Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/TeAcIeenYJe6KYs0NRE73eRe0ms.roa
File:                     TeAcIeenYJe6KYs0NRE73eRe0ms.roa (raw, json)
Hash identifier:          m9MZ0PvU/qF/N8a64TmzmoOgNWKS/+Bgbwa8e6R+09w=
Subject key identifier:   4D:E0:1C:21:E7:A7:60:97:BA:29:8B:34:35:11:3B:DD:E4:5E:D2:6B
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       3C
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/TeAcIeenYJe6KYs0NRE73eRe0ms.roa
Signing time:             Thu 13 Apr 2023 09:54:01 +0000
ROA not before:           Thu 13 Apr 2023 09:54:01 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18260
IP address blocks:        101.55.232.0/21 maxlen: 32

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Apr 13 09:54:01 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4DE01C21E7A76097BA298B3435113BDDE45ED26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:28:33:91:cc:44:a4:0f:3d:13:9e:0d:43:63:
                    39:b5:61:f3:1c:da:ac:9e:06:2d:ff:f6:73:a7:3f:
                    30:04:33:e1:51:f6:59:7e:84:04:97:e7:a5:da:ff:
                    ba:e6:b2:4e:c9:f8:ae:82:08:54:52:4b:d7:b6:98:
                    61:67:fe:42:a1:03:9e:56:39:50:56:66:a1:03:f8:
                    77:77:c8:63:22:ca:a0:fc:68:d6:d5:8a:94:2d:15:
                    2e:f3:31:49:fd:50:d2:3b:b4:88:27:71:e3:83:43:
                    08:8b:b6:96:40:e8:be:d4:6c:ad:04:b8:25:d9:38:
                    f0:51:e6:bf:56:97:7f:e3:4b:53:a2:b4:cb:f4:3a:
                    04:2f:b1:b1:a7:8d:e4:c6:75:65:6f:6e:00:00:d8:
                    cf:0f:41:e2:57:f3:e7:1b:c0:77:ba:45:13:2c:68:
                    c6:fb:f3:f5:d5:b0:b3:87:b6:b7:7d:9d:4e:97:66:
                    83:cf:b2:13:b7:b9:08:17:0b:22:7b:30:5b:6d:90:
                    7c:f6:f4:3b:71:aa:51:9f:71:bb:ec:54:f1:7b:9d:
                    07:db:00:c1:27:d7:30:1a:c6:74:0b:09:15:e3:05:
                    4d:bc:51:af:80:1a:c9:9d:96:89:76:be:e3:a5:33:
                    47:13:33:7e:b4:dc:67:e5:01:7f:57:1a:ce:85:6e:
                    5a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E0:1C:21:E7:A7:60:97:BA:29:8B:34:35:11:3B:DD:E4:5E:D2:6B
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/TeAcIeenYJe6KYs0NRE73eRe0ms.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.55.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:f4:9a:aa:ff:93:11:58:ce:66:df:7f:52:f7:68:a9:b9:b2:
         c2:c3:db:f2:75:9b:d3:b7:ab:86:bf:f6:84:95:6f:d7:b2:de:
         15:5a:b3:01:ef:1b:28:0a:f9:7d:e4:54:bd:bd:6c:b9:e1:8a:
         00:36:2f:32:46:17:16:24:9f:be:30:a6:82:51:1f:f4:f7:24:
         b5:26:8c:6c:d1:c8:10:2a:db:59:b2:94:80:94:7a:4f:77:2d:
         a4:45:0e:de:cf:2f:f4:e3:1f:d6:66:99:c2:06:7a:39:07:b3:
         0c:43:44:98:dc:57:11:1c:f6:6e:0d:0c:2a:85:36:63:a4:d5:
         b3:8d:27:e2:79:d4:ea:86:54:0a:d3:29:9f:4c:20:48:39:52:
         73:6b:d4:d6:f5:5b:20:51:36:f3:be:bb:89:ba:3a:5e:39:4e:
         f7:d5:6c:76:81:45:1a:4c:5f:c9:37:c6:bf:71:8e:af:a0:0b:
         81:58:d5:f9:44:98:a7:a3:05:0c:88:28:d2:43:b7:6f:24:3a:
         b0:15:41:8f:f2:02:dd:0e:7c:36:c5:33:93:da:78:26:bc:4f:
         c6:f7:8b:8f:d7:8d:e5:0a:72:a7:e8:19:5c:5c:ab:6c:65:3b:
         e6:6b:90:96:c1:9b:a6:3b:24:fb:e9:2c:50:9f:f0:b8:92:2f:
         de:78:0c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org