Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/lQpS3Tx2KMVYNxPnz_2mjajKtCY.roa
File:                     lQpS3Tx2KMVYNxPnz_2mjajKtCY.roa (raw, json)
Hash identifier:          QV4gQAVTzBAqMJTUaUz177RPWfk6YbYFLcdVX45/lJc=
Subject key identifier:   95:0A:52:DD:3C:76:28:C5:58:37:13:E7:CF:FD:A6:8D:A8:CA:B4:26
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       08
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/lQpS3Tx2KMVYNxPnz_2mjajKtCY.roa
Signing time:             Wed 28 Jun 2023 01:13:41 +0000
ROA not before:           Wed 28 Jun 2023 01:13:41 +0000
ROA not after:            Sat 15 Jun 2024 06:45:48 +0000
asID:                     131965
IP address blocks:        183.181.78.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 06:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: Jun 28 01:13:41 2023 GMT
            Not After : Jun 15 06:45:48 2024 GMT
        Subject: CN=950A52DD3C7628C5583713E7CFFDA68DA8CAB426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:f9:3d:8f:be:d6:60:25:8f:75:ed:18:07:
                    2a:c6:7d:4e:a6:ab:4a:39:ec:e9:81:ed:74:11:d8:
                    5b:68:5b:7c:66:7d:0e:2c:e5:23:93:b1:b5:ad:77:
                    f5:36:e2:ba:5a:96:3e:99:80:60:16:5e:ae:6e:9d:
                    2f:a8:a5:57:81:a2:bb:ef:f5:0a:e0:b0:d5:20:b4:
                    6e:60:b6:d6:b7:eb:6e:2a:e7:96:d4:fb:a0:55:c9:
                    8b:57:24:c5:d1:ab:de:f5:83:61:78:88:92:e4:04:
                    3e:06:44:dd:27:2f:5a:ab:4c:7a:3c:cd:17:8d:29:
                    ff:a9:47:4c:d2:4a:dc:43:a7:a4:73:20:1d:ac:ac:
                    08:8e:be:56:65:e7:e6:1b:17:28:c8:6e:a6:f2:77:
                    b2:99:13:48:ba:8e:e4:af:db:ed:29:eb:c9:91:03:
                    5b:68:ba:89:b7:68:54:58:16:40:5d:a9:13:1a:3a:
                    69:9b:04:52:09:c9:a5:ca:82:25:fd:80:ab:81:63:
                    9a:ab:e4:be:c5:aa:6e:2f:50:46:e3:bb:d0:59:77:
                    a0:70:77:0e:13:e5:22:b6:8f:8a:aa:73:fc:cf:ab:
                    f5:1c:36:b5:4b:11:a8:f8:7c:0b:56:cd:90:ae:71:
                    61:1a:7f:f3:c7:c9:08:dd:c1:82:5f:c5:d9:24:11:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0A:52:DD:3C:76:28:C5:58:37:13:E7:CF:FD:A6:8D:A8:CA:B4:26
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/lQpS3Tx2KMVYNxPnz_2mjajKtCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:5f:8d:fa:8b:90:08:9f:c8:88:96:dc:1b:40:b5:08:92:65:
         93:c3:fe:38:6f:15:1a:f6:4c:44:56:46:85:28:78:9c:aa:d9:
         d9:71:86:3e:42:bc:f9:69:80:97:91:5a:9a:0d:ce:73:fa:16:
         b1:02:dc:f9:83:9c:60:61:15:4f:a7:13:e9:7f:3c:94:70:8a:
         6e:ab:f9:24:d9:72:56:9b:da:35:43:3d:c7:9a:4b:a3:a3:be:
         39:3c:b2:08:70:1e:21:68:4f:e8:c7:49:d6:82:73:9d:08:63:
         39:19:99:b6:70:f1:74:77:15:1a:9b:8f:17:6f:ca:cf:6e:51:
         e3:e4:b2:8a:06:9e:b9:f3:c1:1e:a5:d3:42:5f:22:cd:12:96:
         40:a9:c8:2c:c0:91:19:10:cf:30:87:ad:87:79:0d:51:b8:a7:
         93:82:67:e3:c6:35:53:d8:5f:ac:8e:dc:02:d3:8f:89:29:7f:
         68:47:21:3c:84:c0:50:86:bb:65:4d:4b:ff:b4:78:3f:61:f6:
         8f:4c:65:55:72:10:81:17:e4:9e:10:47:f8:ea:e3:eb:ae:64:
         ff:db:8f:db:e1:67:cf:33:bf:45:c7:46:ed:75:84:f4:53:3a:
         4c:54:73:7d:69:73:21:8b:19:66:17:d7:d5:bf:dd:a5:5b:ee:
         98:7b:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org