Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/HhNFIxThRnhFxcgJ0s-e9unsaHg.roa
File:                     HhNFIxThRnhFxcgJ0s-e9unsaHg.roa (raw, json)
Hash identifier:          jGvJmnN5lIZNjoE3vxS8tqopPQE71VHtxkcdbLhJeYI=
Subject key identifier:   1E:13:45:23:14:E1:46:78:45:C5:C8:09:D2:CF:9E:F6:E9:EC:68:78
Certificate issuer:       /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
Certificate serial:       17
Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/HhNFIxThRnhFxcgJ0s-e9unsaHg.roa
Signing time:             Sun 01 Oct 2023 01:31:09 +0000
ROA not before:           Sun 01 Oct 2023 01:31:09 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     63782
IP address blocks:        133.186.56.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
        Validity
            Not Before: Oct  1 01:31:09 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1E13452314E1467845C5C809D2CF9EF6E9EC6878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:23:cf:0a:49:79:f3:1b:f7:87:7c:89:a8:
                    2e:43:1e:56:9a:c5:a2:45:12:a1:70:8b:14:49:65:
                    4e:74:9a:5a:36:dc:66:12:66:bc:ee:b4:b6:41:97:
                    e9:5b:5d:97:81:aa:05:b4:64:fb:18:2e:11:e6:bf:
                    ce:8c:a0:54:ea:bb:80:f2:68:a6:66:d2:d9:76:a2:
                    88:2e:c4:ef:d6:95:49:09:0f:06:2e:b1:57:10:ef:
                    34:d5:59:43:55:e1:4a:ef:84:c2:b5:a0:31:b0:d3:
                    65:b9:05:da:37:54:a2:3d:61:e3:c6:bb:46:7f:f9:
                    81:9c:a8:0c:08:12:74:34:a7:d8:66:0a:0b:f4:b2:
                    be:20:e8:4c:6a:a3:71:fe:50:30:59:25:e8:cc:d5:
                    3b:fd:e4:04:9c:07:2e:38:ab:d8:c2:5c:bc:d3:0e:
                    05:b9:de:94:86:58:c0:1c:a3:ee:a1:bf:05:06:59:
                    63:fa:e8:0f:f7:e3:65:5f:00:4e:47:3e:6d:27:c5:
                    01:f5:0c:d2:9f:33:c0:c2:fc:54:2d:1e:f8:7b:89:
                    c5:03:44:a1:62:56:fd:33:eb:68:eb:2f:9b:c6:5d:
                    a4:49:6b:c4:68:e5:ec:5d:a5:1e:35:8a:3d:e7:0e:
                    09:fc:ea:26:d2:13:20:4d:8f:45:99:70:30:da:80:
                    e0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:45:23:14:E1:46:78:45:C5:C8:09:D2:CF:9E:F6:E9:EC:68:78
            X509v3 Authority Key Identifier:
                keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/HhNFIxThRnhFxcgJ0s-e9unsaHg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.186.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d7:cc:db:4f:b6:f5:0c:15:09:cf:bd:3c:7d:2b:03:c7:bb:92:
         c9:98:32:3b:b5:76:c4:36:75:47:5c:d1:a1:cb:f0:8a:60:78:
         bf:67:45:7d:96:0e:1e:02:7f:80:f0:29:ef:55:74:51:fa:19:
         26:2c:d0:58:05:8f:4d:5e:35:43:33:d1:cc:09:6e:55:17:b8:
         34:33:91:79:72:cd:03:29:7e:34:d7:a5:6f:6c:d3:e5:af:b9:
         59:22:6f:96:85:fc:f8:17:31:53:cc:6a:cb:38:2b:e7:63:be:
         e3:1d:47:7f:0c:3f:84:a3:49:53:9f:e7:69:ed:76:c4:3a:07:
         56:7b:41:ef:f2:d0:b2:fa:f3:c3:fa:6f:73:0f:67:7e:5f:77:
         13:87:ae:2f:fa:11:a1:3b:73:03:fb:00:2b:00:d7:b2:54:45:
         e6:11:0b:31:33:0a:b7:22:cb:8b:6f:07:c5:70:56:83:2a:ae:
         01:d1:36:ee:8b:23:aa:cd:1f:cd:28:b6:ca:e5:bc:10:e3:77:
         54:94:c6:1a:f8:9e:f8:14:ab:70:37:c9:6e:15:fc:d1:bd:bd:
         7e:d7:02:f2:52:d0:37:38:31:b9:9e:f5:99:8e:17:8e:f8:41:
         44:a6:a2:3b:7e:dc:6b:db:f1:81:96:32:88:43:dd:95:c9:6d:
         9b:f8:a4:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:54 2024 by rpki-client on console-ams.rpki-client.org