Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/E9WMe-lVjw6GwWfE1RANBuMhPAA.roa
File:                     E9WMe-lVjw6GwWfE1RANBuMhPAA.roa (raw, json)
Hash identifier:          nP1GzAnpXWq4wEGdQlGQBIC5g5LCf9NF6DMVXSsOSYo=
Subject key identifier:   13:D5:8C:7B:E9:55:8F:0E:86:C1:67:C4:D5:10:0D:06:E3:21:3C:00
Certificate issuer:       /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial:       3C
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/E9WMe-lVjw6GwWfE1RANBuMhPAA.roa
Signing time:             Fri 01 Sep 2023 01:29:15 +0000
ROA not before:           Fri 01 Sep 2023 01:29:15 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     17675
IP address blocks:        103.28.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
        Validity
            Not Before: Sep  1 01:29:15 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=13D58C7BE9558F0E86C167C4D5100D06E3213C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:eb:b7:8a:c9:eb:e6:9d:f6:db:5e:4a:5e:
                    f4:bb:fa:96:fa:5b:8c:85:8f:ae:65:ef:b5:e5:c1:
                    f9:ef:ca:a4:a8:58:8e:4d:07:b1:bb:82:d1:c7:d2:
                    94:e0:36:ba:3d:91:ac:43:9c:b6:14:bf:3a:ec:6d:
                    d2:38:0f:80:bd:a1:61:71:c5:4f:cc:3d:9a:09:14:
                    01:50:59:50:be:84:90:51:87:87:bd:18:fc:0e:bd:
                    68:37:5d:32:3b:73:4f:ac:1b:a4:3d:f4:40:48:54:
                    38:4d:0e:0b:88:f9:88:f3:66:f4:ac:ad:62:d3:31:
                    ea:6e:07:24:c3:42:9a:5c:9a:53:27:89:f7:fc:aa:
                    67:5e:89:f4:fb:98:39:1b:2a:22:51:e6:fd:3c:29:
                    08:67:df:96:08:99:3e:9d:93:14:e1:7a:26:19:21:
                    fe:45:7f:cc:8f:23:28:bb:f4:6c:3b:42:00:3b:ea:
                    70:b6:fb:72:a0:0f:12:8d:70:24:d1:44:b6:1f:73:
                    1f:8e:88:75:e9:3f:04:d2:e4:ed:5e:08:5c:94:90:
                    a1:66:08:7d:40:a1:4f:8a:ca:7d:01:ea:38:35:45:
                    b6:cd:01:67:01:16:db:42:90:6d:45:b6:79:cd:1b:
                    de:86:35:49:6a:45:4f:58:7e:43:c1:08:64:73:f2:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D5:8C:7B:E9:55:8F:0E:86:C1:67:C4:D5:10:0D:06:E3:21:3C:00
            X509v3 Authority Key Identifier:
                keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/E9WMe-lVjw6GwWfE1RANBuMhPAA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b9:16:a9:a0:1a:0b:c2:ec:90:73:cb:5b:98:13:ae:82:e9:
         c0:d7:fc:9a:6d:c1:e3:e9:be:a8:25:26:7a:e1:58:ad:8e:4b:
         94:6a:93:df:77:2b:5d:bf:8b:f6:d1:ca:1e:dc:65:83:b4:ff:
         25:a6:c7:2f:b3:49:cc:7c:09:d6:e6:d3:e8:33:59:84:a8:8f:
         2a:f3:21:65:93:97:c0:96:dc:cc:44:43:66:eb:d0:cf:94:e6:
         1d:14:4f:d1:a8:63:95:aa:16:86:8a:4d:7f:57:9f:a1:06:79:
         ec:6c:b3:2e:b1:b8:1d:66:0d:2e:09:19:d4:ca:6f:63:b1:6c:
         50:5e:cb:6d:7a:46:c4:aa:64:aa:35:b9:a4:80:c6:a7:df:cf:
         2e:4c:90:17:56:c1:b5:96:a5:0f:42:09:e6:25:6c:12:fe:9c:
         21:37:3d:2b:21:18:5e:1b:79:9a:ad:b4:de:78:a5:5c:fe:cf:
         ee:48:1b:f9:61:6d:11:4e:9e:3c:e0:be:e3:c7:46:9e:19:fd:
         84:c2:86:c1:8f:28:ff:52:57:ca:9c:5c:97:57:32:ba:aa:27:
         d3:fb:77:f7:da:92:80:24:cd:06:af:5c:59:b0:6d:a0:42:21:
         0f:50:ef:55:cf:b9:a8:51:0d:91:01:5f:74:3d:c8:71:36:7e:
         c0:e0:66:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:26 2024 by rpki-client on console-fra.rpki-client.org