Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/XaALocW8INIx8MZ4qFI3Xn3oV8M.roa
File:                     XaALocW8INIx8MZ4qFI3Xn3oV8M.roa (raw, json)
Hash identifier:          zA4amGQBCyZgtRv+DxpC3YIVqII1wBbY52xMt7ydMrk=
Subject key identifier:   5D:A0:0B:A1:C5:BC:20:D2:31:F0:C6:78:A8:52:37:5E:7D:E8:57:C3
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       4C
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/XaALocW8INIx8MZ4qFI3Xn3oV8M.roa
Signing time:             Sat 01 Jul 2023 01:28:13 +0000
ROA not before:           Sat 01 Jul 2023 01:28:13 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     17675
IP address blocks:        219.96.96.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Jul  1 01:28:13 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5DA00BA1C5BC20D231F0C678A852375E7DE857C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:b1:5d:3d:76:6e:1b:a6:92:31:0a:47:2b:
                    db:af:d8:2c:b0:e7:50:1d:ee:15:d1:c2:8c:41:90:
                    68:3a:c9:56:98:b6:eb:b3:45:2e:28:0c:8d:c8:cd:
                    c0:0f:62:b3:b8:9f:d8:57:65:5a:67:94:0a:56:63:
                    75:43:bd:49:1f:55:f6:7a:a7:7b:a9:05:19:2a:84:
                    76:71:30:0f:4a:03:e4:f4:12:71:aa:21:7f:1c:74:
                    f8:00:c2:dd:e5:07:3a:ee:90:f5:8a:25:ca:47:b6:
                    a1:36:13:bf:28:4f:11:d7:01:0b:54:8b:31:d5:54:
                    6a:23:05:37:b8:95:02:32:7a:e3:2b:5c:18:00:6e:
                    39:f8:bd:d5:31:79:12:c2:58:34:90:46:0e:18:42:
                    98:e8:4d:0f:03:b2:f8:17:72:f2:c2:5f:eb:e1:06:
                    3c:91:73:6d:16:e5:6e:6c:e5:1c:b5:03:fa:64:4c:
                    56:19:9e:a3:03:ba:d7:69:d3:ce:de:f8:92:41:81:
                    0e:38:f6:a0:d1:38:c3:d0:f3:98:da:3e:fa:36:de:
                    e0:a8:2d:f5:e4:a4:50:ea:f2:c3:be:60:82:4a:8f:
                    14:a4:a4:5c:4a:b4:28:7a:87:03:b4:5e:0f:e3:ac:
                    5f:44:43:f8:04:13:c3:18:e0:53:12:75:4a:e1:a9:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A0:0B:A1:C5:BC:20:D2:31:F0:C6:78:A8:52:37:5E:7D:E8:57:C3
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/XaALocW8INIx8MZ4qFI3Xn3oV8M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:e0:12:84:e1:e9:76:99:a1:66:b8:dd:72:5c:24:55:ab:0a:
         9c:8d:bc:14:df:a1:7c:c5:fe:26:46:17:fb:f8:53:2e:bb:e0:
         cd:2e:6c:b3:9c:cf:87:34:d4:94:2c:46:18:6e:2f:81:a7:de:
         47:9b:a9:ae:c9:c1:28:5b:42:7a:f8:ae:70:35:ef:2f:33:d2:
         b7:82:bc:90:5b:6e:a1:a7:56:4e:a7:57:08:09:cd:d0:16:1d:
         94:d8:93:ab:9f:9c:43:75:50:c7:8b:97:10:2f:9a:a2:a4:8e:
         a4:4c:b2:40:39:72:0e:e3:c2:28:1c:7d:fd:37:0e:75:61:50:
         29:93:44:5b:bb:d9:8a:3c:bc:8d:ce:41:d3:8e:a3:a1:16:88:
         d9:c1:dc:5f:4e:d0:5a:03:4f:a5:7f:3a:9f:d8:72:c6:c2:ed:
         23:da:6f:15:99:3a:d3:6c:21:3f:0b:b3:1b:55:74:02:54:0a:
         13:47:2a:33:8e:33:bf:06:b4:3f:8c:2d:ed:a7:e9:8c:18:ea:
         7a:14:fb:0d:bd:f0:db:57:1c:ba:34:08:62:34:88:76:e2:61:
         03:ef:09:56:96:4d:30:02:b4:37:12:50:ac:98:67:1d:16:ca:
         b2:ad:c9:7d:a6:c3:99:82:ac:d2:c5:1e:8b:9b:3e:5a:1d:f7:
         84:ef:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org