Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/b3xyN65Dv4avG0F8MQUmZaJ23Do.roa
File:                     b3xyN65Dv4avG0F8MQUmZaJ23Do.roa (raw, json)
Hash identifier:          nmgA1zCqLU2PkXsTGqQ8ZbUj0Ax0CF5EC2glXsqZVJE=
Subject key identifier:   6F:7C:72:37:AE:43:BF:86:AF:1B:41:7C:31:05:26:65:A2:76:DC:3A
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       22
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/b3xyN65Dv4avG0F8MQUmZaJ23Do.roa
Signing time:             Fri 01 Dec 2023 01:12:18 +0000
ROA not before:           Fri 01 Dec 2023 01:12:18 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     18094
IP address blocks:        103.15.92.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 01:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Dec  1 01:12:18 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=6F7C7237AE43BF86AF1B417C31052665A276DC3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:64:f7:43:27:eb:14:fb:37:f4:41:fa:95:
                    d3:f6:fe:4d:92:f4:f1:86:98:30:03:0c:f8:88:35:
                    23:e2:48:b0:03:fe:75:c5:c9:ef:88:8b:a6:33:57:
                    e4:f4:a5:37:ae:8e:88:c8:66:37:b7:c1:ba:36:38:
                    8f:69:11:3f:c2:96:b2:92:b6:3e:15:f4:de:db:ad:
                    98:f8:19:af:95:ed:e2:11:46:41:96:68:13:ae:a9:
                    37:0d:98:54:ef:46:30:10:ab:bb:47:d6:5d:bd:b7:
                    95:07:4e:1a:7c:72:7d:70:77:c2:31:65:33:96:b2:
                    9f:5a:f2:87:02:24:09:f6:52:7d:3d:b4:98:08:fe:
                    30:29:48:13:97:a0:da:d4:cb:0b:ee:cf:83:d3:08:
                    df:5c:2f:cc:ef:50:42:7e:2d:0d:10:77:3c:07:ba:
                    f9:7a:3c:ae:41:f9:1b:c0:34:7d:88:dd:03:3b:75:
                    72:9f:e3:75:1c:27:7e:56:5a:83:71:ff:ce:40:41:
                    89:28:70:da:9b:7d:69:e8:c8:98:8b:a1:39:a0:e0:
                    b8:95:5b:61:de:4c:5e:b2:f5:bd:f9:89:ee:3e:ea:
                    44:ff:4b:e7:b1:a3:43:7b:d6:60:d6:f6:f8:a3:25:
                    b8:0e:79:aa:ba:dd:cd:21:24:a8:aa:f4:3d:2c:e4:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7C:72:37:AE:43:BF:86:AF:1B:41:7C:31:05:26:65:A2:76:DC:3A
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/b3xyN65Dv4avG0F8MQUmZaJ23Do.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:16:15:04:ca:66:1e:c5:aa:ac:63:10:6c:f4:d4:fc:27:
         b3:1a:22:4b:2b:ff:9e:14:da:18:ec:c1:ab:90:8c:19:5f:4d:
         d4:e2:87:0c:a3:ee:9e:b8:1f:ee:a1:9e:8d:9b:17:3e:0b:d7:
         d6:60:b5:47:ae:d8:f2:d6:bf:6d:90:d6:58:c0:67:a0:19:ca:
         d2:f3:c3:c4:68:e5:7a:49:b6:cd:46:bd:0a:ba:86:f3:3c:91:
         06:be:5b:fe:a3:7a:2a:e4:89:f7:88:e1:02:fe:c0:fb:69:96:
         8c:e0:d8:98:d7:68:9e:44:85:93:29:f4:c5:8e:63:2f:17:f3:
         7b:4e:63:d6:b8:de:f9:6a:26:b4:53:b7:84:51:53:a5:5b:7e:
         05:ac:95:bf:22:24:16:71:b4:1f:93:3a:a6:14:c7:95:1c:9e:
         63:4f:b4:52:22:05:34:e2:f8:c4:88:c4:49:51:5e:9e:4c:c3:
         8b:3a:06:cb:39:89:83:99:20:05:ec:35:a2:e3:53:39:c3:02:
         f4:79:88:a8:06:64:b0:07:a9:25:d0:56:53:a9:2a:93:d8:81:
         20:47:4d:52:e2:06:15:40:22:b9:1a:c9:1e:30:d3:d9:cf:b1:
         26:91:e8:30:ce:17:fa:2a:84:71:a5:f2:f3:a2:81:9f:d5:65:
         54:29:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 05:07:20 2024 by rpki-client on console-ams.rpki-client.org