Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/sIICpt3N8GZB0mCxX8xHJZV0AcQ.roa
File:                     sIICpt3N8GZB0mCxX8xHJZV0AcQ.roa (raw, json)
Hash identifier:          XwtR+53Tw/FIPs3As8o/IWhIpsvH6zf2M+0RIb+jlyY=
Subject key identifier:   B0:82:02:A6:DD:CD:F0:66:41:D2:60:B1:5F:CC:47:25:95:74:01:C4
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0175
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/sIICpt3N8GZB0mCxX8xHJZV0AcQ.roa
Signing time:             Sat 01 Jul 2023 01:30:42 +0000
ROA not before:           Sat 01 Jul 2023 01:30:42 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        203.140.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:42 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=B08202A6DDCDF06641D260B15FCC4725957401C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:07:36:91:97:b3:0d:22:b1:3f:f7:fd:f7:
                    77:7a:03:fe:a4:c4:0c:43:fa:42:d1:d8:99:5c:e8:
                    43:7c:5c:ea:27:1c:24:8d:f0:c1:a2:16:83:13:78:
                    a7:1b:0a:a2:8e:26:40:f0:39:78:dc:c7:cd:81:e1:
                    0d:8e:1b:ec:04:94:fb:79:97:10:82:48:c5:03:fb:
                    75:e8:0f:46:71:64:14:32:eb:a1:9d:23:ea:b8:38:
                    bc:f7:d2:a6:00:a0:c5:b1:93:11:6c:4a:15:43:2f:
                    1a:58:ad:d9:52:8b:8d:c7:93:a2:e4:c0:8b:c6:39:
                    0c:57:5b:a9:72:be:2c:37:5b:39:ae:7e:2e:90:12:
                    c2:9c:af:6d:51:4c:d1:4c:13:1f:77:a7:00:de:1d:
                    a3:c0:61:8c:ff:9a:03:75:9c:32:e2:c3:ea:ea:fa:
                    c9:85:34:2f:63:89:8e:a9:be:d7:cb:fc:d5:59:7b:
                    9d:99:7f:e1:91:4b:89:4d:5b:11:56:f3:b8:5d:af:
                    d7:e8:53:7f:b5:ac:dc:93:9b:3d:28:b6:8b:c3:3a:
                    5f:ce:73:e3:c3:33:5d:83:ac:25:76:c1:33:2a:5c:
                    ba:35:85:30:05:f9:0c:a5:f5:80:b1:e6:85:20:e2:
                    c8:62:42:21:ab:c2:fe:b3:50:28:fc:60:cf:74:c5:
                    b1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:82:02:A6:DD:CD:F0:66:41:D2:60:B1:5F:CC:47:25:95:74:01:C4
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/sIICpt3N8GZB0mCxX8xHJZV0AcQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.140.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d4:62:b4:b5:d7:a9:8b:0c:51:9b:55:6e:b0:67:d5:b4:8d:4c:
         38:26:3f:23:48:b7:74:5a:a3:ab:5c:4c:c4:3e:b4:c6:43:f8:
         56:29:04:4f:44:d7:be:b6:67:10:35:b3:77:a0:d7:cc:a0:cd:
         9f:e8:ab:d8:b7:33:d3:6b:7d:35:95:7f:b7:c0:d8:69:a7:dc:
         15:23:40:29:a6:4b:0c:d9:b7:2e:5e:08:ed:b9:0f:80:f3:cd:
         32:8d:08:3d:7c:2b:4e:54:47:6c:f4:75:32:7e:e9:ac:76:a3:
         10:45:7f:a4:4f:fd:c5:1e:c0:03:99:b4:59:6d:5d:05:e4:3e:
         89:0c:e4:d0:d9:1e:08:6b:23:88:10:d2:a9:d9:ac:40:e6:52:
         14:8d:58:b3:06:b7:c1:9a:da:1a:dd:49:5e:a5:b6:51:8c:9f:
         74:15:47:fe:97:53:3f:85:c5:8f:1c:04:a7:10:05:14:99:a9:
         31:ed:6f:57:57:d1:81:62:6e:bc:a3:c5:6b:98:9b:8c:36:8b:
         a0:8a:2d:44:d0:da:7a:95:63:8a:59:ba:88:5b:8d:51:6f:ee:
         0c:76:17:16:c6:c9:3a:69:f6:3e:f3:83:3d:73:f7:c8:f2:39:
         bb:1f:ef:9a:37:1d:31:99:4c:fa:93:81:12:ef:4e:4f:a3:53:
         8a:e2:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org