Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20040/d18Z8bTRi7cmAhicfEsAACr7UK8.roa
File:                     d18Z8bTRi7cmAhicfEsAACr7UK8.roa (raw, json)
Hash identifier:          0NmY4ek271e+oLGJ9Z+1Wa3BNydw7PO0DH5+82ddEpk=
Subject key identifier:   77:5F:19:F1:B4:D1:8B:B7:26:02:18:9C:7C:4B:00:00:2A:FB:50:AF
Certificate issuer:       /CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
Certificate serial:       11
Authority key identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/d18Z8bTRi7cmAhicfEsAACr7UK8.roa
Signing time:             Fri 30 Jun 2023 04:06:30 +0000
ROA not before:           Fri 30 Jun 2023 04:06:30 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9607
IP address blocks:        103.96.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
        Validity
            Not Before: Jun 30 04:06:30 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=775F19F1B4D18BB72602189C7C4B00002AFB50AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:98:3d:af:53:f4:a6:3d:4e:eb:57:c7:a6:
                    ef:eb:f2:6b:2d:4c:59:23:0b:04:3d:15:5a:8c:79:
                    3b:76:dc:12:a7:5a:8e:f8:0a:29:0c:2d:1f:87:d0:
                    5e:66:24:46:05:ec:a2:aa:ba:2e:a1:16:6f:50:ff:
                    6c:4f:5b:3b:60:c4:e0:09:86:3c:a5:55:40:04:b2:
                    95:fb:cb:69:15:d8:ef:6c:d9:9b:46:68:d7:86:8c:
                    17:39:0d:bf:60:51:55:44:e5:4d:18:ee:e8:44:a6:
                    2f:63:37:de:02:7b:3c:65:35:7e:1d:85:b1:e0:17:
                    3d:5c:90:79:b4:05:c6:41:d2:1f:39:c7:de:d1:2a:
                    7a:3c:36:b3:c8:92:37:6e:6b:d9:ac:50:31:33:e1:
                    f5:bb:b9:a1:9d:1b:29:8b:49:25:3f:9d:c1:73:03:
                    0d:21:5a:91:65:f3:8b:2d:4d:a0:fe:56:f9:20:57:
                    77:51:16:6d:7c:ff:f5:77:49:51:44:98:f8:f2:cf:
                    6f:c8:b8:dc:40:28:f5:47:31:a0:f2:7b:ac:b3:a2:
                    c9:aa:bd:08:df:63:69:20:6b:3c:a6:3e:c3:60:84:
                    4d:aa:ad:68:a1:4e:81:bc:81:aa:39:ad:7f:e7:89:
                    d7:66:5b:e1:58:56:da:79:d2:5c:66:bb:7a:46:9c:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5F:19:F1:B4:D1:8B:B7:26:02:18:9C:7C:4B:00:00:2A:FB:50:AF
            X509v3 Authority Key Identifier:
                keyid:5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/d18Z8bTRi7cmAhicfEsAACr7UK8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:5f:fb:bb:2b:72:83:35:8d:4e:38:61:0a:fb:de:22:06:
         0a:e7:2b:68:1d:6d:d3:24:4b:b1:af:d2:cd:d3:2e:7b:87:8b:
         43:db:f5:44:48:05:c5:55:98:02:9c:b0:35:9b:4a:8b:7d:ea:
         0d:1c:64:d6:05:97:9f:a3:21:1d:fc:ae:8a:45:8e:c5:c5:83:
         06:16:1f:94:e2:3c:92:7c:33:3f:52:b2:04:0d:14:18:dd:75:
         67:43:b2:d8:8d:f2:08:b4:6f:20:d8:1e:8f:bc:68:a8:09:6d:
         d6:5f:35:09:12:49:d0:e2:81:6d:f7:9b:81:98:28:3d:35:71:
         30:3a:08:24:63:3f:b4:64:b1:a1:2c:5f:57:23:e8:67:3a:8c:
         48:0e:01:19:92:d3:7b:0f:57:de:53:25:6c:56:7d:74:9a:a4:
         3f:63:eb:e4:3b:79:05:80:8c:cc:e5:36:fd:2b:85:c0:13:e4:
         6b:47:23:7c:f3:fb:a2:c5:8b:4d:01:75:51:79:38:6b:ad:b2:
         0d:36:d9:2d:be:a6:da:04:a0:f9:4a:33:be:f8:3a:04:ed:df:
         5d:35:9b:a2:65:11:2f:85:e9:2b:8d:7d:0c:85:87:21:b3:2a:
         4a:ed:7f:d2:66:51:93:63:b0:81:a8:27:a2:a0:13:0f:3e:e5:
         2f:37:31:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org