Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ZvuF_ZEcvDhunshgAJ4e88ahuBA.roa
File:                     ZvuF_ZEcvDhunshgAJ4e88ahuBA.roa (raw, json)
Hash identifier:          Ee3yb8cC00lT8Gt4mKKyOm8sNryXyYfAucwuEi1dwj0=
Subject key identifier:   66:FB:85:FD:91:1C:BC:38:6E:9E:C8:60:00:9E:1E:F3:C6:A1:B8:10
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       39
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ZvuF_ZEcvDhunshgAJ4e88ahuBA.roa
Signing time:             Wed 20 Dec 2023 03:54:50 +0000
ROA not before:           Wed 20 Dec 2023 03:54:50 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        202.131.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 07:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Dec 20 03:54:50 2023 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=66FB85FD911CBC386E9EC860009E1EF3C6A1B810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e0:28:45:eb:83:75:b6:c1:b5:0c:60:7f:b4:
                    fe:1a:92:c2:01:04:65:f3:19:2b:c0:98:23:2a:40:
                    fc:d7:c6:97:ab:5c:e7:0c:a9:58:83:2a:22:6c:6c:
                    3c:cc:1e:51:ca:b0:7c:80:8f:fc:3e:16:01:35:f1:
                    a0:c3:fd:b9:ae:91:e6:27:1f:b2:cc:02:f0:22:8d:
                    f2:28:c9:8c:f2:06:31:17:4f:b3:d5:41:63:c2:3b:
                    d3:bc:ee:dd:d0:8b:6f:10:fa:6e:d2:aa:1f:6a:0a:
                    00:c6:1c:0a:a3:3e:ff:26:19:ef:78:21:c2:38:75:
                    a5:ee:e9:5c:f1:e8:00:e8:a2:23:63:83:59:8b:4d:
                    9e:52:44:72:40:60:0d:f7:6e:54:d6:be:2a:5e:03:
                    80:6a:40:ad:aa:12:a5:16:92:08:b4:b2:74:c5:1c:
                    28:29:c3:38:70:ee:ff:52:c6:02:2b:00:8f:5a:f3:
                    4a:c6:03:f1:e2:e8:8b:70:62:27:9a:91:0f:80:54:
                    94:8a:cb:6d:ff:b3:34:c0:46:d4:ef:df:72:11:47:
                    75:05:17:78:ee:c0:c4:4f:84:29:91:36:14:a9:37:
                    a6:39:cd:9e:dc:21:41:cc:54:7d:32:f6:6d:ae:04:
                    5c:59:d6:e5:23:f5:67:30:fc:f6:3b:28:c9:e8:73:
                    c9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FB:85:FD:91:1C:BC:38:6E:9E:C8:60:00:9E:1E:F3:C6:A1:B8:10
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ZvuF_ZEcvDhunshgAJ4e88ahuBA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.131.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:d3:d3:59:77:12:0e:be:8f:9f:31:9f:9b:c5:c3:67:b7:4d:
         20:0e:7d:f0:5b:c5:8a:32:04:53:5a:6f:4f:a5:5c:c9:a4:2b:
         69:b7:88:d5:6e:d5:22:7f:ff:52:e6:5f:c7:6b:47:ca:b3:e4:
         82:2b:60:a3:83:52:d2:c2:6b:dd:ce:85:3c:3f:eb:23:45:8c:
         d7:4e:7d:43:6d:8b:d4:ac:53:4e:f4:e5:a6:d3:de:b1:11:eb:
         71:f4:d0:09:33:e8:a2:9c:4f:25:27:1d:16:02:f0:e9:5c:ba:
         d4:9b:b1:6e:3d:1a:06:e4:08:8d:67:46:a5:0b:fd:a1:6d:1c:
         d1:f7:9c:1f:83:86:a0:18:ea:55:a4:88:65:b5:b8:54:40:2e:
         1f:99:20:f2:0b:ea:7f:f7:0a:05:48:a5:2e:3a:3d:63:d8:1b:
         fb:55:2e:83:38:f4:22:9e:42:aa:8a:d2:5d:b3:71:22:88:d1:
         10:1e:18:37:47:74:93:2e:e6:e8:38:92:b9:ae:2d:7e:78:9a:
         80:e2:7e:70:a4:3e:d6:1c:6c:50:bd:b0:cf:29:a2:0d:5e:ac:
         1f:0b:47:a6:0f:62:c0:f9:9f:58:e9:bd:04:c4:a5:b9:7e:ba:
         e9:ad:bb:0f:48:b3:ce:9c:70:d1:f9:3e:51:c9:9d:ca:03:8c:
         07:34:9c:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 28 12:06:21 2024 by rpki-client on console-ams.rpki-client.org