Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/h0ngsUMNPPXJAN86QcLYIMsQ4QE.roa
File:                     h0ngsUMNPPXJAN86QcLYIMsQ4QE.roa (raw, json)
Hash identifier:          K2AmolrI88+GlBmim8jzV9QgAuVBZ09b0+A4WXLV3LQ=
Subject key identifier:   87:49:E0:B1:43:0D:3C:F5:C9:00:DF:3A:41:C2:D8:20:CB:10:E1:01
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       017E
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/h0ngsUMNPPXJAN86QcLYIMsQ4QE.roa
Signing time:             Thu 22 Aug 2024 05:13:55 +0000
ROA not before:           Thu 22 Aug 2024 05:13:55 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     54825
IP address blocks:        103.2.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 04:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug 22 05:13:55 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=8749E0B1430D3CF5C900DF3A41C2D820CB10E101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:02:99:a6:85:66:12:a9:1e:bc:c3:b0:59:49:
                    43:8a:34:75:fa:ff:15:3c:52:e1:8f:f8:b7:ab:06:
                    ec:2d:ef:e1:31:5d:8a:e3:4b:e1:ac:00:21:14:87:
                    fc:b9:66:80:04:81:b4:bc:59:a9:33:f1:ad:9e:34:
                    71:23:1b:42:2d:b2:38:58:2b:1d:bf:0d:38:34:51:
                    e7:59:cc:04:3b:3d:a4:d4:3d:49:a8:f4:ce:ad:cf:
                    91:c5:7f:24:56:38:88:69:cf:4b:e0:2e:f8:f7:c9:
                    bd:56:a0:b2:85:98:ef:11:0e:5d:40:84:33:22:d4:
                    4d:55:f5:8b:4d:39:34:20:c4:b0:e1:e1:ac:b8:bd:
                    e6:5f:db:48:09:00:a4:e8:01:18:0b:d3:94:eb:b7:
                    9c:b2:54:98:8b:0d:6d:c7:26:cc:4f:22:da:e4:f4:
                    8b:15:aa:fe:d7:2d:46:58:95:79:65:df:51:09:6d:
                    59:5b:72:a0:4d:60:e2:e6:35:6d:d6:37:47:a7:b2:
                    a4:74:83:1b:e4:56:75:44:3d:8f:41:21:de:5d:b9:
                    c8:f6:5f:5f:96:e7:c9:76:8a:18:ec:6a:11:cf:a8:
                    bf:b2:39:f3:cf:0c:85:6f:b2:5f:db:c9:15:55:38:
                    0b:68:36:fc:b1:3a:fb:e0:d6:81:ab:4a:49:15:66:
                    09:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:49:E0:B1:43:0D:3C:F5:C9:00:DF:3A:41:C2:D8:20:CB:10:E1:01
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/h0ngsUMNPPXJAN86QcLYIMsQ4QE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:a1:31:4e:a9:14:86:a1:6f:b9:3b:83:9f:42:c1:ad:ac:
         fa:61:cd:c2:cc:27:ca:bd:10:e1:dc:12:52:ac:09:f4:bd:13:
         cc:c5:43:b3:63:62:51:ce:b0:69:c8:41:eb:e1:3a:38:71:5e:
         e4:b6:d0:98:1e:4b:a5:1e:76:14:7c:ea:c4:21:bb:58:9a:24:
         69:fd:eb:e4:cf:58:6f:d4:4f:32:7c:77:6c:67:ee:55:8a:61:
         04:7c:55:56:e2:72:19:38:f8:20:84:7f:bc:28:24:50:bc:ce:
         b8:d6:09:ad:d8:6c:d8:9c:51:df:d5:26:c4:92:d5:e2:07:fb:
         04:3f:a5:7c:d3:a5:ec:6f:a5:80:fd:7e:41:7f:29:1e:ea:d7:
         83:3d:0f:89:ad:67:e6:a8:40:dd:ce:43:96:24:86:2b:d7:09:
         12:b3:9e:9c:79:b2:9f:49:00:b7:ce:9c:15:81:31:cd:d3:e2:
         28:cb:32:0d:4a:9d:85:e3:dd:74:b2:e7:10:c2:b8:c2:da:67:
         7c:e7:b5:24:70:06:e9:7d:e7:38:dd:24:8a:51:a3:69:a0:7e:
         3d:5a:f5:97:dd:71:d9:7f:11:af:20:ba:d6:bd:9a:81:af:c2:
         73:0f:97:1b:f4:a9:be:4d:62:64:7d:bb:a5:e5:44:ea:4d:13:
         a3:a9:63:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:52:52 2024 by rpki-client on console-ams.rpki-client.org