Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/R8qhvqlh9Z5uoj0mNTD8hOZ300M.roa
File:                     R8qhvqlh9Z5uoj0mNTD8hOZ300M.roa (raw, json)
Hash identifier:          2h4dCXZdnZOVdofMQ12ujIYOVNnQ8Opq5TSFGwflT9U=
Subject key identifier:   47:CA:A1:BE:A9:61:F5:9E:6E:A2:3D:26:35:30:FC:84:E6:77:D3:43
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0189
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/R8qhvqlh9Z5uoj0mNTD8hOZ300M.roa
Signing time:             Sat 01 Jul 2023 01:30:50 +0000
ROA not before:           Sat 01 Jul 2023 01:30:50 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        218.230.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:50 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=47CAA1BEA961F59E6EA23D263530FC84E677D343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:ee:09:99:be:0b:3a:0a:75:cb:92:2d:71:
                    6c:80:0e:63:be:ae:91:82:dd:e2:97:68:9c:b5:18:
                    ed:2c:60:a2:cc:cd:1b:7e:2f:dc:d0:12:f3:48:b7:
                    0b:00:c4:01:dc:7d:7c:e7:e5:2a:ec:fd:9e:f2:51:
                    74:ed:3f:9e:d7:7c:14:bb:10:ed:0f:95:44:ae:2b:
                    96:12:9d:cd:83:09:ab:09:71:3e:db:01:b4:76:8d:
                    fd:ae:41:8e:37:fe:0f:5f:e3:91:de:aa:88:e8:3a:
                    86:ed:ee:03:69:df:1c:0d:3c:4f:8e:6d:73:7b:d9:
                    c0:bd:78:d1:25:fb:12:7f:b5:ca:a9:e1:ac:0f:ef:
                    94:89:d9:4f:70:ec:6f:54:50:ce:a9:b3:75:38:f1:
                    31:cd:cb:36:9a:64:ef:76:fb:39:87:f5:94:ae:cc:
                    db:24:34:df:d5:0e:a8:56:6c:49:25:5a:59:a4:37:
                    b5:7f:50:41:7f:12:af:1c:31:e9:82:03:78:fb:e4:
                    18:c8:b7:21:04:30:21:a2:50:ad:6e:29:7b:c2:57:
                    c1:db:ed:2b:35:47:cf:29:ee:50:87:65:72:6b:64:
                    75:c0:dd:17:06:77:61:c2:bc:63:c1:17:3d:09:d6:
                    2b:6c:b5:aa:c9:14:55:99:51:6a:72:28:ce:bb:6f:
                    2d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CA:A1:BE:A9:61:F5:9E:6E:A2:3D:26:35:30:FC:84:E6:77:D3:43
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/R8qhvqlh9Z5uoj0mNTD8hOZ300M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.230.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c0:75:58:63:90:c6:f6:11:49:4d:1a:2a:0b:83:2c:c7:2d:21:
         b0:33:8c:fc:9c:50:64:86:81:59:76:e9:7e:8a:98:92:0c:10:
         9a:83:f4:89:1e:b7:1d:fe:70:49:89:26:f1:84:42:4e:f1:ac:
         20:5a:76:4a:ca:5a:11:e6:48:cd:cb:2b:f6:ff:46:d2:83:43:
         4f:69:7b:8c:60:21:b3:aa:fb:90:64:7c:30:13:4f:44:8f:e2:
         cc:2a:01:7e:f2:f3:04:da:46:c9:bd:cc:30:9f:a7:8d:14:5c:
         b8:df:9c:68:0e:87:9a:1a:1e:39:35:a9:43:37:61:14:54:26:
         74:20:c9:72:f6:d1:65:0d:fc:dc:72:d3:3a:02:b7:0f:7e:bf:
         c6:78:5b:fc:2c:b4:8a:af:41:80:98:c3:45:fa:d6:8d:e8:82:
         02:76:9f:d8:0c:a5:ba:aa:4c:ee:69:f7:e5:ea:42:f5:49:95:
         92:34:10:bf:34:8a:06:cc:3a:32:89:46:ad:1d:db:89:98:77:
         cb:d0:8b:f8:f0:27:e3:8c:98:a9:83:c5:cb:5c:6e:8b:2b:b5:
         69:c2:1d:13:17:2f:d9:4e:4b:e4:9d:4b:b3:5a:fc:ad:17:94:
         da:cb:57:fa:c6:a1:44:26:db:4d:27:1a:1a:61:62:33:ed:0f:
         77:36:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org