Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1326/zySkPIh8bTEEXZ4Ei47pC0iV6Wo.roa
File:                     zySkPIh8bTEEXZ4Ei47pC0iV6Wo.roa (raw, json)
Hash identifier:          Qhiz6YScvQYK2P4UWhGRIGByTygrEabvkLcJlmikKc0=
Subject key identifier:   CF:24:A4:3C:88:7C:6D:31:04:5D:9E:04:8B:8E:E9:0B:48:95:E9:6A
Certificate issuer:       /CN=2031AEFA086096F90AC1163B526DF6F41F877CAC
Certificate serial:       02
Authority key identifier: 20:31:AE:FA:08:60:96:F9:0A:C1:16:3B:52:6D:F6:F4:1F:87:7C:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDGu-ghglvkKwRY7Um329B-HfKw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/zySkPIh8bTEEXZ4Ei47pC0iV6Wo.roa
Signing time:             Mon 19 Feb 2024 08:05:34 +0000
ROA not before:           Mon 19 Feb 2024 08:05:34 +0000
ROA not after:            Tue 18 Feb 2025 07:57:26 +0000
asID:                     10014
IP address blocks:        133.43.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 21 Feb 2024 09:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031AEFA086096F90AC1163B526DF6F41F877CAC
        Validity
            Not Before: Feb 19 08:05:34 2024 GMT
            Not After : Feb 18 07:57:26 2025 GMT
        Subject: CN=CF24A43C887C6D31045D9E048B8EE90B4895E96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:37:04:58:2e:28:4f:a2:b2:98:fb:9e:6d:
                    d9:dc:c7:6d:c1:31:57:aa:d0:86:01:1d:0f:8b:10:
                    c8:ea:11:ed:aa:e0:3c:5b:50:5a:bf:c2:f1:10:08:
                    28:76:ed:8c:cb:3e:14:98:4f:cf:13:72:ed:a6:63:
                    da:5b:0d:ef:82:bd:02:68:c5:c5:c8:04:9c:e4:9d:
                    13:d9:40:44:1f:31:e1:4d:74:c4:41:a3:7d:c2:60:
                    9c:85:80:c5:d2:6d:ce:c0:ec:fa:9c:de:ac:85:65:
                    bd:3c:98:53:83:e4:d5:f7:8f:5f:f0:92:e2:ef:39:
                    20:42:b6:b4:d2:e3:b2:bb:67:7a:81:b5:cf:c1:bb:
                    59:f2:e5:5f:29:bc:ca:eb:e0:52:6d:60:b8:de:d1:
                    11:c6:22:18:77:c0:ff:f5:fa:39:b6:00:0f:37:71:
                    5d:5e:d9:ac:45:44:cc:cb:e4:80:99:39:91:69:9d:
                    dc:40:05:65:82:67:85:5f:ae:bb:93:de:e7:e4:10:
                    a5:40:69:60:2c:79:2e:16:5e:20:8a:d0:a9:79:ff:
                    9d:4e:e8:80:cf:1a:ea:a0:ae:be:05:10:c7:05:5d:
                    d4:e0:27:a9:dc:0c:1d:51:cf:4b:fa:3b:78:09:05:
                    af:a6:b7:b2:a4:1b:00:71:16:74:85:95:cf:3d:ce:
                    f3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:24:A4:3C:88:7C:6D:31:04:5D:9E:04:8B:8E:E9:0B:48:95:E9:6A
            X509v3 Authority Key Identifier:
                keyid:20:31:AE:FA:08:60:96:F9:0A:C1:16:3B:52:6D:F6:F4:1F:87:7C:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDGu-ghglvkKwRY7Um329B-HfKw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/zySkPIh8bTEEXZ4Ei47pC0iV6Wo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:3f:cb:72:88:9c:73:c6:6b:b7:2b:bc:e6:b8:1d:6c:46:4d:
         e0:6c:e2:ed:2f:d4:a9:6a:dc:2a:4c:6e:b6:40:21:cd:43:b4:
         74:3e:7d:db:f4:16:9c:f3:97:d4:a9:70:d6:04:05:8b:b4:84:
         50:64:3c:97:bd:78:c0:62:a1:1e:bc:20:64:d9:2f:84:36:08:
         70:41:86:5c:2c:70:5a:14:fd:63:ab:09:d9:e0:d7:c9:7b:df:
         4d:61:04:6b:9d:ad:64:94:60:16:21:9e:b5:28:05:e4:99:75:
         ca:c4:e5:3c:86:10:d3:cf:97:68:d6:46:fc:17:b9:a1:96:d9:
         90:3d:95:15:e5:4b:f4:dd:83:a4:53:ce:d2:90:bb:2e:b2:3d:
         5f:ce:53:ea:2d:05:61:ba:df:0d:75:6f:74:4b:c0:69:94:3e:
         d2:92:21:93:21:a5:50:77:88:3c:54:06:dd:2d:c9:eb:1d:eb:
         48:12:13:aa:8d:fb:32:60:c1:82:66:63:3a:a4:39:02:01:b0:
         94:cd:fc:40:e4:4b:85:86:b1:be:a5:71:e1:02:69:56:e4:50:
         9d:a5:ed:5c:75:10:c3:44:c5:1a:1f:51:5e:79:5a:57:5a:eb:
         59:ac:e1:fe:d6:e8:c6:63:55:3b:9d:5e:b7:ab:9c:3f:9a:b6:
         02:72:4b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org