Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/fzEU3cHr4NUdOlrWetYqJC0lxRc.roa
File:                     fzEU3cHr4NUdOlrWetYqJC0lxRc.roa (raw, json)
Hash identifier:          bjhcfJo5xHyk2Xlw1K33TZiwwRXsRjdynutquoHwV7s=
Subject key identifier:   7F:31:14:DD:C1:EB:E0:D5:1D:3A:5A:D6:7A:D6:2A:24:2D:25:C5:17
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0173
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/fzEU3cHr4NUdOlrWetYqJC0lxRc.roa
Signing time:             Sun 01 Oct 2023 01:34:23 +0000
ROA not before:           Sun 01 Oct 2023 01:34:23 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        211.120.128.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:23 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7F3114DDC1EBE0D51D3A5AD67AD62A242D25C517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:4f:18:3e:85:cd:e2:f8:58:46:aa:b7:b3:
                    fe:8c:06:5a:71:3e:23:49:1e:5d:62:90:00:3c:65:
                    0b:50:a4:9f:6b:1f:d5:b1:02:20:6b:35:ba:07:19:
                    54:9d:a8:14:b5:f9:13:61:e0:81:72:5c:9e:11:a5:
                    6f:15:cd:11:0f:64:e0:b9:ea:09:e2:f7:62:27:92:
                    37:ac:69:1d:a9:4a:a9:cd:71:7e:2c:d1:43:18:23:
                    f9:d6:78:a9:3c:2f:3c:e3:b7:fc:33:c4:5b:5a:34:
                    5e:bc:1b:d7:05:be:c2:bd:00:e6:95:bf:72:11:92:
                    bc:8a:31:0a:de:c7:cb:8a:42:a4:73:3d:0c:dd:57:
                    2c:36:50:34:5e:46:f8:8f:5a:c2:f1:ce:9d:29:ae:
                    79:07:42:6f:cc:1d:2a:ae:ad:da:26:83:ef:6a:9a:
                    f9:7b:44:d8:6f:b8:86:e1:5e:64:85:30:13:4f:cb:
                    65:e8:8c:54:f9:a0:32:1b:bc:49:aa:ff:12:7f:39:
                    be:d4:2f:6c:db:cd:72:e1:ce:88:e8:68:57:38:5f:
                    f2:89:fa:10:12:6c:8a:7f:bf:c8:80:8d:c0:77:f3:
                    0e:74:ce:2f:38:f0:d0:e0:65:cc:2a:6d:9c:a4:c7:
                    17:11:c1:5d:db:3f:9f:3b:6d:34:48:da:fc:e2:db:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:31:14:DD:C1:EB:E0:D5:1D:3A:5A:D6:7A:D6:2A:24:2D:25:C5:17
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/fzEU3cHr4NUdOlrWetYqJC0lxRc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a5:b6:52:a0:4f:54:00:7d:84:ad:6d:39:d3:37:f7:4b:34:04:
         9a:bc:16:73:9f:af:77:61:30:c6:de:58:a3:c6:00:43:e8:c4:
         7f:ce:e5:50:a4:9c:2a:c0:9f:e9:d0:48:37:b5:bd:00:17:35:
         25:e8:b0:8d:e5:ac:68:cc:91:2a:c7:88:a3:a3:cc:8e:79:05:
         21:65:cd:42:29:23:a7:0b:07:16:9d:4c:67:df:ca:42:ce:9e:
         44:c8:f0:20:94:34:c2:24:53:5c:b4:f9:a2:12:09:c2:6b:60:
         19:3e:e2:5a:01:5f:4a:2a:a5:86:69:f3:0b:4d:ae:b2:d3:d8:
         98:df:4f:36:04:95:db:c7:ac:12:1c:b7:ea:79:82:59:d7:a1:
         dd:d5:67:22:ef:d4:cf:ae:6d:3f:38:2b:aa:1b:6b:da:3a:a4:
         c1:e1:a1:e7:3f:2c:d3:28:c6:c2:59:50:6a:69:fd:0b:06:03:
         2d:29:0e:72:a5:a4:83:04:05:30:41:b5:ec:29:eb:91:6f:62:
         6f:4c:e4:94:dd:07:29:ca:ca:e0:43:93:ce:f3:87:2e:06:ad:
         1d:98:b7:11:97:ab:60:df:bf:bc:aa:60:63:4d:7c:a7:27:81:
         40:c0:ac:0b:2b:a1:2a:7f:d4:f3:e3:8c:9d:80:de:19:ac:40:
         06:be:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:55 2024 by rpki-client on console-ams.rpki-client.org