Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/tYxKuUshPzJMhHMhQtKz15oTbJM.roa
File:                     tYxKuUshPzJMhHMhQtKz15oTbJM.roa (raw, json)
Hash identifier:          njLHmIalYdtv5TKMOfjSqhSoHG00O17XHmPOE65VHtE=
Subject key identifier:   B5:8C:4A:B9:4B:21:3F:32:4C:84:73:21:42:D2:B3:D7:9A:13:6C:93
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01B0
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tYxKuUshPzJMhHMhQtKz15oTbJM.roa
Signing time:             Sun 01 Oct 2023 01:36:37 +0000
ROA not before:           Sun 01 Oct 2023 01:36:37 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        219.113.96.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:36:37 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=B58C4AB94B213F324C84732142D2B3D79A136C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:6c:ac:fa:00:ff:18:99:c9:be:42:2e:dd:
                    45:8f:ce:72:ad:9a:99:69:a6:2d:be:b1:a2:14:a6:
                    dc:21:c8:0e:9d:3f:cc:f6:6c:e9:57:db:7f:6c:ad:
                    99:fb:e4:bb:a7:f2:56:54:a2:29:50:55:3b:d3:e4:
                    a4:5f:aa:31:ab:03:ab:56:6d:06:fb:c5:b0:c3:27:
                    7e:6f:99:13:c7:6c:c9:31:58:7b:37:02:24:92:ab:
                    66:a4:df:54:d5:f1:cb:49:2e:aa:95:1e:33:49:01:
                    f6:80:3f:b2:11:a1:de:02:80:91:62:e3:e7:68:84:
                    e0:b5:e5:a5:5a:84:4f:2c:fb:8e:f4:bf:6a:82:8b:
                    d9:c9:1f:08:5d:99:87:01:a9:84:3b:82:5d:b3:8b:
                    1a:bc:74:ef:f4:bb:04:81:24:bd:f1:6c:2e:f4:da:
                    d0:0a:04:ba:ff:43:8e:e0:6e:32:85:36:bd:98:b0:
                    1c:64:16:bf:7d:6a:ef:e5:1b:74:47:f6:32:26:1d:
                    41:7b:a8:93:c1:30:69:20:02:af:79:8b:45:3d:a2:
                    2f:fb:a3:61:15:0f:a5:df:9c:39:40:9f:82:60:7e:
                    a2:cf:1e:5d:51:51:9d:56:d5:ca:1e:29:92:c7:d4:
                    01:48:77:95:8f:be:94:3f:b7:af:2e:70:b3:80:68:
                    66:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8C:4A:B9:4B:21:3F:32:4C:84:73:21:42:D2:B3:D7:9A:13:6C:93
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tYxKuUshPzJMhHMhQtKz15oTbJM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d7:d4:b7:2f:30:0d:19:1c:db:69:f3:d6:38:c2:b5:66:9f:60:
         4d:30:4e:60:8a:27:f2:05:c5:69:ce:52:cf:cc:75:47:f5:80:
         62:49:61:a3:81:ee:f5:0a:4a:2c:fb:77:08:9c:9c:4d:ce:36:
         2e:f8:ff:38:53:15:c4:7d:cd:52:02:e0:ff:6f:4b:d9:d1:d9:
         44:d8:3b:b5:55:4b:64:46:30:24:5e:f2:93:aa:b8:c1:d9:05:
         56:ac:ae:de:75:fa:1e:f1:80:90:71:7f:ad:04:78:9a:07:53:
         8b:5a:f8:a4:57:b3:ef:21:63:90:e4:8c:88:d5:10:52:b7:33:
         12:7a:6c:a9:be:8b:e7:22:c1:b7:94:79:1d:08:cb:d1:43:19:
         60:c1:fe:04:b6:70:1b:fd:3c:1c:f9:f1:28:3b:47:21:f8:5b:
         d5:0a:01:4f:4a:fc:95:fe:32:c5:cf:39:52:d5:d0:58:de:51:
         ce:56:e4:7e:7b:48:14:18:06:16:94:af:a7:82:4c:fc:88:cb:
         06:99:50:d1:4a:db:98:4d:0a:2e:f2:7c:f2:c1:48:8d:71:3d:
         10:af:49:07:0d:7a:45:32:e5:52:ff:de:35:80:09:db:c5:c2:
         9c:10:6e:dd:e2:c4:aa:e2:e0:5c:fd:b3:37:1e:ba:7b:0c:ac:
         95:de:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:56 2024 by rpki-client on console-ams.rpki-client.org