Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/jxbrrG2RjnTPezjuEl-jH1sFKC8.roa
File:                     jxbrrG2RjnTPezjuEl-jH1sFKC8.roa (raw, json)
Hash identifier:          Etl147qMsYIziiea0VgY23g3VVN1N/1BVCxpYSNnKpE=
Subject key identifier:   8F:16:EB:AC:6D:91:8E:74:CF:7B:38:EE:12:5F:A3:1F:5B:05:28:2F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       015D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jxbrrG2RjnTPezjuEl-jH1sFKC8.roa
Signing time:             Sun 01 Oct 2023 01:33:04 +0000
ROA not before:           Sun 01 Oct 2023 01:33:04 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        110.172.0.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:33:04 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=8F16EBAC6D918E74CF7B38EE125FA31F5B05282F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:f1:26:cb:a0:a2:ce:f7:8b:23:96:84:63:
                    95:f8:96:5b:11:f1:83:7d:ea:df:5b:5e:bd:7c:a7:
                    5e:7a:16:8a:99:6c:cc:0b:ad:8a:f4:3d:c3:77:9a:
                    b9:de:f1:0e:bd:f2:05:cb:aa:14:0b:bb:60:9e:e5:
                    ec:6c:28:7f:ef:ae:bc:da:90:ca:ae:48:91:86:d4:
                    7d:d2:5b:51:ae:c3:9b:b8:ea:f9:06:95:73:c5:f0:
                    8f:e3:e6:b3:c2:6b:eb:d2:df:27:11:4d:83:7c:f6:
                    47:e6:ad:18:b7:27:65:fd:39:5f:c4:fa:b8:8a:e0:
                    74:18:75:81:62:19:9e:f1:f7:8d:4f:ae:88:e3:a3:
                    f4:f3:88:e1:2d:7f:ac:ca:42:d0:4e:e7:79:d5:75:
                    66:6b:93:b0:bd:3c:4f:ca:2e:ee:8b:27:9e:9b:43:
                    01:93:5f:33:5a:c2:9b:bc:9a:1c:43:a1:76:23:8a:
                    7c:cc:24:32:a7:42:0d:88:7b:a0:71:b9:da:6f:5b:
                    7d:a1:36:6d:33:49:b4:2d:f3:ee:a6:3f:20:31:88:
                    d3:69:c6:a0:b0:df:8b:c1:0e:ad:f4:7e:e3:a8:af:
                    d9:d2:4f:b2:7c:40:3a:53:f4:fd:c1:5e:8d:05:cc:
                    41:30:30:7e:4d:22:c1:14:2e:35:e5:3f:29:37:28:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:EB:AC:6D:91:8E:74:CF:7B:38:EE:12:5F:A3:1F:5B:05:28:2F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jxbrrG2RjnTPezjuEl-jH1sFKC8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.172.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:3b:bf:3b:8d:0d:cc:7e:cc:63:fc:a5:8a:ed:ad:1b:02:
         cf:ba:67:92:69:a9:38:84:a6:8f:de:a4:81:77:b1:6b:30:79:
         a4:60:89:1e:e2:20:cb:7f:ca:41:0d:70:da:37:bb:62:35:7f:
         cc:47:e6:55:d3:5b:90:6c:80:34:42:36:b2:5a:1c:d1:76:6a:
         60:f5:62:26:f5:67:3f:57:58:3e:91:c2:4b:e5:5c:5d:45:9a:
         79:53:5b:ea:e5:f4:d6:78:64:cd:09:57:0e:5b:0d:d4:e3:54:
         4c:83:55:c3:48:e9:2b:80:87:19:64:1a:1e:e1:4d:c0:0b:09:
         29:58:62:27:b0:1c:a5:70:30:7a:87:f2:af:7f:b5:89:90:c1:
         a8:7b:8c:01:30:00:2e:b2:fb:eb:64:bb:49:dd:b5:37:33:f2:
         76:82:f7:a7:d4:f7:1f:5e:b8:46:f1:44:28:ce:33:05:7c:0b:
         ef:a8:3e:4b:91:62:29:9f:d2:23:41:07:c9:03:7f:cf:9e:15:
         13:31:5c:43:d4:20:ac:01:b1:f0:81:c7:2b:75:fe:a7:f7:da:
         fd:27:91:9d:90:d7:44:59:bf:b4:c7:ad:2d:87:01:e1:7e:db:
         ae:6f:e0:23:0c:b7:e9:58:54:2a:c9:17:39:8d:7f:ea:b8:b8:
         ec:72:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:55 2024 by rpki-client on console-ams.rpki-client.org