Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/WstfNNJqD7dGuRL9N-mumvLpo50.roa
File:                     WstfNNJqD7dGuRL9N-mumvLpo50.roa (raw, json)
Hash identifier:          /ukFFNQ/16jES6BDAlTlbAw7sQop/bMj0ojFxCfDWRU=
Subject key identifier:   5A:CB:5F:34:D2:6A:0F:B7:46:B9:12:FD:37:E9:AE:9A:F2:E9:A3:9D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       014D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WstfNNJqD7dGuRL9N-mumvLpo50.roa
Signing time:             Sun 01 Oct 2023 01:32:57 +0000
ROA not before:           Sun 01 Oct 2023 01:32:57 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        202.57.224.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:32:57 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=5ACB5F34D26A0FB746B912FD37E9AE9AF2E9A39D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:78:c5:98:06:53:97:ae:7f:d5:24:70:c9:85:
                    31:43:9b:df:30:43:be:0c:ed:90:65:75:74:50:0e:
                    44:d0:c1:d2:0d:d4:d9:71:5d:b9:19:c8:2a:e9:07:
                    51:9c:3a:37:b0:1b:4a:e1:49:a5:06:50:c9:7c:67:
                    2b:0c:4b:4e:c6:54:5b:cf:37:7b:b7:41:95:2c:59:
                    2f:54:bb:23:74:bf:8e:48:9f:7f:22:51:b6:20:9d:
                    61:77:bf:03:7d:d1:d6:3f:06:40:82:7c:7c:1b:7e:
                    ec:dc:b5:eb:c1:cd:9d:d8:72:bd:4d:49:35:ff:ce:
                    b1:c4:1f:0e:a3:ca:d6:9d:ae:26:a5:3e:35:0a:8c:
                    b8:53:8f:61:50:db:0d:70:d9:07:ad:ee:f1:9c:04:
                    08:e8:96:37:f2:c0:2f:e2:a0:09:71:2d:7d:af:02:
                    c1:fc:46:52:81:d5:8f:73:dd:5f:3f:2f:ae:78:5b:
                    c6:9b:0e:4a:03:ef:3a:40:8c:22:07:7b:2c:48:d0:
                    e9:58:bc:22:6b:8e:5f:c2:41:f0:d9:18:cd:4e:01:
                    a8:97:9e:a0:6c:cf:4b:7b:2c:71:36:f8:32:ba:0f:
                    6a:8c:cf:62:f2:b6:1e:19:ea:51:b0:b4:ec:18:15:
                    70:0d:41:9d:ee:e9:af:71:08:13:62:28:9a:78:00:
                    2b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CB:5F:34:D2:6A:0F:B7:46:B9:12:FD:37:E9:AE:9A:F2:E9:A3:9D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WstfNNJqD7dGuRL9N-mumvLpo50.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bf:dc:51:21:52:b5:71:f3:99:05:e7:52:cb:97:f0:d5:8e:b9:
         ed:5e:72:4f:70:ff:1c:b8:e2:47:f0:82:43:3c:02:43:5e:26:
         39:6a:1a:c1:40:d8:f4:29:55:fd:52:b6:05:44:98:e2:b2:68:
         62:d7:6c:00:39:40:27:7d:8c:74:68:75:e2:cd:09:78:dd:99:
         06:bf:87:39:af:da:cc:2b:d2:5a:08:33:eb:30:28:d7:d7:c3:
         8a:a1:85:32:a5:1e:47:46:a5:29:31:bf:98:de:38:3b:6a:50:
         e0:35:98:11:fd:46:0d:d0:75:56:e5:95:9a:90:08:ce:56:7a:
         93:99:bf:d3:60:b3:e7:22:a7:bc:00:e4:96:5b:75:f0:81:d6:
         6d:7f:5a:e7:34:29:51:af:f3:a4:f6:92:2a:24:46:f4:52:cb:
         d1:f2:98:54:9c:8d:2d:13:25:ab:40:bd:ad:45:11:98:d9:bd:
         a2:d5:11:2e:fe:0f:d9:90:0c:90:56:01:14:03:6e:23:0a:95:
         7b:f8:86:50:23:09:47:c2:a9:be:82:9c:06:eb:1e:d2:13:7d:
         f3:67:ec:46:6c:02:78:c2:9c:c7:2c:ce:39:ec:99:30:4a:71:
         81:6a:f9:28:be:87:c7:e9:4f:98:bd:8c:88:e1:e1:2d:38:a6:
         f4:a1:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:55 2024 by rpki-client on console-ams.rpki-client.org