Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/1ctqmly6T4aiJqnYdvVLsThlU-o.roa
File:                     1ctqmly6T4aiJqnYdvVLsThlU-o.roa (raw, json)
Hash identifier:          x/5JSiBl08clWOcPsFXKGeTixkCDZAAiwhuYkQiPQVI=
Subject key identifier:   D5:CB:6A:9A:5C:BA:4F:86:A2:26:A9:D8:76:F5:4B:B1:38:65:53:EA
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0109
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1ctqmly6T4aiJqnYdvVLsThlU-o.roa
Signing time:             Tue 01 Aug 2023 01:29:28 +0000
ROA not before:           Tue 01 Aug 2023 01:29:28 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        203.114.248.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:29:28 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=D5CB6A9A5CBA4F86A226A9D876F54BB1386553EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:07:1a:e8:e1:c9:51:6c:bd:d4:67:4c:6a:
                    b3:5b:e1:28:37:5c:2d:f2:b6:e8:94:a0:55:c5:a9:
                    c5:17:ae:27:33:8a:71:b7:6b:4c:fe:e1:d0:b5:b2:
                    73:b2:db:ac:c6:f4:c5:37:bf:e8:fe:5c:e5:7e:1d:
                    36:9e:57:50:3b:ef:84:4d:c7:a4:2b:f1:31:6c:3f:
                    97:50:8e:39:c6:c9:c2:3b:3e:31:2d:02:81:22:ba:
                    15:28:44:f0:a1:f1:e9:c0:bf:7f:29:51:ad:7b:13:
                    b9:e1:9e:20:aa:7d:ed:9e:ce:eb:0d:8b:7e:eb:0b:
                    75:6b:c7:e8:a5:c9:d9:a5:af:8b:e4:41:dc:84:e7:
                    da:30:18:37:c9:16:40:08:70:8c:2b:5a:eb:63:c7:
                    12:bf:10:e5:b4:18:51:67:7e:fd:7d:2c:e3:9a:86:
                    8f:17:e9:a8:b7:e7:db:a2:3a:bb:99:df:7b:97:a0:
                    2c:8a:0c:47:74:73:ea:2d:d6:91:73:ff:e8:da:28:
                    cb:cf:56:53:61:be:e7:97:6c:30:3e:a7:e2:d4:eb:
                    08:d9:13:dd:df:33:12:89:9d:8e:83:d8:14:c1:d0:
                    84:cb:59:45:b9:20:81:6f:2c:25:92:c3:f5:a9:c1:
                    d6:e6:0b:75:ac:61:54:cf:20:be:b5:12:73:ce:1f:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CB:6A:9A:5C:BA:4F:86:A2:26:A9:D8:76:F5:4B:B1:38:65:53:EA
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1ctqmly6T4aiJqnYdvVLsThlU-o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:c0:96:ca:c8:37:42:54:2e:0f:f4:c5:e7:84:50:5d:bb:d2:
         fe:c7:e2:72:73:17:21:b9:c2:74:5b:78:d3:4d:aa:a3:99:ff:
         6c:b9:72:92:9d:59:bf:a7:b2:7b:1c:16:be:5e:9e:a3:50:09:
         64:0b:e3:58:8e:c0:12:41:e5:72:6f:26:8a:24:c2:08:2c:57:
         55:e4:bf:7e:d1:8a:6e:58:07:c9:93:8b:40:0a:93:01:10:40:
         c3:a5:e7:21:c9:35:93:ac:77:fe:c1:86:50:16:2e:7c:ed:c2:
         60:0c:1c:39:ed:2a:04:08:c6:00:98:86:96:1b:bc:85:ee:8d:
         44:dd:61:62:52:cc:35:0a:1b:dd:35:71:0d:70:79:17:50:70:
         8b:c2:cc:53:38:07:14:03:4b:8c:b0:d6:34:46:a2:c6:84:d7:
         1d:52:20:2c:01:59:c8:01:32:c9:3e:db:ec:e3:01:05:da:20:
         45:46:6b:b9:0c:5e:b3:1e:04:60:1e:e8:66:b8:b3:9b:56:93:
         63:d2:95:48:94:a1:ae:33:eb:91:86:40:26:09:85:0c:6c:84:
         11:ee:1b:b3:f1:96:97:a1:cd:f8:0a:b5:7d:6d:cf:a9:42:49:
         ca:da:95:3f:28:f1:0c:e3:9f:1c:83:83:eb:a4:0f:b0:7e:c4:
         2a:70:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:42 2024 by rpki-client on console-ams.rpki-client.org