Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pL9pg4rafIruHI4gLdixTsJbU4U.roa
File:                     pL9pg4rafIruHI4gLdixTsJbU4U.roa (raw, json)
Hash identifier:          mVSxL8Et7wVD36T08i79zULVQenbseCgGKskYBISMWE=
Subject key identifier:   A4:BF:69:83:8A:DA:7C:8A:EE:1C:8E:20:2D:D8:B1:4E:C2:5B:53:85
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       2B
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pL9pg4rafIruHI4gLdixTsJbU4U.roa
Signing time:             Tue 26 Sep 2023 06:53:15 +0000
ROA not before:           Tue 26 Sep 2023 06:53:15 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        175.111.80.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:53:15 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A4BF69838ADA7C8AEE1C8E202DD8B14EC25B5385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:c6:0f:b1:55:e4:2e:2d:07:17:a9:d5:d7:
                    31:61:48:cf:3c:26:d5:b5:14:ca:60:da:1d:46:31:
                    42:b6:0c:c9:a5:0c:15:d0:99:14:6d:12:b2:88:54:
                    15:e7:15:7b:d1:62:af:3b:6b:0e:19:63:4d:f3:de:
                    be:61:d9:d9:09:71:d6:e6:69:51:51:c1:29:30:b4:
                    bb:09:54:94:1f:ae:ac:7b:ab:5b:98:e9:60:c3:86:
                    5c:6a:eb:c2:12:9b:25:7b:12:08:93:74:38:41:6f:
                    28:f0:49:52:64:ad:b1:e7:f1:82:2a:5a:13:64:8d:
                    27:b3:a8:f4:df:67:f2:20:cb:a6:f2:7b:29:f1:7e:
                    51:83:66:17:15:50:36:a3:96:5c:39:08:ad:ce:58:
                    fb:6a:28:35:bc:86:d3:a3:d0:d6:99:c3:cd:e2:08:
                    22:3d:23:bb:24:9a:93:1d:07:8a:8f:97:c6:12:2b:
                    06:20:e6:9a:11:a7:53:53:2d:33:97:3a:a1:a9:86:
                    e3:46:20:40:11:bb:d9:38:78:ba:0d:bf:6a:3f:5f:
                    32:69:ea:85:da:4a:26:97:3c:ef:bb:de:e0:f2:5b:
                    6c:b1:bb:e3:a3:67:51:d7:77:3e:e0:a9:a9:8e:d7:
                    75:29:37:38:c3:61:cb:cc:44:61:a6:4a:9f:a9:2a:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BF:69:83:8A:DA:7C:8A:EE:1C:8E:20:2D:D8:B1:4E:C2:5B:53:85
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pL9pg4rafIruHI4gLdixTsJbU4U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:84:e2:a0:52:01:a1:87:b4:f3:59:3f:e7:b4:1c:01:6c:9b:
         04:39:0b:60:56:57:55:11:6f:5a:e1:1e:91:15:52:31:8b:5a:
         f8:1f:05:99:59:55:9c:e2:b4:d7:f2:6c:0d:76:ce:e7:ca:d3:
         0c:cf:cf:b7:24:6d:b3:e8:ea:df:61:dd:89:fa:7c:1b:fd:43:
         b4:df:11:c6:02:1c:e2:34:1e:8c:2a:d5:ed:0c:6a:55:9c:fe:
         3d:7f:2e:c9:68:12:01:46:9e:f5:3b:9f:81:a7:ef:11:e9:e7:
         83:f4:40:f9:8d:f4:72:b1:0f:b9:77:65:fe:31:3f:57:8c:85:
         7f:f7:39:ac:35:5b:1d:4f:a7:6c:e4:42:8b:a7:5d:2c:1d:49:
         32:a1:3e:ce:e8:e1:fb:48:83:78:66:e5:a3:a7:47:45:a2:d6:
         e7:20:27:a4:a1:3a:20:de:ce:e3:80:22:27:26:7e:a4:a0:11:
         fb:bb:32:92:ae:38:d6:e3:ea:44:21:52:45:05:42:ab:2b:04:
         fe:56:b5:9a:41:d0:6d:5a:0a:95:a9:61:fd:fc:1f:cd:8b:02:
         3d:b0:4c:b9:01:56:b7:c5:0c:e8:27:72:2b:5c:c9:6f:fd:52:
         3b:97:9e:5d:f7:4b:67:8b:30:a7:bf:5d:c6:c1:d2:0e:cc:bc:
         97:00:94:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org