Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/tbSoCeja-aI_MndHxsAbHxyZhLQ.roa
File:                     tbSoCeja-aI_MndHxsAbHxyZhLQ.roa (raw, json)
Hash identifier:          itASYpmJrb04VqvlarO/pZUc09jMiTam1FYrpvuyjkg=
Subject key identifier:   B5:B4:A8:09:E8:DA:F9:A2:3F:32:77:47:C6:C0:1B:1F:1C:99:84:B4
Certificate issuer:       /CN=7DF54AA100E9F4B66535E920EB89E2E14BCACDB0
Certificate serial:       32
Authority key identifier: 7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ffVKoQDp9LZlNekg64ni4UvKzbA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/tbSoCeja-aI_MndHxsAbHxyZhLQ.roa
Signing time:             Thu 13 Apr 2023 09:53:52 +0000
ROA not before:           Thu 13 Apr 2023 09:53:52 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     38631
IP address blocks:        147.92.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF54AA100E9F4B66535E920EB89E2E14BCACDB0
        Validity
            Not Before: Apr 13 09:53:52 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B5B4A809E8DAF9A23F327747C6C01B1F1C9984B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:49:8c:ba:01:a1:43:83:54:4d:ff:df:55:
                    94:7c:1b:78:3d:b8:0a:54:a7:87:cd:ee:7e:b4:cb:
                    8f:6d:fa:01:69:7a:5e:77:c7:8f:68:7e:9f:a2:3e:
                    57:91:70:20:46:74:b9:74:80:b9:c9:f3:11:20:ee:
                    6f:c5:eb:6f:d5:61:35:26:60:e5:43:2d:cc:44:55:
                    3f:8f:eb:01:b5:0f:73:c9:37:a9:c3:1c:19:97:3f:
                    d4:9b:46:b2:54:c7:de:e3:aa:56:cc:60:b1:aa:7f:
                    3a:cc:38:00:d2:e3:b6:72:7f:02:a2:3e:a5:f8:9f:
                    44:a3:27:9f:8e:76:46:83:20:26:41:7a:b0:d0:24:
                    53:a0:a1:74:fb:e8:b5:9a:ba:d8:45:f3:d6:82:71:
                    e1:9f:b7:e6:62:06:6d:7a:8a:69:6c:e2:ac:e1:38:
                    96:73:07:a1:66:ba:22:81:b6:a7:b6:57:b0:14:2c:
                    83:ca:4c:0c:46:63:48:b8:23:66:6b:97:77:a3:50:
                    49:0d:3f:c7:56:87:15:35:13:58:73:fe:3a:a3:61:
                    8e:78:dc:10:d9:59:e9:0e:a5:5c:ca:62:68:a5:99:
                    6d:1a:d0:86:7f:e6:bf:80:f5:f0:32:86:50:47:5d:
                    66:3a:ab:83:c8:3d:4f:18:4b:f1:05:fb:d8:76:14:
                    e0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B4:A8:09:E8:DA:F9:A2:3F:32:77:47:C6:C0:1B:1F:1C:99:84:B4
            X509v3 Authority Key Identifier:
                keyid:7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ffVKoQDp9LZlNekg64ni4UvKzbA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/tbSoCeja-aI_MndHxsAbHxyZhLQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         15:7f:83:f5:34:7c:1e:b7:51:3c:bb:38:7c:2f:22:58:61:2c:
         1d:4d:47:a6:6c:4a:70:6a:e6:70:48:32:4a:50:a1:97:ec:a7:
         e1:1a:67:e7:1d:84:1a:58:1f:46:d0:32:bb:ee:f1:11:e4:36:
         7c:ae:de:28:95:78:48:c4:73:bc:a1:1b:62:8a:e2:40:aa:71:
         5d:89:0a:a5:1b:01:1e:90:fb:ac:26:29:3e:31:03:7b:1e:68:
         3b:d4:06:c9:f8:58:dc:09:ef:80:0b:d2:b1:34:97:0a:01:bd:
         8c:fc:1b:2d:17:c2:fb:1e:be:72:02:18:27:2f:9e:68:fb:d7:
         bd:60:3b:95:d4:ac:ef:09:31:f7:cd:80:67:fb:08:37:38:75:
         83:b0:3b:64:34:76:0a:d8:d9:02:a3:04:0e:ec:03:50:07:e2:
         4a:78:09:fb:f6:6b:95:40:8c:11:1d:90:6b:e2:8a:25:98:13:
         97:6b:b9:60:ce:15:d5:0c:9c:03:43:90:d8:9f:22:3b:88:b8:
         87:b7:5e:ed:bd:df:10:7f:5a:19:23:ba:a9:70:95:35:23:1f:
         71:1f:c8:83:2d:68:c5:76:12:51:f9:5f:87:75:13:67:97:d3:
         53:d5:d6:7d:62:54:92:23:51:db:aa:1f:0c:3e:f2:da:56:e9:
         e5:1c:0d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org