Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZSw6rmh44NCbCnR7g0aZcDUd5As.roa
File:                     ZSw6rmh44NCbCnR7g0aZcDUd5As.roa (raw, json)
Hash identifier:          zcL/YDa+dZZgK5UF3JRQA4pDmmKZo5T46zAzCAtjLUI=
Subject key identifier:   65:2C:3A:AE:68:78:E0:D0:9B:0A:74:7B:83:46:99:70:35:1D:E4:0B
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       013D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZSw6rmh44NCbCnR7g0aZcDUd5As.roa
Signing time:             Sun 01 Oct 2023 01:30:17 +0000
ROA not before:           Sun 01 Oct 2023 01:30:17 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        124.195.144.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:17 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=652C3AAE6878E0D09B0A747B83469970351DE40B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:ef:18:bb:d4:6a:14:4b:6f:83:d9:fb:58:
                    f3:8d:4f:eb:8f:36:eb:47:b1:72:70:48:d4:b1:0f:
                    ec:8f:84:0e:0f:fa:f2:2e:38:d8:e6:d3:21:11:46:
                    fa:b5:d5:47:c4:63:b1:7a:d0:95:f7:3f:06:ef:31:
                    87:3e:ce:d8:a4:9d:4d:61:06:62:d9:80:5e:91:74:
                    ea:07:0a:c6:67:a8:7c:cd:c1:58:8c:b6:4b:3d:f1:
                    de:35:a4:6a:5c:b6:d6:43:bd:96:49:e1:41:ce:9d:
                    3e:dd:5b:c9:cd:8f:4c:25:cf:49:97:26:c0:8f:79:
                    c5:89:18:af:50:80:df:96:f6:dd:69:bd:43:94:b3:
                    99:35:ea:64:c9:4a:cd:a6:c5:79:87:f3:22:cf:58:
                    08:61:f5:51:ff:81:cb:71:b2:8d:fd:88:f2:9b:96:
                    f2:f9:31:2c:be:c8:35:6f:95:f5:b3:51:a0:c6:4c:
                    e0:48:25:60:68:96:da:a7:e5:6e:18:09:b0:ef:09:
                    47:58:10:8a:93:28:2a:8d:e5:49:de:10:04:cb:bc:
                    38:f4:88:7d:33:a6:a9:1f:db:72:a4:f0:f6:0e:90:
                    db:15:57:2d:d3:0e:6a:17:3c:8f:c9:c2:91:ce:aa:
                    a1:f8:2a:df:f8:33:11:19:2a:e7:b0:42:ac:93:c5:
                    b5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2C:3A:AE:68:78:E0:D0:9B:0A:74:7B:83:46:99:70:35:1D:E4:0B
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZSw6rmh44NCbCnR7g0aZcDUd5As.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.195.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:cf:66:c5:6b:7c:97:ce:7d:7a:4d:6f:b1:25:db:4e:db:2b:
         b9:52:5f:fc:c1:4a:5a:f0:d8:78:e0:a7:59:a5:0c:1b:5c:97:
         05:36:54:7b:a0:a7:a2:98:6c:1e:5b:07:3d:19:94:80:12:d4:
         fb:7c:4a:84:ce:10:89:6c:bf:eb:67:68:16:41:ad:b3:90:0c:
         bf:c5:cb:2f:ff:ae:91:58:50:52:1c:09:69:ea:4e:3b:68:4a:
         cc:12:37:63:e1:ad:7a:1d:51:c8:9f:33:6c:39:e5:01:5e:98:
         0b:58:9d:23:46:98:24:46:2d:4c:74:93:ae:ac:46:3d:31:a0:
         be:b7:f1:9f:8d:9a:c4:bd:aa:d7:39:c8:47:72:e4:98:c1:6e:
         86:8e:71:bc:7b:0b:c1:64:32:15:61:ae:93:97:fc:38:05:d6:
         9b:c2:41:fb:b6:31:9f:20:ab:50:f8:7b:ef:cb:7c:8a:18:b0:
         f9:8d:d4:e3:58:08:34:6e:f4:3e:23:db:43:61:cd:05:c5:90:
         41:03:34:e2:38:4f:1b:c7:32:64:a3:ed:88:97:06:b6:fb:79:
         a5:99:dc:25:db:85:f2:1a:0f:58:de:33:51:e4:01:33:66:e7:
         54:a9:8f:04:29:13:3b:62:54:88:1b:81:df:58:8c:b1:3b:18:
         c7:8b:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:55 2024 by rpki-client on console-ams.rpki-client.org