Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/5eOODQMIQ1CpImleKxkiizrKZCA.roa
File:                     5eOODQMIQ1CpImleKxkiizrKZCA.roa (raw, json)
Hash identifier:          fEcTNcpnfF35u/ygpA3/y2qQ2UQNjRigBKIL5Z625ZE=
Subject key identifier:   E5:E3:8E:0D:03:08:43:50:A9:22:69:5E:2B:19:22:8B:3A:CA:64:20
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       017A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/5eOODQMIQ1CpImleKxkiizrKZCA.roa
Signing time:             Sun 01 Oct 2023 01:34:26 +0000
ROA not before:           Sun 01 Oct 2023 01:34:26 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        110.173.240.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:26 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=E5E38E0D03084350A922695E2B19228B3ACA6420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b3:69:18:52:16:80:fa:90:8e:50:ad:8d:3c:
                    9a:98:b2:42:6d:5d:8c:99:32:ad:0e:31:61:a6:50:
                    b5:75:b3:a9:71:ef:ff:3a:e3:c9:0a:00:ab:98:1a:
                    5a:88:b4:68:fc:71:30:35:d1:71:8a:86:6e:e5:79:
                    94:b5:4b:9e:70:ce:95:d0:30:fb:32:2b:28:e3:17:
                    33:83:b4:f5:95:93:e0:56:69:74:d8:88:c6:a7:00:
                    13:5b:f5:4e:51:71:42:94:e7:7e:5b:95:4d:f4:36:
                    19:17:c2:22:aa:08:11:33:11:5c:86:c5:a6:c7:cf:
                    94:21:cf:85:80:42:80:b5:f3:8c:80:68:80:2a:6b:
                    fa:c4:b9:c2:83:5f:ff:ef:55:a4:be:26:54:9d:21:
                    cc:fc:2e:15:52:f0:9c:a5:78:44:c6:7b:85:0a:f5:
                    60:ab:67:d5:ce:e1:67:42:e5:df:11:9d:c9:a8:69:
                    7a:2b:b7:aa:30:35:a4:36:ad:b6:af:59:71:52:be:
                    85:ac:73:8e:44:dd:d7:c2:85:d4:7d:ed:e5:a8:21:
                    c6:66:f8:8e:77:82:76:c1:e3:1b:e0:f7:ce:b8:71:
                    07:58:86:6f:cc:df:36:ed:b5:fd:c3:c3:fc:9f:ad:
                    dd:53:ea:06:2a:a3:5b:74:af:5b:08:2e:e4:98:84:
                    e7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E3:8E:0D:03:08:43:50:A9:22:69:5E:2B:19:22:8B:3A:CA:64:20
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/5eOODQMIQ1CpImleKxkiizrKZCA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         dd:70:30:65:15:28:cb:d1:d2:1f:85:d3:dc:34:b7:c9:df:4e:
         7f:89:e3:17:6d:fb:e7:d6:6e:bd:27:0a:8f:e5:d5:58:71:1f:
         b2:0a:3b:c7:15:af:8b:54:91:42:16:c3:12:c8:c5:b7:07:c7:
         39:21:cd:d8:00:48:5e:2d:fa:71:18:4d:50:fd:62:17:53:54:
         b4:cc:46:38:2f:1f:db:33:d2:a6:17:b5:69:c3:99:3f:d6:40:
         a5:67:03:bf:08:44:0f:6e:23:27:c4:29:0d:35:36:3d:e3:ce:
         3e:e9:66:2b:41:a3:1f:98:9c:18:4a:b3:a6:e1:d2:f6:05:f1:
         7f:06:fc:4f:7f:a3:3c:02:59:11:46:60:a4:b1:16:51:79:83:
         75:62:6a:98:d5:21:e4:58:15:33:0d:08:ad:34:91:54:39:ff:
         3b:53:f1:aa:09:ab:65:d7:55:30:ed:7f:3c:ac:7a:eb:81:2a:
         63:0d:e0:bc:d4:88:f9:cb:72:1a:73:d7:c7:f1:d8:dc:10:df:
         73:34:83:54:38:0d:a3:17:af:37:f6:1d:65:f5:2a:30:36:f9:
         e5:d2:76:12:e8:23:aa:b3:a5:1b:71:84:35:5a:c5:24:76:d0:
         c6:15:63:eb:df:de:da:cb:f3:08:ea:8a:f3:c5:fe:6f:f5:e8:
         3a:ab:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:55 2024 by rpki-client on console-ams.rpki-client.org