Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/m0onBijuKATgFkIkrzt5Sd2Wudo.roa
File:                     m0onBijuKATgFkIkrzt5Sd2Wudo.roa (raw, json)
Hash identifier:          PA8u8WuytqxITdekpoL6g7E2T50YC5btePvwM1viQVA=
Subject key identifier:   9B:4A:27:06:28:EE:28:04:E0:16:42:24:AF:3B:79:49:DD:96:B9:DA
Certificate issuer:       /CN=C3941FA221377E9A206102B848EBB972A8709DD5
Certificate serial:       3F
Authority key identifier: C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/m0onBijuKATgFkIkrzt5Sd2Wudo.roa
Signing time:             Thu 13 Apr 2023 09:52:40 +0000
ROA not before:           Thu 13 Apr 2023 09:52:40 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     55392
IP address blocks:        103.2.252.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3941FA221377E9A206102B848EBB972A8709DD5
        Validity
            Not Before: Apr 13 09:52:40 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9B4A270628EE2804E0164224AF3B7949DD96B9DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:50:14:0b:97:7c:93:79:65:4b:d9:5b:df:1c:
                    41:b3:6e:f1:e5:17:a6:cf:02:e9:48:ef:b5:bb:cc:
                    bf:b0:83:00:67:7e:69:d4:47:21:73:10:a1:01:f3:
                    5b:cd:1d:72:70:de:d0:92:94:45:50:6e:07:38:2d:
                    6d:54:1d:d5:13:e5:bd:6f:e1:57:52:ce:c4:ff:bc:
                    25:bb:c9:87:77:dc:48:c7:4e:b7:0b:39:4d:e2:42:
                    e2:da:1c:6d:b5:7a:c4:72:8f:5f:53:d5:8a:7e:0d:
                    29:39:1e:7b:b3:85:3d:b5:54:ab:4d:ea:24:b1:cb:
                    00:dc:29:d7:36:75:d7:b9:20:f9:0e:41:ce:bd:61:
                    dd:fd:88:ba:49:7e:6f:55:8c:72:db:4c:71:cc:87:
                    23:c2:e4:aa:33:19:c8:d1:14:a4:5e:e0:8b:d8:cc:
                    5f:4c:6b:1c:1a:d8:3b:b8:7d:b3:ab:62:73:27:b5:
                    88:57:17:9b:1f:cb:15:5e:5c:1d:42:0d:15:a4:f6:
                    fb:f5:cf:4d:dc:db:dd:42:fb:67:fd:66:a2:bb:cc:
                    e0:bb:5b:25:d0:84:fc:97:2c:36:c9:c0:fa:b7:81:
                    a7:74:5f:c8:fa:6f:d7:c1:2d:a4:f6:94:5c:ed:8d:
                    24:fe:2e:6d:3e:b5:8b:26:40:75:7d:d9:7e:3e:55:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:27:06:28:EE:28:04:E0:16:42:24:AF:3B:79:49:DD:96:B9:DA
            X509v3 Authority Key Identifier:
                keyid:C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/m0onBijuKATgFkIkrzt5Sd2Wudo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:f0:d0:34:1d:3d:1b:20:45:a3:00:ab:49:4c:fd:db:0c:2e:
         a2:bc:9c:a9:0a:f7:b0:11:d7:7d:47:a2:1a:3c:14:86:a7:50:
         99:63:e8:9a:97:32:c2:dc:28:0a:01:9a:12:67:15:8b:fb:4b:
         d4:e9:85:0f:f5:fc:44:d1:9c:a2:2a:14:bb:09:05:39:7b:58:
         7e:6f:2d:62:20:d1:2e:45:56:24:1f:c1:1d:06:68:07:4b:72:
         b1:9d:2f:1a:09:3f:46:d2:a7:c5:4a:27:87:5e:e2:8f:47:b9:
         37:40:1c:97:ab:55:74:9e:2e:fb:1b:ac:d6:c1:38:7b:a8:ab:
         c4:1a:fa:59:31:32:df:6e:02:b6:b0:a9:21:dd:05:af:18:5d:
         10:02:6b:39:75:d2:d1:85:2c:f9:7e:52:34:e0:e5:0b:f3:c3:
         d2:b9:14:8c:7f:d1:71:ce:3d:10:88:b3:e7:b6:de:47:73:a3:
         15:e7:83:56:52:59:6c:b2:22:80:4d:b2:c7:95:c1:9e:95:aa:
         9e:c7:9b:f8:79:b6:ad:f5:11:65:06:ce:a8:db:98:3b:90:41:
         e6:56:12:3f:55:01:98:a8:92:36:92:30:28:47:8c:58:dd:ea:
         15:3a:ea:72:18:cd:bb:f3:08:d2:8d:dd:4e:a7:72:79:26:bc:
         5d:d4:21:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:10 2024 by rpki-client on console-fra.rpki-client.org