Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/v5xP44wJk7SX2ioei4NAX1Tf4qs.roa
File:                     v5xP44wJk7SX2ioei4NAX1Tf4qs.roa (raw, json)
Hash identifier:          HjIwO3v/gTXfANyFVn4zwoQJ0MPMBACkCwt6x03qcyI=
Subject key identifier:   BF:9C:4F:E3:8C:09:93:B4:97:DA:2A:1E:8B:83:40:5F:54:DF:E2:AB
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0159
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/v5xP44wJk7SX2ioei4NAX1Tf4qs.roa
Signing time:             Mon 01 May 2023 01:28:17 +0000
ROA not before:           Mon 01 May 2023 01:28:17 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        61.208.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:17 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=BF9C4FE38C0993B497DA2A1E8B83405F54DFE2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:e3:1a:e3:b1:f7:d3:ee:6f:00:1a:d0:6b:
                    99:83:27:6b:82:64:5b:43:55:52:65:dc:e1:bc:6a:
                    00:89:42:4e:07:04:3d:cb:ea:35:bf:90:ff:2a:be:
                    79:68:d7:c3:02:51:41:23:7c:43:ff:91:98:92:7c:
                    1e:8a:d8:2e:5d:e5:f2:b8:61:15:c1:ba:64:86:78:
                    38:d1:4a:64:85:91:87:56:d2:73:03:e6:3d:52:d5:
                    56:28:80:98:fa:d8:c7:cb:64:56:45:51:43:6d:ca:
                    69:5d:16:6e:5f:1c:70:27:c2:d2:3a:74:45:f8:c1:
                    aa:79:a1:79:73:0a:dd:0d:27:b1:8e:94:b4:d8:47:
                    5c:ed:80:f6:4e:8f:3f:4c:41:c3:24:ad:34:d1:5d:
                    03:6e:da:82:2c:51:0e:38:b8:e4:33:1c:9d:db:46:
                    62:5f:44:f4:70:86:8a:bb:96:02:90:ed:c1:79:1c:
                    3d:57:54:dc:ca:e1:ef:c3:38:a2:93:91:a6:95:91:
                    f9:0e:68:72:24:6e:9d:13:ac:68:3f:3e:00:ff:82:
                    1f:3b:13:02:c0:86:0c:f4:7c:94:43:59:b1:fd:ce:
                    73:b5:0f:62:db:4b:c7:b0:ab:29:40:e6:00:32:ae:
                    d5:0b:5c:f7:91:30:2b:d5:fb:a7:cf:ea:b8:82:44:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9C:4F:E3:8C:09:93:B4:97:DA:2A:1E:8B:83:40:5F:54:DF:E2:AB
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/v5xP44wJk7SX2ioei4NAX1Tf4qs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d4:61:b6:16:c5:a2:78:2d:d5:19:23:39:d4:1a:4f:e0:64:83:
         4b:c0:fa:25:6c:8e:ea:f2:35:b6:57:e1:92:66:98:c5:3e:80:
         33:bd:f7:91:62:ec:f8:04:7f:ae:b9:89:2c:f4:c2:3d:e5:0f:
         ac:57:be:43:ed:1b:1e:20:79:37:2b:b9:fd:e8:5a:9b:09:fe:
         18:12:e8:f0:35:8d:02:ae:fd:ff:2f:9b:3b:17:84:39:29:5b:
         44:d4:43:04:08:62:82:94:05:c3:92:34:de:cb:02:03:42:62:
         c3:75:e2:03:d5:47:60:b5:b5:8d:b3:58:80:bc:e9:85:53:fd:
         9f:54:1e:e2:c9:77:70:4f:35:9e:8c:79:52:ea:ec:d5:ff:83:
         60:d1:9c:89:7d:00:fe:38:e2:df:b0:32:d1:26:16:4b:66:12:
         aa:3f:6b:d0:0e:6d:22:06:4e:ef:bc:42:a1:e4:7d:c4:d0:0c:
         24:95:c7:4f:53:c0:b6:03:fc:2c:85:ca:d2:64:37:e0:e0:8c:
         aa:57:fd:67:29:d0:11:72:60:54:f6:3f:14:28:c8:1a:4d:00:
         d7:e2:af:18:3f:e8:15:a9:23:45:5e:d7:f8:7e:3b:73:aa:ef:
         9c:de:7c:d2:69:68:4f:74:52:88:a5:08:d8:fb:f3:ac:fb:f1:
         f3:1c:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:33 2024 by rpki-client on console-fra.rpki-client.org