Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/gnrmOG3eLKjo1wvl25WGs5WEhPI.roa
File:                     gnrmOG3eLKjo1wvl25WGs5WEhPI.roa (raw, json)
Hash identifier:          jUFskS/++aw/iP++L1bN5aSriLT21/fpAhxmC9VN9Ck=
Subject key identifier:   82:7A:E6:38:6D:DE:2C:A8:E8:D7:0B:E5:DB:95:86:B3:95:84:84:F2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0168
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gnrmOG3eLKjo1wvl25WGs5WEhPI.roa
Signing time:             Sun 01 Oct 2023 01:33:08 +0000
ROA not before:           Sun 01 Oct 2023 01:33:08 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     23790
IP address blocks:        202.157.0.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:33:08 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=827AE6386DDE2CA8E8D70BE5DB9586B3958484F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:3f:76:4d:f9:37:f3:10:21:81:a4:c3:1b:
                    55:18:91:32:5d:62:c9:6b:5f:7a:00:88:6a:98:45:
                    6a:83:bc:e7:08:f3:a6:06:06:48:20:11:8f:df:9e:
                    5b:4a:7a:4a:a7:fd:69:08:f3:70:0d:c6:fd:af:d4:
                    0a:01:6f:59:c0:fd:7f:a8:a1:f2:a2:a7:e5:c3:a1:
                    7d:b5:99:73:e5:1b:eb:6d:a8:0b:de:9b:5f:4b:4c:
                    6d:dc:3b:bc:51:72:7c:62:a5:55:9a:6d:55:7a:de:
                    76:c8:9b:aa:8f:c5:c8:88:c8:45:87:ed:c6:da:c6:
                    ad:66:4b:2d:92:97:6e:45:d9:b0:9d:95:27:25:35:
                    35:6b:9a:0a:a1:11:93:b9:d9:9c:48:6b:3b:a1:61:
                    c4:d3:60:ff:b2:05:86:a5:4b:79:43:01:18:87:b9:
                    82:82:29:c9:60:99:47:8d:41:bf:3a:97:ee:b3:d9:
                    d3:fc:8a:68:7a:5b:5d:b6:6a:60:b5:c2:38:5d:6e:
                    3f:52:06:32:36:0e:11:a4:83:21:59:30:7f:65:0c:
                    31:a3:1e:cd:b1:24:58:b1:d8:89:11:98:9f:0e:5d:
                    84:3e:38:03:75:8b:a6:cc:4e:9a:04:c4:1f:a9:49:
                    d7:ee:9e:e8:d5:81:be:ef:19:7e:eb:71:24:56:cb:
                    04:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7A:E6:38:6D:DE:2C:A8:E8:D7:0B:E5:DB:95:86:B3:95:84:84:F2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gnrmOG3eLKjo1wvl25WGs5WEhPI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         e6:f4:7e:6d:3b:69:65:3b:6b:be:2a:5f:cd:7e:2f:37:a4:8d:
         65:91:4f:bf:21:d4:7f:7e:3e:10:38:66:3e:15:73:0f:03:31:
         56:2e:b6:95:89:d7:92:b7:66:e7:74:ee:69:0b:36:fd:09:15:
         d8:0f:fc:f5:a3:a3:a2:0d:46:78:78:2f:47:54:59:b2:1d:da:
         66:3f:7e:56:87:fe:b2:62:4a:48:1a:9e:79:95:a9:06:6a:00:
         b5:eb:84:af:e7:3a:b5:2c:88:b2:fa:fb:9f:fd:d9:e8:0a:cd:
         f9:3b:18:3b:08:13:41:7d:44:5d:ff:aa:df:27:96:4d:b2:97:
         e2:eb:38:e4:e2:50:37:0f:da:86:b0:66:20:31:86:6b:d0:7b:
         b3:c4:b0:e0:86:d4:ba:cf:34:35:ba:3c:10:ff:4d:cb:b8:34:
         f6:b7:ae:ba:93:94:8f:99:69:54:91:9d:92:b0:09:98:2c:e1:
         d5:a4:6c:0f:83:dc:b9:b7:7b:e7:81:b2:5a:04:52:8d:4d:ce:
         93:5e:df:05:b0:98:ca:55:32:14:ea:fa:1f:03:7c:e4:02:ee:
         fb:4a:1a:f2:71:5a:09:ae:e3:38:51:45:02:91:57:65:ed:88:
         33:a3:0a:fd:e4:cd:44:de:a7:09:80:87:a0:79:5e:3c:a7:cf:
         fb:3d:60:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:44 2024 by rpki-client on console-fra.rpki-client.org