Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/SeL2cUoQBspa0uA63NIQtp6jVDw.roa
File:                     SeL2cUoQBspa0uA63NIQtp6jVDw.roa (raw, json)
Hash identifier:          mcgvJi5fElHxOcqNyR2m+h/oWILWVGwersvvXgh+AJg=
Subject key identifier:   49:E2:F6:71:4A:10:06:CA:5A:D2:E0:3A:DC:D2:10:B6:9E:A3:54:3C
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       03
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/SeL2cUoQBspa0uA63NIQtp6jVDw.roa
Signing time:             Wed 28 Jun 2023 01:05:51 +0000
ROA not before:           Wed 28 Jun 2023 01:05:51 +0000
ROA not after:            Sat 15 Jun 2024 06:45:48 +0000
asID:                     131965
IP address blocks:        103.141.96.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 06:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: Jun 28 01:05:51 2023 GMT
            Not After : Jun 15 06:45:48 2024 GMT
        Subject: CN=49E2F6714A1006CA5AD2E03ADCD210B69EA3543C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:2e:97:fd:12:35:30:c3:65:80:c0:25:dd:
                    01:69:68:69:26:2e:70:a3:7c:b1:e2:5a:18:0f:2b:
                    70:55:9d:08:ac:69:61:41:66:17:f7:5e:c7:41:b1:
                    02:06:c6:04:73:38:3f:7f:8b:ad:a5:29:71:af:5e:
                    df:52:48:d6:86:19:f1:96:28:e1:f0:b2:d0:17:55:
                    3f:38:b9:e6:3f:a3:62:66:b9:dd:89:40:d5:bf:31:
                    b8:62:8d:f5:08:02:04:bd:3f:73:61:16:a3:14:5e:
                    6e:4a:57:cf:2a:72:66:1c:ca:e6:01:f7:cd:de:62:
                    75:93:f3:c0:9e:b3:e3:fa:88:53:f5:db:6e:46:a5:
                    7b:64:e3:1e:69:b0:d5:37:fa:a8:90:93:3d:2e:f4:
                    72:9e:d3:8f:7a:39:fa:d7:14:bd:6a:c3:2b:6b:79:
                    2e:49:1a:86:2e:67:84:5c:93:00:25:2b:89:e9:4c:
                    bb:dc:76:7c:f7:4c:bd:46:76:a3:93:ae:e8:7c:26:
                    97:e6:3c:2a:72:64:2a:81:13:57:63:66:42:37:eb:
                    52:91:f8:13:e7:5c:8d:ee:1b:58:ec:b6:3f:61:30:
                    10:92:b3:42:34:86:cb:1c:25:08:37:69:8e:cf:73:
                    96:d7:be:d6:39:7f:19:48:e5:b3:77:49:5b:fa:70:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E2:F6:71:4A:10:06:CA:5A:D2:E0:3A:DC:D2:10:B6:9E:A3:54:3C
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/SeL2cUoQBspa0uA63NIQtp6jVDw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:19:35:02:a9:92:1d:28:8c:34:eb:77:10:ca:69:63:36:bc:
         6d:50:0a:aa:a4:70:3b:da:d8:25:9a:b1:7f:35:a2:f7:0d:dd:
         aa:ee:fe:d9:9c:b5:58:6e:c0:23:7e:ed:3d:40:8a:6d:7f:ec:
         ba:6a:f2:12:7a:d6:8c:5c:b2:81:f2:f4:00:4b:44:37:2f:b9:
         5d:d3:d9:0e:1f:97:67:cb:1c:6e:5d:10:21:ec:af:12:8b:43:
         99:ca:62:a9:1f:3b:bc:42:5d:cd:37:b7:5a:a4:07:e9:dd:12:
         bb:83:f2:47:63:2a:9d:f5:fe:cf:13:8a:6b:8d:7b:f1:99:ba:
         85:a0:ce:13:f8:b4:cc:61:3f:1c:a6:45:0f:cc:a9:e8:92:68:
         70:8d:eb:fd:97:a4:5f:6f:ef:74:44:6a:57:57:39:2b:fe:8d:
         1a:3e:43:e7:b5:11:81:62:46:47:ac:bc:4c:86:9e:61:90:ab:
         2c:9d:66:47:68:ba:cf:ba:c3:df:4c:e4:75:0a:ea:c5:78:af:
         61:90:65:64:8b:69:92:2c:6b:7c:d9:9c:63:fb:d8:6b:40:8a:
         2e:7f:b9:6a:64:eb:ec:47:81:b4:3c:43:c3:65:47:07:ef:53:
         70:0a:7e:36:88:50:51:a9:cb:a8:b9:45:1c:a6:44:df:c5:df:
         5d:da:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 10:22:46 2024 by rpki-client on console-ams.rpki-client.org