Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/fOcW0B9Pw0TxRCabEmpEmfo4RXE.roa
File:                     fOcW0B9Pw0TxRCabEmpEmfo4RXE.roa (raw, json)
Hash identifier:          01ROdZOgp2hZjhUoBMRXqn9gtrHmv5BAhefAO/adg2U=
Subject key identifier:   7C:E7:16:D0:1F:4F:C3:44:F1:44:26:9B:12:6A:44:99:FA:38:45:71
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       1F
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/fOcW0B9Pw0TxRCabEmpEmfo4RXE.roa
Signing time:             Tue 05 Dec 2023 08:08:23 +0000
ROA not before:           Tue 05 Dec 2023 08:08:23 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     37904
IP address blocks:        218.231.244.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 08:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Dec  5 08:08:23 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=7CE716D01F4FC344F144269B126A4499FA384571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:87:16:f1:80:fd:93:08:dd:50:10:89:9d:
                    17:7b:68:1d:51:ae:ac:af:76:57:63:b5:68:f6:4d:
                    b0:78:76:d1:6b:5d:cf:1e:8d:eb:9d:94:51:0d:3c:
                    6a:0c:48:a5:2c:c3:b9:63:c4:66:4b:d3:7c:02:1a:
                    6f:74:4c:c4:c8:e5:3d:32:6a:f0:b2:98:c0:97:25:
                    53:82:cc:cc:0f:7d:8f:1b:ae:db:e4:b6:17:c3:74:
                    bf:b1:e3:32:cd:d3:1a:9d:3d:18:12:83:8b:e1:db:
                    3f:5c:66:01:42:45:e1:36:6b:c7:a2:f2:6f:b8:f1:
                    13:96:99:05:5d:1f:98:33:b3:4c:e2:40:12:a1:e4:
                    a9:e2:13:69:1d:fd:1f:87:51:f7:17:82:7e:c7:e3:
                    aa:6b:e8:e5:88:33:64:0e:f5:87:24:68:84:22:d8:
                    d6:b3:c1:ee:b1:72:2b:1a:5b:7f:65:90:10:94:1d:
                    13:00:61:5c:77:db:df:0a:e4:5d:f7:ea:86:61:38:
                    99:18:66:2d:e7:a9:d4:b8:97:93:73:71:a2:07:18:
                    bb:d3:49:a4:31:bb:32:c1:3a:da:61:10:aa:e6:78:
                    e9:db:22:03:11:a9:fd:3f:85:6b:68:7b:2b:55:aa:
                    88:bc:59:bb:02:2a:8c:da:09:81:f3:c8:3f:0f:e2:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E7:16:D0:1F:4F:C3:44:F1:44:26:9B:12:6A:44:99:FA:38:45:71
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/fOcW0B9Pw0TxRCabEmpEmfo4RXE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.231.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:21:ba:8f:f8:96:36:7b:07:89:d6:48:ad:30:8d:33:8e:af:
         b9:99:16:64:f6:21:82:63:fb:fb:9d:95:23:d4:c1:d1:d0:85:
         4f:69:cd:a3:fb:80:20:8b:db:7f:9e:5a:08:5f:f6:fd:b9:06:
         b4:cc:92:5a:ee:4b:35:37:85:6a:40:bf:1f:dd:e0:b1:33:65:
         a6:5e:57:c1:19:bf:da:42:70:3a:74:f6:86:6e:1c:c5:60:b6:
         99:1a:fd:0d:ae:64:9b:1e:f0:6d:c9:16:34:de:11:e2:aa:5e:
         2b:ee:78:31:10:2f:8d:39:51:39:72:45:bb:9b:9f:5f:db:88:
         ab:c8:dd:74:8e:8b:c2:4d:0b:b1:5b:e7:a8:34:9f:c0:3e:9d:
         0e:fe:29:d5:36:fc:e6:43:b0:ca:37:bc:39:80:4f:6c:27:7f:
         98:72:ec:ff:29:d1:51:a4:df:ff:c4:ed:3f:ab:b5:f6:53:58:
         b8:ca:5a:bb:02:24:14:84:d6:d0:3d:ee:33:0e:29:30:bf:59:
         40:f1:93:fc:e4:07:ca:66:99:cb:69:b0:e5:3c:47:c5:33:a7:
         79:61:17:7a:a6:27:c6:c2:d1:7b:c8:81:e6:f0:16:61:0f:58:
         04:bd:b2:77:66:a6:be:0a:89:90:af:ec:30:4f:85:6b:b4:bd:
         5f:29:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org