Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/3_F0NjbDRhuVUuPfobWJG5M7IYY.roa
File:                     3_F0NjbDRhuVUuPfobWJG5M7IYY.roa (raw, json)
Hash identifier:          FdYvms8NQGYLPb5FZBLWejbLR5s5XDTABYRrDVEzwYY=
Subject key identifier:   DF:F1:74:36:36:C3:46:1B:95:52:E3:DF:A1:B5:89:1B:93:3B:21:86
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0121
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3_F0NjbDRhuVUuPfobWJG5M7IYY.roa
Signing time:             Fri 01 Sep 2023 01:30:28 +0000
ROA not before:           Fri 01 Sep 2023 01:30:28 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     18134
IP address blocks:        111.125.144.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:28 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=DFF1743636C3461B9552E3DFA1B5891B933B2186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:50:cb:cd:72:87:7e:1d:64:8b:3b:97:1d:78:
                    b7:b0:2e:12:f5:4c:ad:e2:9a:93:09:c6:04:a0:81:
                    85:24:74:90:5b:a0:e0:71:c5:66:39:0a:24:60:a0:
                    af:38:92:c8:ba:15:3a:2b:d4:29:e1:d6:9e:ff:27:
                    72:a2:7c:1d:da:ec:9b:17:76:3a:f7:7d:ad:c6:f5:
                    37:43:e2:c8:f2:17:77:6f:41:b7:4b:96:fe:67:e1:
                    02:5d:22:cc:bb:e9:ac:ed:c1:52:9c:15:00:6e:21:
                    5a:58:08:59:2b:be:7b:22:af:d2:2c:4c:9e:a7:2d:
                    69:10:e8:39:78:5f:d5:87:8a:ab:58:fd:c1:0c:00:
                    ad:0e:a9:cb:0e:28:a0:bf:47:97:bc:f9:cc:a1:cc:
                    15:c1:03:43:a9:f2:99:18:04:c6:b0:d8:1e:8e:15:
                    4a:19:fe:fc:de:be:e7:54:e3:50:9a:35:06:f5:78:
                    3f:1e:9c:e9:bf:2f:a9:3b:68:6c:34:df:3d:51:5d:
                    b1:14:e8:b4:04:90:f6:cf:bc:71:ff:48:9b:b1:70:
                    f4:f3:e4:ca:ce:b1:07:3f:e4:22:d7:e5:9e:56:c9:
                    cd:87:56:0c:64:0b:60:7c:2f:d5:e1:3b:7f:c5:ae:
                    b0:95:11:8e:28:23:7c:b2:43:d0:c6:62:59:5b:fd:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F1:74:36:36:C3:46:1B:95:52:E3:DF:A1:B5:89:1B:93:3B:21:86
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3_F0NjbDRhuVUuPfobWJG5M7IYY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.125.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:aa:93:7d:17:a4:cf:54:75:d8:d7:a2:9b:aa:68:56:91:
         fd:cb:f1:fc:6c:f5:39:f2:f2:bd:c9:6f:a7:73:15:a9:57:20:
         7f:56:cd:99:3f:bb:18:a1:d5:b6:99:69:7a:f1:4d:c1:b0:1f:
         a7:d0:41:4c:7e:ac:37:fc:49:fb:8a:98:b6:bd:17:da:57:13:
         c8:9b:62:1a:a5:d8:78:79:74:6d:44:4a:01:75:46:74:b4:d1:
         54:06:a6:9c:47:f9:78:c6:f7:17:3b:5f:08:a3:50:b6:7d:c5:
         2b:45:53:ab:9f:ff:e2:af:92:16:ab:18:42:bc:82:1d:e0:3d:
         e5:10:1b:3f:a8:c5:43:cc:f3:84:1e:a9:ce:39:71:10:cf:cf:
         e7:ea:b1:11:fe:5f:96:e1:9a:87:34:c5:dc:5d:37:77:ec:bd:
         25:1b:87:45:e0:a5:86:55:48:6d:aa:02:6d:f6:bc:fd:90:0a:
         fb:46:cd:e3:ac:40:e1:13:fe:b0:99:55:96:a4:b0:6e:9d:db:
         1b:b6:55:03:15:3d:e6:50:36:80:6e:41:7a:4c:09:2c:8a:81:
         13:d6:b9:aa:07:ef:4f:0a:37:41:68:eb:b0:02:13:41:9f:95:
         aa:5d:b7:7b:a9:94:09:e3:52:0d:70:6a:09:5e:cc:cc:38:1c:
         1f:ae:b5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org