Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/884/oLRgC5jQBAX25ZrB8C4ItIq41Ss.roa
File:                     oLRgC5jQBAX25ZrB8C4ItIq41Ss.roa (raw, json)
Hash identifier:          ZtoiHXvxWlKEUyxVaueGcaDYn0Cs40Y1RIY4xXQmv7A=
Subject key identifier:   A0:B4:60:0B:98:D0:04:05:F6:E5:9A:C1:F0:2E:08:B4:8A:B8:D5:2B
Certificate issuer:       /CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
Certificate serial:       12
Authority key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/oLRgC5jQBAX25ZrB8C4ItIq41Ss.roa
Signing time:             Fri 07 Jul 2023 02:03:59 +0000
ROA not before:           Fri 07 Jul 2023 02:03:59 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     23808
IP address blocks:        202.140.192.0/19 maxlen: 32

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
        Validity
            Not Before: Jul  7 02:03:59 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=A0B4600B98D00405F6E59AC1F02E08B48AB8D52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:e2:01:7c:27:93:00:39:79:eb:68:7c:25:
                    1b:2f:c2:fd:ed:26:cf:e1:ff:37:1c:64:07:7a:6d:
                    7a:ea:4e:a7:c0:a6:87:86:88:ba:b0:77:ef:7c:eb:
                    60:fe:d7:78:4a:3b:82:ac:5d:30:31:b7:06:fb:b7:
                    d5:59:e2:2e:10:70:7e:2d:09:95:1a:9c:ef:35:e4:
                    a9:fd:92:98:bb:94:f8:d8:d0:e8:bb:2c:e1:48:2c:
                    5c:8a:b5:e2:22:51:34:a4:21:bf:bc:25:8a:72:b6:
                    32:c5:9e:d1:f0:04:2f:d5:2c:67:00:88:bc:3b:3c:
                    19:bf:ad:e5:0e:0e:00:d0:0b:09:7a:ca:60:db:49:
                    6d:8c:2b:a0:da:0e:70:78:00:ec:95:bd:2f:0e:71:
                    25:ef:1a:30:60:ea:27:5a:ce:60:d5:3d:ba:2d:dc:
                    91:0a:86:f7:66:b0:d9:ef:15:12:d8:23:ec:1f:79:
                    50:b0:6b:eb:93:24:20:0c:12:76:d0:43:00:c9:a9:
                    bc:d8:ab:2b:ca:92:0a:0e:be:42:70:e6:95:6c:b6:
                    94:6e:eb:b4:0c:9d:b5:66:52:6d:ea:87:71:1b:3d:
                    48:05:a7:87:8c:6b:f1:e0:72:88:60:8e:15:50:95:
                    db:81:f4:f2:e8:fc:74:46:17:8e:fe:8e:61:79:62:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B4:60:0B:98:D0:04:05:F6:E5:9A:C1:F0:2E:08:B4:8A:B8:D5:2B
            X509v3 Authority Key Identifier:
                keyid:8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/oLRgC5jQBAX25ZrB8C4ItIq41Ss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.140.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5e:5e:8e:fe:7b:0a:17:f2:63:31:69:0f:44:01:4b:17:c4:77:
         1f:81:f3:31:b7:1d:d6:c4:ae:e8:e3:07:94:37:73:e2:ba:dc:
         12:d6:10:1a:26:ec:fb:fb:d7:21:ae:a7:a8:ef:7e:ef:2d:7b:
         5f:ea:b9:27:52:41:bd:74:83:dc:06:f3:ae:64:c8:7c:87:bd:
         df:e7:78:81:74:02:48:d9:9e:e6:dd:7b:bc:30:3e:20:5e:fc:
         a5:eb:0c:06:f9:dd:75:bf:70:fd:f0:57:f5:78:13:1e:f9:10:
         3d:9d:aa:31:53:e1:78:7a:45:3c:9e:e6:fa:36:07:3f:a3:b8:
         78:85:8d:08:8b:52:a7:7c:04:bd:f7:a1:c7:42:f0:03:d3:03:
         77:c1:5d:85:d8:67:f0:a8:3c:8f:1a:0e:f1:b8:01:2e:38:a4:
         cc:ce:6c:d7:9b:a3:3d:33:6e:3a:09:f3:60:9a:a4:9b:c7:08:
         5f:d4:18:db:4c:d4:50:59:ef:51:ba:97:4d:83:ce:50:1f:15:
         ff:bd:d3:9e:d2:33:24:98:e9:ed:20:a0:e9:38:99:26:e4:0e:
         9b:fb:7c:be:f5:b9:40:a6:0e:49:dd:b8:75:16:83:1f:26:ba:
         a3:04:25:aa:4f:5b:93:95:72:ed:39:47:b7:38:d8:15:f4:33:
         03:b3:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org