Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/GVFNG0eZ-WOzVorgXbZrDXCdNfo.roa
File:                     GVFNG0eZ-WOzVorgXbZrDXCdNfo.roa (raw, json)
Hash identifier:          dpMH395MPqm1wDhsb5b06utLOegdGYswLy/hvosgqXM=
Subject key identifier:   19:51:4D:1B:47:99:F9:63:B3:56:8A:E0:5D:B6:6B:0D:70:9D:35:FA
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       1E
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/GVFNG0eZ-WOzVorgXbZrDXCdNfo.roa
Signing time:             Tue 05 Dec 2023 08:08:23 +0000
ROA not before:           Tue 05 Dec 2023 08:08:23 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     37904
IP address blocks:        218.231.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 08:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Dec  5 08:08:23 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=19514D1B4799F963B3568AE05DB66B0D709D35FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:46:29:c2:ae:7b:6b:07:2a:64:84:ab:5a:69:
                    67:b7:1e:44:89:0d:63:da:18:0e:ec:aa:f9:fd:09:
                    e5:7f:1b:fe:80:8c:e8:e6:7f:b9:cc:a1:b6:9e:6f:
                    04:33:3f:07:85:fc:5b:ba:0a:c0:4c:8d:c9:c4:bf:
                    5f:8d:57:93:3e:10:4f:7e:a5:1a:34:d8:c8:3f:1f:
                    df:69:18:83:62:cc:55:fb:4d:f0:0c:3d:51:1f:42:
                    f5:1e:bc:8b:0c:90:50:c2:93:26:67:c8:ce:fd:69:
                    12:4c:ab:ff:5f:1a:14:35:31:2d:6e:e6:9a:db:62:
                    08:8f:fe:74:a5:c9:8a:6e:46:1c:fb:aa:d8:f9:6a:
                    f8:43:41:38:00:b4:df:9e:6d:6f:e0:dd:3b:7f:cf:
                    f2:6f:cd:29:98:4d:ab:02:df:17:e3:01:10:f2:e2:
                    90:ea:6d:fe:6d:8d:d1:ec:19:b9:c7:2a:24:e0:39:
                    f1:9d:0d:b1:5c:b6:8b:22:c0:97:5a:8c:63:f3:6f:
                    ba:81:2c:47:bc:b4:e3:ac:8a:e0:00:72:d4:aa:fc:
                    9d:eb:7e:63:d3:97:89:73:3f:2f:5c:7d:19:77:42:
                    3b:e0:f7:fa:16:7e:ae:61:d0:20:fa:32:ba:b0:ef:
                    dc:af:37:0a:a6:df:52:75:5c:87:a5:91:79:70:e6:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:51:4D:1B:47:99:F9:63:B3:56:8A:E0:5D:B6:6B:0D:70:9D:35:FA
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/GVFNG0eZ-WOzVorgXbZrDXCdNfo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.231.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:91:3f:52:93:3c:20:bf:17:f3:0c:b6:90:75:7e:18:19:0f:
         71:6e:92:5c:99:dc:a3:dd:f6:68:fc:01:a5:6f:8f:51:02:44:
         84:ec:ee:7f:40:c9:fb:a1:b0:17:4d:ec:bf:f1:1f:55:49:f5:
         4b:30:b8:06:40:08:ba:36:36:60:ee:73:74:15:8f:a9:f4:17:
         37:65:d5:d0:47:1b:5c:ba:7d:f5:36:3b:2c:8f:76:3a:fc:b1:
         08:3b:0e:80:dd:3c:63:79:e5:1f:d9:46:f9:f3:f3:91:cf:80:
         47:64:8b:10:d4:15:73:ef:63:7f:92:18:55:e4:4b:82:27:dc:
         7a:63:44:fe:2c:5e:5a:8b:35:39:8e:33:16:36:db:82:c5:bb:
         a6:a4:ea:16:d4:58:23:63:d8:0e:bf:96:70:4d:84:16:dc:30:
         eb:4d:7c:af:a2:fc:22:65:e6:a2:b2:c3:89:b6:63:06:c6:7d:
         69:d1:7a:0f:1d:3f:15:1d:c2:5e:04:32:e6:b0:46:9c:22:a5:
         22:b0:9a:c3:29:e1:ba:80:b6:75:8d:a9:4b:2d:e6:f9:d6:70:
         64:0d:39:8b:38:28:99:06:2a:bf:5c:80:2b:6e:ee:e9:82:9d:
         af:45:14:bf:87:9c:b2:e3:11:de:03:96:0d:08:96:a2:11:2a:
         2d:37:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org