Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/VHQo1jGYm_trWnq9yZH4quQOElc.roa
File:                     VHQo1jGYm_trWnq9yZH4quQOElc.roa (raw, json)
Hash identifier:          rlFY7PjJ97DRwq79OJFkjpB7jNiidsXj0QanPgqun30=
Subject key identifier:   54:74:28:D6:31:98:9B:FB:6B:5A:7A:BD:C9:91:F8:AA:E4:0E:12:57
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       013C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VHQo1jGYm_trWnq9yZH4quQOElc.roa
Signing time:             Sun 01 Oct 2023 01:30:16 +0000
ROA not before:           Sun 01 Oct 2023 01:30:16 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9378
IP address blocks:        124.195.144.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:16 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=547428D631989BFB6B5A7ABDC991F8AAE40E1257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:c1:49:16:e4:82:45:80:e5:94:ee:00:c3:
                    a9:f6:9f:bd:73:ed:5d:19:0f:42:a3:da:d8:30:ac:
                    8d:96:4a:1c:f1:15:7a:f6:72:81:dc:68:5f:b9:c4:
                    e6:fc:2e:34:30:cd:ba:61:74:6e:08:26:f7:6f:7e:
                    26:93:ac:b3:3e:40:fa:d3:55:ae:af:8c:99:8c:08:
                    36:ab:3e:3a:0d:c7:01:f3:ff:3c:56:42:ba:f6:ac:
                    de:2b:94:ec:85:19:f9:ea:8a:1f:e2:01:9d:30:6c:
                    4a:e3:f1:64:c5:b5:49:88:f0:3b:10:e7:39:36:64:
                    08:f8:9a:5c:09:d7:96:9d:ee:31:05:3f:68:08:7d:
                    69:96:08:e7:d5:ea:88:fe:61:cd:58:86:41:d3:06:
                    27:39:88:eb:af:cd:4a:85:0a:38:82:f4:9e:e0:5a:
                    c6:1d:06:58:19:ac:8f:69:6d:36:91:f0:52:af:06:
                    03:94:d6:38:41:84:59:01:18:50:6d:97:c5:4d:55:
                    0b:81:1e:a8:b0:6e:ba:1f:d2:4b:f8:80:3d:ab:a5:
                    b7:96:33:19:aa:bc:b0:76:7b:16:8e:42:f7:cc:7b:
                    d8:bb:9d:0b:7c:af:b4:4f:4c:df:5c:d1:79:e8:17:
                    55:eb:fa:18:59:97:0a:b6:3f:b2:df:87:cd:99:73:
                    3c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:74:28:D6:31:98:9B:FB:6B:5A:7A:BD:C9:91:F8:AA:E4:0E:12:57
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VHQo1jGYm_trWnq9yZH4quQOElc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.195.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:e3:80:7c:ee:7e:cf:1a:9b:01:43:45:b4:d3:9a:2f:f7:05:
         e4:6b:d6:cd:48:8b:b6:79:70:d7:b7:9d:62:b2:70:bb:6b:9f:
         af:58:d4:aa:d4:32:5e:69:8f:7e:c7:fb:1d:12:9e:0d:17:4b:
         5f:e2:89:39:67:68:83:a3:e7:44:ae:80:88:c9:c8:7f:d7:40:
         66:07:e3:0b:b0:f0:f4:0b:ae:3a:5e:b5:4e:ea:b6:4b:2a:bb:
         86:00:b4:d2:c2:1f:c1:1d:2e:32:e5:af:9f:ef:1c:eb:dc:11:
         5f:b3:80:76:69:e5:82:99:c2:09:91:11:76:b7:44:ec:19:76:
         88:25:22:a8:8e:25:d5:13:67:fb:8f:12:4c:ea:ab:dd:4c:e2:
         91:29:1f:db:70:47:ea:d1:2e:43:3b:91:64:02:9f:fb:21:79:
         2c:21:c0:6d:ad:b7:c4:a5:fe:a8:2f:b8:5d:04:f5:cb:66:e4:
         18:c7:e7:70:6e:0d:2e:73:39:d6:66:ec:4b:c3:6f:78:13:2b:
         42:68:66:c9:46:3c:04:28:e6:3b:03:3b:7e:34:e3:49:95:7f:
         9d:42:29:0c:8c:15:88:d0:50:82:52:d2:55:3b:1a:e8:07:17:
         f4:08:e5:98:9b:c0:f7:98:b0:90:8e:7c:ba:f3:6f:fb:62:de:
         90:ca:37:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:44 2024 by rpki-client on console-fra.rpki-client.org