Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pq_5hFPuc-1Dh4jvgcoxDYVyaL0.roa
File:                     pq_5hFPuc-1Dh4jvgcoxDYVyaL0.roa (raw, json)
Hash identifier:          LCNTlBchbUJtH2bQAPOBVzQc2LS6foVHHR/gMRz49Sk=
Subject key identifier:   A6:AF:F9:84:53:EE:73:ED:43:87:88:EF:81:CA:31:0D:85:72:68:BD
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       22
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pq_5hFPuc-1Dh4jvgcoxDYVyaL0.roa
Signing time:             Tue 26 Sep 2023 06:41:16 +0000
ROA not before:           Tue 26 Sep 2023 06:41:16 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        115.30.0.0/19 maxlen: 20

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:41:16 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A6AFF98453EE73ED438788EF81CA310D857268BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6d:75:59:fd:04:40:a3:5a:ea:a1:06:1c:62:
                    e8:8e:6e:d6:b1:96:2d:48:e3:92:85:41:75:30:fa:
                    ac:00:7f:d6:d2:dd:dc:83:98:15:6d:6f:68:d4:66:
                    d6:63:66:b1:f7:16:be:6f:d4:06:4c:7a:2d:5d:2c:
                    8c:b7:90:d5:dc:bd:f0:39:58:f7:fc:b3:c0:2e:52:
                    82:0c:ce:0c:4e:68:3a:60:d6:c3:20:a0:1c:6c:21:
                    be:b9:3e:8c:44:10:3e:2c:9f:fd:ec:26:fb:9f:b4:
                    df:60:8a:87:eb:af:38:34:95:21:2f:7b:7c:6c:35:
                    0f:ac:68:0f:1d:b6:2f:66:ca:2b:d8:56:9d:8a:48:
                    01:18:a4:06:d7:56:a3:fd:e2:9e:79:46:9b:66:4f:
                    d0:5d:62:1f:4f:0b:05:6c:39:5e:8d:3b:36:5e:3f:
                    7b:e5:b1:07:9d:54:23:4e:0a:8c:16:1c:9a:c5:60:
                    a7:05:49:1a:1d:0e:29:ae:bd:cf:41:f7:91:6e:10:
                    7d:7a:95:2d:eb:6a:0d:f9:8e:ac:db:5e:4c:2e:7e:
                    20:65:d3:3d:cf:86:1a:61:a0:db:a2:58:8a:ee:cd:
                    1a:7c:98:32:7f:96:94:0f:63:56:96:e9:dd:46:d4:
                    3d:27:40:ea:a7:49:0b:5d:04:ea:24:1e:f4:30:12:
                    85:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AF:F9:84:53:EE:73:ED:43:87:88:EF:81:CA:31:0D:85:72:68:BD
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pq_5hFPuc-1Dh4jvgcoxDYVyaL0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:49:46:09:10:f7:f5:9c:a7:f7:b5:88:3c:93:5d:9c:d8:92:
         31:21:2a:db:56:b6:d8:96:9d:d1:54:a6:00:e0:91:c8:b4:4b:
         13:af:6e:50:3a:a7:51:87:91:0c:bf:b1:55:dc:f1:bf:64:c8:
         80:15:19:11:e1:b6:86:f5:97:68:18:0d:73:6f:ca:ab:d8:24:
         4f:c1:7b:bd:04:48:cd:5e:d5:01:e7:6e:10:13:58:f1:23:bd:
         d0:68:a9:cb:c6:50:95:2e:bb:30:4d:f4:32:2e:92:73:7c:e9:
         a3:ff:39:38:af:06:24:d2:79:e5:58:aa:55:e2:d0:30:e2:0d:
         6c:63:24:d4:c9:85:56:94:15:e6:a8:d8:89:d6:69:2f:0e:d7:
         95:ee:76:c8:e0:ac:06:2a:df:fe:99:58:8b:a6:f6:9e:fd:dc:
         e7:69:ad:51:38:9e:8b:1e:d2:86:de:21:eb:8c:e2:bf:61:16:
         4d:0c:9a:59:89:0a:b1:02:eb:7c:d2:16:cb:a9:fe:5f:e7:5c:
         dd:fb:2c:ae:ea:55:11:a1:7a:89:eb:ac:9f:14:70:92:d8:66:
         89:74:e4:e4:b5:44:4c:7c:9b:fd:f7:60:f7:03:a6:12:66:d8:
         60:4c:59:e5:a1:89:56:9e:11:9c:14:51:78:b1:79:cd:65:46:
         42:bc:ef:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org