Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/f3qBC0ZJCKKetAWWbCsPZR19QYQ.roa
File:                     f3qBC0ZJCKKetAWWbCsPZR19QYQ.roa (raw, json)
Hash identifier:          9/K7S2IWTGfQEYhCSgZLea9GBUztbrZbX70a8bAtXxA=
Subject key identifier:   7F:7A:81:0B:46:49:08:A2:9E:B4:05:96:6C:2B:0F:65:1D:7D:41:84
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       25
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/f3qBC0ZJCKKetAWWbCsPZR19QYQ.roa
Signing time:             Fri 06 Oct 2023 06:05:39 +0000
ROA not before:           Fri 06 Oct 2023 06:05:39 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        116.89.192.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:39 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7F7A810B464908A29EB405966C2B0F651D7D4184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dc:98:bd:0b:75:2e:81:76:ff:75:69:76:bb:
                    8e:b9:0a:f3:f5:70:25:48:06:6d:aa:3e:51:79:b9:
                    fb:7e:9b:74:d0:9c:52:b6:12:51:3d:6d:f0:3d:1f:
                    50:85:56:01:fe:ac:44:1b:c3:23:6f:da:ab:da:c8:
                    06:db:4f:58:91:68:38:bf:3e:37:3e:1d:9b:16:ad:
                    a0:05:f2:8d:da:d1:af:50:28:3f:5e:7c:41:8d:ed:
                    7a:bd:2f:77:d8:f0:ff:c0:ec:01:3b:d2:31:35:f1:
                    2d:26:cd:21:7a:69:bb:c5:17:79:c8:0a:46:2f:1a:
                    52:6e:a1:b0:3c:8b:07:4d:01:10:75:eb:2a:6b:82:
                    5f:18:4b:5f:d6:6c:de:f8:ba:36:10:0e:1e:7a:5f:
                    d9:ef:05:19:cb:69:0b:41:25:c3:e9:09:bb:a6:bb:
                    00:d0:f7:4e:06:76:e0:1e:b3:91:f6:72:83:e6:2f:
                    61:90:a0:f9:12:a5:e1:83:31:fa:3f:cf:74:71:02:
                    f8:d2:34:c8:e0:9a:40:ab:60:bf:28:8f:37:47:35:
                    76:e8:c8:c2:34:08:f3:f3:f3:1c:72:e5:b3:d5:16:
                    b2:0d:74:ad:6f:b6:f4:d5:0c:7f:c9:2f:fc:72:3f:
                    e4:4c:60:b9:7c:87:cd:bc:c9:93:9d:71:c8:19:54:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7A:81:0B:46:49:08:A2:9E:B4:05:96:6C:2B:0F:65:1D:7D:41:84
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/f3qBC0ZJCKKetAWWbCsPZR19QYQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.89.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:98:70:d7:04:4b:04:02:4b:de:db:eb:da:91:f6:83:be:58:
         52:c6:67:af:90:28:98:95:58:d1:b1:5d:7c:bc:7c:7a:ae:81:
         81:97:33:03:ce:a7:fd:21:1b:44:79:a2:03:be:89:07:74:fc:
         d4:45:3b:1c:a8:24:c0:2a:45:2a:76:8e:e8:75:ff:30:fa:41:
         0f:fe:31:8d:b0:05:3b:98:8d:9b:69:cf:af:1d:e5:0c:63:a8:
         fe:fc:0f:3f:7b:96:5d:8d:36:db:8a:5d:b4:b2:67:31:99:36:
         c1:09:dc:97:9f:39:42:d4:50:d2:1d:eb:7c:c7:67:bd:1d:cd:
         4e:80:9c:c9:b7:13:fa:ca:2a:c5:ad:85:8c:83:71:37:ca:3a:
         ec:15:67:d4:bd:69:3e:b1:80:48:5b:89:01:88:d2:5a:50:5e:
         7f:7b:36:7d:ba:62:4d:f5:ef:5b:3d:a4:46:a3:fc:47:7b:7d:
         3c:8c:85:a1:73:5c:8d:93:7d:26:96:35:6d:21:2b:69:cb:20:
         16:52:69:5d:6e:dc:bb:34:e2:39:c5:fd:bf:5f:35:74:bb:20:
         e1:5d:4a:3d:b3:be:10:78:47:d4:96:87:2a:5b:d0:15:8c:e5:
         0e:ec:53:1b:ea:b5:d7:47:7e:8e:42:1f:e2:d9:52:a0:36:68:
         45:f6:e9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:44 2024 by rpki-client on console-fra.rpki-client.org