Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/S1sx37VI3Qr2AdlyHqOKxwk51Ro.roa
File:                     S1sx37VI3Qr2AdlyHqOKxwk51Ro.roa (raw, json)
Hash identifier:          0grGHCujMYJdJomrgitws6cNKSeYQGIHS45juRkIDNE=
Subject key identifier:   4B:5B:31:DF:B5:48:DD:0A:F6:01:D9:72:1E:A3:8A:C7:09:39:D5:1A
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       95
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/S1sx37VI3Qr2AdlyHqOKxwk51Ro.roa
Signing time:             Thu 13 Apr 2023 09:53:14 +0000
ROA not before:           Thu 13 Apr 2023 09:53:14 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        203.129.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Apr 13 09:53:14 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4B5B31DFB548DD0AF601D9721EA38AC70939D51A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:ad:11:f3:86:43:83:58:a3:c8:7d:35:98:
                    24:08:fe:0c:ab:d5:0e:28:93:80:41:58:eb:2b:d2:
                    9e:73:35:ae:87:e2:ed:bd:02:e7:f0:4d:92:9f:a7:
                    d5:00:e3:b7:27:82:cc:b2:dd:04:65:69:ce:3a:17:
                    aa:98:c7:db:14:89:6e:89:8a:41:a7:4d:16:34:3e:
                    02:84:1e:b9:a9:f3:b0:35:a2:98:e5:7e:e1:f1:01:
                    c5:48:f6:ef:7e:27:1e:ba:97:8b:4d:78:b5:74:c6:
                    aa:7d:72:5e:62:56:55:74:19:3b:26:56:95:63:05:
                    ad:c4:dd:59:12:16:93:d4:ca:15:ec:dc:35:3a:fe:
                    0b:47:08:fa:bc:87:bf:51:32:89:ed:32:8e:78:a7:
                    79:ec:40:f1:de:2a:e1:f7:be:ae:cd:b4:d9:ae:52:
                    81:85:1b:e2:07:b4:93:cf:eb:ee:37:69:f1:50:07:
                    47:36:18:c0:9a:d5:32:da:79:93:5f:33:01:fd:a1:
                    74:20:bc:8d:d7:02:b7:a3:a2:ac:ab:be:e0:68:de:
                    ba:4f:4d:60:9c:be:b8:a8:ed:85:3f:a7:42:d2:e6:
                    c6:4e:3b:99:15:01:a9:8c:50:f4:4c:15:37:6b:30:
                    81:9d:1d:5f:64:d2:d6:06:61:d7:0b:76:ab:9a:b2:
                    ac:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5B:31:DF:B5:48:DD:0A:F6:01:D9:72:1E:A3:8A:C7:09:39:D5:1A
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/S1sx37VI3Qr2AdlyHqOKxwk51Ro.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:a6:d2:6f:8a:81:9c:bc:98:d5:5c:ec:19:cc:e0:a9:ff:34:
         26:7e:32:4e:56:94:e0:ae:fc:74:6f:7b:c2:d4:79:e3:cb:a4:
         d2:f9:54:e6:d1:0f:3c:e8:81:d4:33:e3:01:dd:db:2a:53:ff:
         c9:55:19:88:2a:43:1c:64:34:8f:a6:e9:71:71:c7:b8:e0:36:
         06:05:bf:a4:47:9b:56:e7:ab:cc:9d:1e:6e:b7:42:3f:c0:1b:
         78:5c:ed:cd:de:19:7e:f0:05:48:25:45:e0:3d:04:6f:b8:69:
         fc:02:3d:f7:1c:c1:65:93:25:4b:fe:72:be:41:31:2c:ff:ab:
         b2:86:6a:e0:7a:90:50:4c:47:4c:ac:08:c9:7a:7f:80:60:6d:
         6a:bf:cd:3e:76:b2:24:de:c5:f7:48:87:2b:1f:0a:36:fb:ea:
         3c:72:b5:d6:61:1b:58:da:84:a5:27:19:74:b0:f1:b5:59:6a:
         a1:a3:7c:79:77:15:7d:4c:bc:cc:8e:c3:ba:cc:a7:c3:ee:be:
         ae:7f:06:71:41:bb:a7:ae:72:45:42:39:5e:f3:4d:88:10:c3:
         19:76:bb:cf:38:03:d5:fd:cb:5b:9c:8d:8c:4c:a1:cb:ab:ee:
         98:55:da:a2:fd:80:38:ce:11:28:b0:9e:10:4c:80:2b:84:21:
         fb:3e:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:25 2024 by rpki-client on console-ams.rpki-client.org