Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/6nPJyqQuZCjYMMC51GtsdElKm9M.roa
File:                     6nPJyqQuZCjYMMC51GtsdElKm9M.roa (raw, json)
Hash identifier:          uBZWR9nBH5hvgurXh2ghdjO/qNEwOa+iNfXwbhr4OVE=
Subject key identifier:   EA:73:C9:CA:A4:2E:64:28:D8:30:C0:B9:D4:6B:6C:74:49:4A:9B:D3
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       5E
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/6nPJyqQuZCjYMMC51GtsdElKm9M.roa
Signing time:             Thu 22 Jun 2023 00:35:04 +0000
ROA not before:           Thu 22 Jun 2023 00:35:04 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        203.160.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:35:04 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=EA73C9CAA42E6428D830C0B9D46B6C74494A9BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e8:f0:52:af:14:c1:1c:77:27:98:47:e9:98:
                    64:e4:75:92:87:6a:b8:f8:b8:f9:09:ec:ac:e0:dd:
                    f8:47:c7:90:f8:bf:7a:a5:33:a3:05:c0:8c:08:0d:
                    39:68:01:93:0c:a1:e1:32:a9:1d:64:ec:5e:a7:3d:
                    fd:e2:ce:8e:f5:ec:d2:9c:6d:9d:65:d3:d0:40:fa:
                    4c:d9:04:15:c7:60:a8:95:ad:4b:83:75:bd:26:6f:
                    b7:b4:ab:00:3d:ec:c6:1c:d1:46:25:a8:0b:8c:8e:
                    c6:39:3d:0b:d7:e1:c1:25:c3:ee:b2:96:56:5a:f6:
                    f5:04:92:7c:43:0c:ab:39:18:c0:3e:af:3c:b0:5e:
                    77:26:d7:e6:3c:da:36:de:1b:72:57:d9:df:1f:e6:
                    25:da:b5:7e:63:dc:c0:04:a9:42:f2:5f:8d:cf:44:
                    2b:af:9b:ad:cc:f7:dd:53:09:6b:c8:06:10:21:44:
                    80:03:8b:95:e3:72:d7:7a:85:d2:60:e6:a3:6a:cb:
                    6a:61:8c:54:7a:08:1a:17:d2:b4:64:38:f2:1c:a9:
                    a9:ba:bf:cb:4b:4a:2e:fd:52:4a:cb:12:24:f5:ee:
                    68:d7:22:ce:3a:35:6e:37:c7:5d:e2:87:b0:14:3c:
                    a4:8a:35:f4:f8:ba:2f:6d:3b:81:9a:dd:8f:46:83:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:73:C9:CA:A4:2E:64:28:D8:30:C0:B9:D4:6B:6C:74:49:4A:9B:D3
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/6nPJyqQuZCjYMMC51GtsdElKm9M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.160.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:86:1f:14:51:2e:eb:fe:df:0a:00:2d:07:ca:48:7e:79:59:
         74:12:b6:c3:61:ff:31:6d:8e:a6:9f:3e:06:c0:2a:1c:91:d9:
         63:a0:cb:4b:16:38:3b:d3:c3:6e:36:27:27:49:7d:b0:c9:10:
         a9:fc:a6:4b:b3:6d:26:08:a3:c6:3d:cb:65:29:14:31:b0:07:
         ab:bc:32:7a:7c:98:20:6b:b6:03:2e:53:16:87:d7:fd:78:28:
         40:c6:b0:22:5a:b0:f2:6b:f5:d8:05:0d:be:38:d0:d2:dd:a1:
         d3:30:8d:dc:12:49:65:3d:3f:74:7f:bc:f8:f3:ad:ee:06:90:
         0c:ad:85:7d:2d:ba:ec:d6:8b:f1:35:7b:8c:c2:97:7e:be:0f:
         a4:c0:34:51:43:0d:e6:84:8f:12:1f:75:80:47:f9:91:fb:94:
         30:2f:80:f8:f7:f1:45:ca:9e:71:68:f2:6b:fb:51:b0:9d:9c:
         91:8d:11:f6:da:a0:d2:c8:3e:c3:a9:c3:72:82:7f:51:ef:62:
         7b:ae:1e:3a:23:51:fa:23:72:a6:b3:81:77:e8:c9:d1:c8:13:
         e7:d4:9c:2c:d0:07:c0:4a:a8:ec:46:9b:51:5d:40:44:ad:60:
         54:26:77:a0:d1:35:99:80:30:6e:e6:d3:c3:32:b1:a3:71:1a:
         c3:32:9f:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org