Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/PLdbaVzOnQ3I0dOYau3VcGkSJTw.roa
File:                     PLdbaVzOnQ3I0dOYau3VcGkSJTw.roa (raw, json)
Hash identifier:          3FGYgk0cgSen9sptjmAYwTP2XrsVoyiKZG6HvbjEtu4=
Subject key identifier:   3C:B7:5B:69:5C:CE:9D:0D:C8:D1:D3:98:6A:ED:D5:70:69:12:25:3C
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       4C
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/PLdbaVzOnQ3I0dOYau3VcGkSJTw.roa
Signing time:             Sat 31 Aug 2024 01:30:48 +0000
ROA not before:           Sat 31 Aug 2024 01:30:48 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     17941
IP address blocks:        118.67.64.0/19 maxlen: 20

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 07:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug 31 01:30:48 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=3CB75B695CCE9D0DC8D1D3986AEDD5706912253C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e1:47:52:42:8f:71:23:a3:33:c8:84:88:49:
                    57:f6:86:77:6a:20:2b:8b:c4:85:9c:b4:42:79:1e:
                    b5:02:f5:a4:c8:2d:0f:18:28:06:b2:a3:c9:df:e9:
                    fe:e4:77:ea:85:ab:2a:79:a6:e9:25:1d:4b:4d:37:
                    7e:93:00:53:47:9a:c8:3b:57:2d:98:e3:01:a0:20:
                    a8:57:a7:29:af:6b:c4:c7:b3:0a:d4:f1:0a:7c:ac:
                    1f:e2:ad:5d:3b:1a:39:84:b9:59:46:87:f5:72:9c:
                    88:eb:4a:33:72:fc:99:33:c3:58:25:23:1b:cd:97:
                    96:e1:87:06:41:37:2b:3f:75:6c:42:29:e5:71:c0:
                    40:63:e3:73:94:7e:c8:65:a0:e3:99:61:70:e2:fb:
                    6a:19:5f:4e:23:b1:09:83:b9:0c:83:ab:1b:a2:41:
                    fc:a8:6d:09:22:97:e9:66:17:c7:57:34:29:ce:80:
                    d8:de:e6:db:2c:a3:2c:a4:f8:13:26:18:16:5d:7f:
                    f1:fc:b7:71:78:9c:f1:92:c9:01:63:20:71:c5:ac:
                    fd:eb:c6:78:b1:2f:bf:76:7f:bf:16:ed:63:72:e1:
                    0f:94:03:dd:9e:b7:d9:a8:bc:ac:5b:dc:3a:e5:e1:
                    19:11:42:65:cc:11:3c:62:c4:75:64:80:6e:ba:85:
                    dd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B7:5B:69:5C:CE:9D:0D:C8:D1:D3:98:6A:ED:D5:70:69:12:25:3C
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/PLdbaVzOnQ3I0dOYau3VcGkSJTw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.67.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:fe:fe:c7:e9:fb:3b:8d:72:f0:03:32:f4:b2:ef:01:95:32:
         cd:cd:b2:1f:56:e2:67:f6:d2:b3:29:ec:bb:ce:b5:c1:ce:d9:
         83:3d:fc:d9:d7:1e:31:ed:b4:f7:5f:09:75:7c:6d:ff:d6:5d:
         13:0d:78:2d:76:e9:c5:1e:ac:1a:a9:b9:b7:92:a5:98:d7:60:
         51:01:8d:f2:c3:e6:8a:e1:f2:d1:f3:89:b2:13:05:9b:34:7c:
         4e:e3:de:a7:0f:8f:c2:cc:10:51:a4:bb:9e:d3:1c:de:d7:85:
         c0:b6:5e:be:c8:28:e2:8a:a7:99:28:cc:80:61:26:1e:da:d8:
         08:37:0c:9d:1a:cd:3a:9e:8c:94:38:51:c8:09:31:c2:70:5c:
         77:f4:14:e8:d6:6f:2f:eb:52:d6:79:3a:dc:fb:42:b5:11:e9:
         83:88:7f:8a:95:6f:c5:25:0d:3f:17:fb:84:cc:01:ac:34:17:
         31:8c:86:fc:11:51:d5:16:a9:6c:9f:aa:bb:56:2d:9c:72:6b:
         66:38:b7:b3:bd:9d:5c:5a:14:78:f6:e8:d6:43:b2:9a:b4:20:
         1e:d7:e9:e1:90:d9:e7:13:95:07:d2:da:d5:93:21:6f:40:4b:
         e6:85:4d:9f:ba:55:4b:40:ce:cf:03:82:76:ca:87:17:d6:f2:
         f2:ae:88:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:05 2024 by rpki-client on console-ams.rpki-client.org