Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/bawGwy4IYMLuEGMK4MfxeyEI61s.roa
File:                     bawGwy4IYMLuEGMK4MfxeyEI61s.roa (raw, json)
Hash identifier:          ff31awRxQ0u4d1odIMyX/OJD4E0OaOGITbiftuon/jM=
Subject key identifier:   6D:AC:06:C3:2E:08:60:C2:EE:10:63:0A:E0:C7:F1:7B:21:08:EB:5B
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       4E
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/bawGwy4IYMLuEGMK4MfxeyEI61s.roa
Signing time:             Thu 13 Apr 2023 09:52:49 +0000
ROA not before:           Thu 13 Apr 2023 09:52:49 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     59105
IP address blocks:        103.247.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: Apr 13 09:52:49 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=6DAC06C32E0860C2EE10630AE0C7F17B2108EB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cc:61:0a:26:9d:73:30:4a:77:c5:e3:b6:4a:
                    9f:60:40:b4:7f:b4:af:12:45:34:e1:78:75:b4:88:
                    b6:be:59:05:4f:f5:b1:88:14:78:fc:da:01:1d:20:
                    dc:f9:71:8b:6b:2f:74:b5:95:a6:6d:03:4e:1c:c6:
                    ef:6e:ef:02:ea:37:99:bb:f6:46:74:2b:6f:f4:6c:
                    5a:f5:71:9c:44:29:87:35:6f:cc:b2:04:38:60:6b:
                    f2:73:2a:c6:4e:83:2f:96:4a:8c:a3:6e:f2:69:cb:
                    cb:66:f9:c8:b3:6c:47:cb:19:c2:cd:b7:38:e8:b7:
                    21:d9:66:d4:fa:2d:2f:3b:ea:82:62:70:73:10:c1:
                    3a:7d:54:7e:9c:43:e4:87:48:28:4f:c6:56:04:3d:
                    39:56:97:c2:de:bc:31:76:09:2c:3e:b7:92:a5:40:
                    d9:c5:0a:3a:7a:e4:4f:57:ef:4f:b8:51:02:be:b6:
                    f3:fa:91:d7:95:59:ad:b0:86:09:af:ae:3c:58:32:
                    f4:a5:03:8b:ea:81:ef:00:1c:e5:79:a8:ad:29:7f:
                    21:eb:d2:29:d6:3f:b6:03:e1:c6:28:e6:cc:0f:a6:
                    c3:2c:9f:07:3d:92:3f:de:f7:4e:c0:3c:83:c1:87:
                    33:0f:32:e1:e2:70:ea:48:72:6e:a2:dd:5e:fe:1f:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AC:06:C3:2E:08:60:C2:EE:10:63:0A:E0:C7:F1:7B:21:08:EB:5B
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/bawGwy4IYMLuEGMK4MfxeyEI61s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:16:1c:21:e5:ce:cd:28:25:8a:f8:c0:b7:47:8f:97:cf:7a:
         3d:c8:2d:bf:fe:02:dc:19:43:84:3b:53:c5:fd:64:cc:dd:83:
         ba:d1:4a:c1:73:31:59:9c:50:e8:01:88:e6:18:4d:4b:06:d8:
         e1:29:f4:28:09:17:02:de:a5:ff:1a:2b:03:21:4c:30:15:9c:
         78:ad:bc:37:05:bf:5b:93:63:9b:c9:f7:cf:31:d7:b7:e2:d5:
         60:9c:61:0e:d5:ca:87:62:b0:31:60:3e:1e:1d:f0:d0:44:9c:
         f9:c9:d7:82:02:9d:a2:48:65:a6:9f:97:9c:3e:1b:ce:5c:1c:
         89:d5:60:c8:ba:c0:3d:5b:fe:77:de:be:6e:27:45:f0:9b:39:
         92:74:e0:43:b1:16:2c:5c:7b:30:f4:84:e8:72:7d:65:20:48:
         60:a1:40:ac:a6:21:3d:e9:b5:5b:81:e7:84:a8:6b:70:dc:5a:
         ce:d7:1b:d1:ce:f0:fc:fb:6d:53:b9:fb:49:f2:a0:08:5c:43:
         60:1d:2a:4d:fd:d8:d7:1a:45:dd:66:0f:7e:2a:b3:59:9f:c8:
         9e:4c:fc:0a:05:b0:a5:4f:d8:b7:39:e3:d9:9d:00:ac:6f:fd:
         d0:bd:5e:34:bc:38:bc:b5:26:bd:ea:40:56:8c:fc:5b:32:30:
         d0:e9:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org