Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/TBWCSXqAPRecHRzKJ1sjZuBvbvg.roa
File:                     TBWCSXqAPRecHRzKJ1sjZuBvbvg.roa (raw, json)
Hash identifier:          tqPxC8h9y+vRuPnXsn082LJ7A01Jy0Hi/GL3djQIZHQ=
Subject key identifier:   4C:15:82:49:7A:80:3D:17:9C:1D:1C:CA:27:5B:23:66:E0:6F:6E:F8
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       3F
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/TBWCSXqAPRecHRzKJ1sjZuBvbvg.roa
Signing time:             Thu 13 Apr 2023 09:54:02 +0000
ROA not before:           Thu 13 Apr 2023 09:54:02 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18260
IP address blocks:        119.30.12.0/23 maxlen: 32

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Apr 13 09:54:02 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4C1582497A803D179C1D1CCA275B2366E06F6EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:9b:26:53:ba:2f:d2:62:76:98:5c:21:5b:
                    16:dd:77:8c:0b:e2:bc:35:14:c9:34:2a:b8:07:81:
                    10:ad:1d:b8:e0:15:6b:b1:d7:f7:e1:b0:02:27:41:
                    99:3b:12:64:40:f2:29:d6:e3:3f:ab:b1:7a:2a:5c:
                    a4:58:08:98:a9:0a:59:aa:21:22:05:72:a6:2b:11:
                    0e:a7:eb:dc:1e:e5:b1:64:d2:b4:ac:60:56:d0:08:
                    39:0f:14:c1:56:d8:91:5f:de:a3:7c:29:24:80:bc:
                    bd:da:7f:14:9a:e8:db:da:44:51:6a:1a:b7:4b:5e:
                    6c:69:2f:18:12:bb:87:02:d8:2d:26:5b:0b:dd:72:
                    62:60:d7:d6:30:09:51:98:24:31:7f:f1:ce:54:ef:
                    c3:0f:b2:04:ba:f1:46:4d:d7:83:bc:7b:55:e8:dd:
                    41:0e:ff:73:d5:f7:e8:73:2d:a0:dc:d7:b8:66:64:
                    6e:35:80:45:f1:b6:b2:1a:ec:b7:9e:44:6a:41:ab:
                    c4:9c:08:d3:e4:fe:1b:f6:79:0a:9f:f8:49:f8:c0:
                    38:76:4a:57:8b:12:23:a1:36:f0:79:ba:d6:d8:3d:
                    e7:4a:c7:06:67:44:e2:e5:99:7c:db:d3:17:6a:47:
                    31:e9:44:9a:81:11:4f:55:73:8d:ef:9d:74:59:88:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:15:82:49:7A:80:3D:17:9C:1D:1C:CA:27:5B:23:66:E0:6F:6E:F8
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/TBWCSXqAPRecHRzKJ1sjZuBvbvg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:bf:a2:2c:bd:f0:dc:8a:11:1a:da:72:74:a8:1b:ec:7a:94:
         2d:4c:9a:18:ba:bf:46:b2:6d:c1:e1:4a:69:c9:1d:c6:6e:6e:
         38:21:6d:ab:5a:bf:0d:12:eb:2c:a9:42:fb:58:f0:21:0a:ea:
         83:8a:67:8d:75:61:4e:27:34:2b:48:d9:b1:81:95:24:87:22:
         18:c9:8f:37:c7:dc:56:76:4a:88:bd:3e:38:d6:cd:32:ed:bb:
         4d:8a:d1:b4:af:45:be:38:32:2c:f1:b0:57:09:51:96:07:a9:
         80:d7:a9:25:82:19:1b:74:8b:27:ef:cc:af:7a:8c:6f:06:eb:
         7c:a9:03:b2:3a:ce:a5:f7:8c:d8:28:53:fc:70:d7:30:10:d5:
         1c:92:1c:49:b7:bc:bf:78:92:2c:9c:49:7d:c2:b0:86:14:35:
         e9:22:b8:ed:bb:a0:b9:86:65:db:20:10:c9:b6:c0:3a:29:9a:
         b3:bc:63:a3:f0:2e:68:a2:75:9c:a9:cf:54:64:fc:c4:73:62:
         2d:a4:d5:40:58:cf:bc:4c:47:3b:0c:1b:fc:e0:96:25:cd:b9:
         6e:b7:a7:36:e3:e9:16:6e:ee:ce:d7:ac:0d:0e:3e:dd:47:93:
         48:f1:0d:53:6f:d8:09:4c:ef:97:77:9d:35:36:95:3b:c2:9d:
         fa:d8:b9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org