Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/e2dCdRBj4uXlJtqm4em9zYIZ54I.roa
File:                     e2dCdRBj4uXlJtqm4em9zYIZ54I.roa (raw, json)
Hash identifier:          UsSo5RV/KZhfOW+fdwvuXS9qTdOWz6DrGphgQoCXMN4=
Subject key identifier:   7B:67:42:75:10:63:E2:E5:E5:26:DA:A6:E1:E9:BD:CD:82:19:E7:82
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       27
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/e2dCdRBj4uXlJtqm4em9zYIZ54I.roa
Signing time:             Tue 26 Sep 2023 06:51:10 +0000
ROA not before:           Tue 26 Sep 2023 06:51:10 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        118.67.64.0/19 maxlen: 20

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:51:10 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7B6742751063E2E5E526DAA6E1E9BDCD8219E782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:58:45:dd:ce:49:57:5b:d2:a6:ae:1f:e4:c6:
                    8b:7a:16:a3:d2:3f:67:37:c8:38:ca:f2:69:af:d4:
                    10:53:fc:04:68:d6:22:98:78:bc:9e:a2:d3:10:6e:
                    84:b8:06:99:09:fb:37:9e:fb:de:af:74:3e:b4:c2:
                    db:ae:05:f6:90:6b:d5:95:bd:a6:15:0a:7f:05:ae:
                    fd:3d:10:ec:bb:53:10:47:5c:65:bd:f6:a2:a6:f6:
                    78:8e:5d:5c:68:3a:b3:eb:71:6d:c0:5c:68:23:6f:
                    63:c2:7b:80:af:7d:e1:05:1d:67:d7:03:bc:fd:67:
                    8e:1b:37:7c:29:8d:56:55:c7:ef:9d:be:48:8b:33:
                    bc:be:86:9e:66:3a:8d:10:c4:f1:a1:06:34:f9:49:
                    57:ee:6a:2e:5f:c6:c3:62:ac:6e:97:b4:1e:7b:b9:
                    98:cd:ba:18:24:15:4e:6d:e2:40:93:6a:11:aa:07:
                    66:98:f8:bc:6b:32:e8:81:1b:f4:43:ee:1a:95:0d:
                    58:85:45:49:67:cb:84:2a:31:10:06:9a:09:1b:e6:
                    76:29:f6:e6:f1:87:8e:9a:74:fa:22:08:26:14:2b:
                    18:5b:d0:d8:0e:b1:26:09:e6:3d:ac:b5:33:2e:dd:
                    f5:a7:d6:aa:f1:75:63:37:5d:37:6e:bf:01:69:fb:
                    06:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:67:42:75:10:63:E2:E5:E5:26:DA:A6:E1:E9:BD:CD:82:19:E7:82
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/e2dCdRBj4uXlJtqm4em9zYIZ54I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.67.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         30:4d:68:be:36:70:db:04:73:56:dc:93:74:e1:61:e3:fd:7c:
         87:c5:aa:69:81:24:ac:1d:76:0e:4b:21:2c:cb:64:78:92:ba:
         13:79:b9:7d:cb:6d:8a:93:34:c8:6e:76:19:d5:6a:35:9e:c8:
         6e:74:c3:18:8e:49:be:7f:99:0c:cc:81:42:98:1d:fd:95:c2:
         f4:72:72:c2:6f:32:80:d4:b1:7b:4f:45:d4:9b:51:41:76:f6:
         ab:f4:38:2b:93:68:d0:3b:87:cf:83:8a:b4:2f:d7:99:6a:90:
         f9:74:0c:30:ce:06:5e:06:3a:28:00:fa:30:a2:ba:44:03:a1:
         22:94:a8:e9:67:3a:48:bd:b6:85:13:00:6a:c7:ab:0d:98:56:
         db:fe:5b:a2:4a:29:ca:8b:64:dc:db:a6:de:cb:b5:bd:1e:e7:
         85:d8:80:f2:3f:8f:c4:7d:57:1a:a3:f7:f7:b9:2a:18:22:68:
         97:e3:27:7d:69:3d:0c:47:37:1e:a7:60:19:cd:0c:dd:e1:af:
         60:98:55:99:07:54:4f:4d:35:01:a1:18:d8:aa:59:28:e1:10:
         c6:1e:a7:16:2d:0a:df:dd:42:8b:cc:fb:47:9e:da:10:7a:d4:
         bf:39:a8:e2:06:88:85:57:a4:b8:b9:b0:ee:23:6c:fc:db:30:
         69:d9:a3:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org