Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/9Et78ijs6IdnJF6ski2SLiJnCrg.roa
File:                     9Et78ijs6IdnJF6ski2SLiJnCrg.roa (raw, json)
Hash identifier:          mNPalPVBueamAJNPF8euqxDlekTs8D2zAbVVIUFodiM=
Subject key identifier:   F4:4B:7B:F2:28:EC:E8:87:67:24:5E:AC:92:2D:92:2E:22:67:0A:B8
Certificate issuer:       /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial:       37
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/9Et78ijs6IdnJF6ski2SLiJnCrg.roa
Signing time:             Sat 01 Jul 2023 01:28:15 +0000
ROA not before:           Sat 01 Jul 2023 01:28:15 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24295
IP address blocks:        203.95.24.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
        Validity
            Not Before: Jul  1 01:28:15 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=F44B7BF228ECE88767245EAC922D922E22670AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:1a:11:65:32:81:a5:a8:12:21:d9:0a:09:
                    69:62:1e:15:af:7f:5e:64:d6:c4:44:78:d6:d6:58:
                    08:9d:a2:71:e7:c6:0d:d1:65:15:5d:f1:8d:83:f9:
                    a2:d6:70:d5:af:99:b8:d4:36:e9:a9:76:55:8b:45:
                    ff:2c:f1:75:0d:f8:3f:55:5c:c2:8a:f3:7d:72:e5:
                    06:fb:8a:03:76:cb:0b:3e:12:bc:3e:e0:63:21:f8:
                    da:1c:42:b5:98:e6:51:34:37:f8:c5:f2:27:f9:18:
                    1e:98:19:bf:99:2b:54:2a:11:81:93:c6:14:ad:4c:
                    ca:29:09:8b:27:02:0a:62:f3:ee:cc:c4:73:4e:60:
                    6d:3e:cc:0b:9e:a2:da:53:ae:d3:ff:36:83:90:b4:
                    b9:01:86:96:54:b4:8a:23:88:e5:07:22:94:47:5d:
                    07:61:da:22:9c:d2:2a:5d:42:99:81:bd:ec:63:d0:
                    40:b5:6e:31:a9:51:29:7c:30:71:f0:31:be:71:55:
                    80:75:27:27:d7:c0:d8:92:03:4b:8e:35:6b:a5:69:
                    cb:e7:ae:40:41:81:80:45:fe:b8:fc:95:b1:4f:48:
                    7e:28:69:09:bb:8f:23:eb:ed:1b:69:f8:76:e6:05:
                    18:5b:10:90:c6:2a:11:b2:f8:6a:00:cb:02:3b:86:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4B:7B:F2:28:EC:E8:87:67:24:5E:AC:92:2D:92:2E:22:67:0A:B8
            X509v3 Authority Key Identifier:
                keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/9Et78ijs6IdnJF6ski2SLiJnCrg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:4e:8c:ff:cc:6e:41:d9:4f:0b:b6:52:c7:2e:b4:98:b8:0d:
         74:27:ce:4c:a8:ed:14:1d:07:0e:50:02:ca:44:8b:29:87:c4:
         18:f5:d1:c9:44:f5:cf:f1:8a:4f:a4:d1:dd:0a:9c:21:b9:0a:
         1d:05:e3:8c:c3:7e:0e:dc:97:21:d5:f0:1b:8c:8c:cf:87:57:
         0e:b7:a1:71:f8:84:03:da:14:24:a6:9e:1e:8a:a0:8d:20:97:
         c8:1f:d4:d3:0e:00:7d:b1:b2:7b:75:27:a2:6e:db:ab:83:98:
         18:30:d5:c4:53:d3:bc:54:bc:79:df:af:ca:67:50:47:e9:33:
         3f:a6:66:40:0f:bf:9f:26:7e:7c:ab:2b:95:f3:1b:c1:d1:de:
         e7:e6:66:07:1b:b7:25:f5:07:bc:ae:6b:d9:19:da:d2:cb:37:
         aa:ff:80:3b:05:9e:ee:47:f8:31:ed:99:48:70:85:c3:5f:11:
         c9:59:b1:be:42:cf:83:e2:4c:ba:27:35:ef:68:8a:e4:39:1f:
         25:61:4f:11:ef:c1:e7:ad:0c:f2:e8:f6:a6:aa:6a:9f:33:b2:
         17:34:70:f6:df:76:6d:05:5e:ff:54:3f:91:8d:7b:45:3d:ff:
         92:8e:45:be:76:4c:50:d7:38:76:55:ca:74:ef:f9:83:9d:de:
         02:90:6d:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org