Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/odVCc_Zbfdnl1kMBxvVDlGU_4ZE.roa
File:                     odVCc_Zbfdnl1kMBxvVDlGU_4ZE.roa (raw, json)
Hash identifier:          PzPKdwLlmFzAcRbmV0REGMWXdqR4KcPaXkKh8OyLNmA=
Subject key identifier:   A1:D5:42:73:F6:5B:7D:D9:E5:D6:43:01:C6:F5:43:94:65:3F:E1:91
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       29
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/odVCc_Zbfdnl1kMBxvVDlGU_4ZE.roa
Signing time:             Fri 06 Oct 2023 06:05:40 +0000
ROA not before:           Fri 06 Oct 2023 06:05:40 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        119.224.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:40 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A1D54273F65B7DD9E5D64301C6F54394653FE191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:5e:80:72:2d:8f:07:f4:ba:80:d2:8f:53:
                    2a:9f:b1:da:b8:0f:6c:8b:9a:c0:43:6e:18:64:a2:
                    78:67:99:e6:6d:45:9c:44:3a:c7:d3:76:9f:fc:1b:
                    04:5e:61:d3:02:dd:f2:d4:92:35:98:f8:e2:44:db:
                    d5:1c:41:e6:e8:c6:dc:e5:90:00:3d:fc:d5:7f:c0:
                    f7:2f:06:2e:98:6e:f8:8f:c0:c2:96:36:e7:52:d4:
                    75:1e:ae:20:60:d8:23:4c:62:c7:29:1a:88:ca:eb:
                    f4:53:81:b7:f2:ba:fa:cf:1b:47:56:b0:8d:eb:6e:
                    75:9e:70:17:79:e0:6a:06:67:46:b2:e4:c4:2d:d2:
                    a4:3b:76:40:cc:cd:4e:79:da:0b:bd:f6:b5:be:3d:
                    3e:e0:ba:f9:d1:9c:fc:42:71:1b:a7:ed:6a:b5:5a:
                    6d:ce:3e:93:d3:ec:c6:4c:2c:40:77:6a:09:3a:bd:
                    a6:29:fd:d0:5c:39:3b:c1:29:72:46:67:1d:7e:ea:
                    8f:73:87:43:c5:c9:b0:50:16:ac:7c:51:e4:35:32:
                    d6:fa:75:1e:b2:f9:38:bb:71:c4:6f:d3:18:73:42:
                    8e:83:84:a5:2e:d8:49:14:43:a2:6c:46:e5:58:9e:
                    fb:b7:81:39:e3:3b:58:2e:57:48:80:a4:30:34:c2:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D5:42:73:F6:5B:7D:D9:E5:D6:43:01:C6:F5:43:94:65:3F:E1:91
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/odVCc_Zbfdnl1kMBxvVDlGU_4ZE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.224.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:1a:b9:af:15:cb:8c:49:47:3e:0e:67:e1:43:c5:fe:09:39:
         ba:83:f0:c4:83:db:42:7a:f7:b6:af:a3:06:f9:f3:99:91:92:
         fc:e1:63:9f:a8:df:3f:88:5e:92:d2:f5:80:57:98:e8:b6:43:
         44:dd:3e:46:1b:dc:f9:3e:c0:5a:96:88:e2:b8:e3:7e:8c:53:
         6f:65:77:10:cb:b8:95:b0:0a:0e:56:0e:1b:cb:bb:49:37:d4:
         04:b2:62:8a:d2:d6:b2:a6:b8:d5:70:03:26:c1:0e:65:ef:00:
         90:1a:41:73:ee:46:83:00:cb:53:63:cd:f9:80:ba:e5:e2:11:
         71:42:20:71:0f:62:51:ec:ef:cf:09:cd:50:51:49:b9:96:1e:
         28:5c:36:8a:9e:8d:d6:98:a6:e1:e4:4c:9b:03:30:6d:2c:d9:
         de:dc:d5:bb:e3:8f:92:a7:73:8e:a5:2a:d8:73:fe:25:d8:80:
         2c:8e:63:38:d6:65:d1:09:87:11:1d:76:af:4d:48:ad:5f:5a:
         e3:9d:67:cb:60:0c:7f:40:b4:83:de:a9:01:05:ce:72:28:54:
         94:63:ba:3c:fa:b6:50:98:cd:90:0f:00:fa:ff:13:ea:4d:e2:
         3f:06:d8:c5:84:d8:1a:c7:5c:b2:02:5d:57:36:8f:e7:ba:1a:
         93:74:b7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:44 2024 by rpki-client on console-fra.rpki-client.org