:b1:60:4b:be:4a:c9:13:2c:5f:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:08:20:29:36:60:D9:CD:99:CB:FA:1A:51:17:4A:6E:6E:F6:AF
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/jpwIICk2YNnNmcv6GlEXSm5u9q8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:d7:42:d4:96:5c:42:b7:3c:6e:51:c4:6e:75:b7:34:98:
         a3:24:1c:a2:f5:b1:8b:b1:cf:7f:ba:15:18:61:54:01:cc:67:
         1b:8d:63:5e:e3:7f:2f:ad:58:93:c7:ff:f3:45:17:8d:c5:0a:
         e6:5b:76:2a:d1:06:a2:b6:37:dc:7b:85:88:76:b8:af:64:70:
         bb:7f:21:74:e2:1c:8d:8a:53:9e:2d:60:4a:7d:b2:48:d7:ca:
         e1:d5:c1:19:41:54:87:73:1b:3f:07:6d:2c:1f:43:1f:39:ef:
         06:e8:04:fd:83:84:0b:e0:08:1e:72:21:4e:48:6c:d7:19:1a:
         a9:d6:04:9b:63:4c:ef:52:34:a1:fa:e4:87:6d:1f:5b:95:a3:
         22:c0:38:d8:62:d5:d3:ed:d2:6d:c0:d6:88:0b:e9:4c:89:66:
         7d:b3:5a:0b:26:ec:7c:40:16:c2:10:d1:04:ee:54:ad:53:3d:
         7b:88:5d:99:0a:4c:24:cf:fb:b9:66:5a:5f:da:1a:ea:3f:94:
         f5:dc:d7:a8:6c:19:12:48:c7:68:0e:27:53:f5:f1:b3:24:8c:
         5b:3b:b9:7e:ea:71:10:39:c8:6e:47:a9:43:e0:a9:27:98:c0:
         7c:e5:36:dc:8e:e5:b7:df:f9:19:3e:f7:15:ab:ad:0d:88:96:
         f7:e1:f0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:26 2024 by rpki-client on console-fra.rpki-client.org