Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/QCemZy2F1XPIZvm8hjzgVNbaQEE.roa
File:                     QCemZy2F1XPIZvm8hjzgVNbaQEE.roa (raw, json)
Hash identifier:          rSbilEKs3ZVqymn31c0Zyb4Cnwv1ViaaXrBT/KEIysc=
Subject key identifier:   40:27:A6:67:2D:85:D5:73:C8:66:F9:BC:86:3C:E0:54:D6:DA:40:41
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       F0
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QCemZy2F1XPIZvm8hjzgVNbaQEE.roa
Signing time:             Sat 01 Jul 2023 01:31:09 +0000
ROA not before:           Sat 01 Jul 2023 01:31:09 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        203.180.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:31:09 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=4027A6672D85D573C866F9BC863CE054D6DA4041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:34:69:95:99:e7:16:be:3f:df:ba:4a:1b:
                    5e:fb:75:cf:08:e6:93:46:48:4f:9b:67:ff:7b:17:
                    56:75:4b:1c:96:d6:b2:ca:7a:f3:69:0d:38:2c:13:
                    29:67:81:61:d3:e9:1f:1e:9d:e1:f4:3b:a0:96:ea:
                    da:88:dd:6a:58:8e:96:53:c6:f8:a4:ef:1a:64:46:
                    77:53:ca:85:30:e9:a8:6a:d7:c9:39:2d:87:9b:9e:
                    cb:e1:0d:5c:58:08:55:b7:b4:a7:fe:cb:3b:24:60:
                    33:4e:5c:50:19:36:ef:02:08:ac:37:fa:c1:fd:2c:
                    08:64:1b:94:97:c8:d6:dc:81:06:3e:a4:92:e5:02:
                    e5:27:59:9f:16:27:88:c9:46:af:d7:d7:0a:28:55:
                    4f:c6:47:e0:56:bb:1d:70:68:fe:3a:19:d5:79:6f:
                    b2:7e:b8:62:56:d2:9e:41:28:28:af:b9:4d:4c:f5:
                    10:66:a2:4b:d0:c4:0d:7f:30:d9:8d:72:4e:2d:23:
                    af:03:34:76:0d:c8:b6:83:39:b5:63:16:22:1d:93:
                    67:ca:9a:56:1f:41:17:ff:ff:85:d1:ab:81:29:d9:
                    aa:b7:38:a9:4d:9e:d9:d5:7f:70:7c:8b:7b:4d:f7:
                    b5:b6:aa:0f:58:e1:67:ac:51:40:0a:1d:3d:c9:d3:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:27:A6:67:2D:85:D5:73:C8:66:F9:BC:86:3C:E0:54:D6:DA:40:41
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QCemZy2F1XPIZvm8hjzgVNbaQEE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.180.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a8:31:65:d6:29:aa:d3:b8:5c:a2:1e:b3:ee:d7:b6:32:e9:77:
         df:dd:06:4e:10:e8:0e:f3:10:d6:1f:49:3e:32:34:41:f0:55:
         1e:30:eb:99:82:4c:1e:6e:8b:f8:9f:ee:11:6e:1a:b6:bb:1e:
         6e:12:ea:31:27:a8:f6:c6:23:61:80:b1:51:0a:7e:84:dc:2b:
         1b:b8:fc:c8:5c:d0:85:77:b2:c4:0a:7e:d5:32:66:61:b9:a4:
         e6:39:82:5e:8b:fa:ff:eb:06:c7:50:7c:49:c0:53:2a:31:0b:
         ab:6d:24:b3:c6:dd:3b:3d:c1:54:e4:46:1d:60:7d:aa:95:79:
         5f:d8:4e:e8:34:54:6c:ec:09:14:bf:a1:45:a5:2a:c5:a3:41:
         84:9a:ad:ca:6e:61:0e:f1:bb:52:47:5c:18:fe:0f:3d:37:5b:
         6c:2f:f8:c5:07:d3:9f:2a:2c:40:e1:97:a7:99:e6:96:ee:8a:
         9d:89:0d:8f:46:db:97:52:1d:60:eb:63:a5:d1:7a:dd:34:da:
         cb:db:64:b1:cd:2c:03:1d:df:ff:9a:aa:7b:f5:53:1e:c2:62:
         be:c3:94:35:f4:ac:c5:37:a0:e4:6c:06:c9:8b:71:d1:d1:ec:
         79:a2:c9:3c:d6:06:9e:64:db:e6:9a:b2:04:9d:5b:3d:8c:ed:
         70:a5:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org