Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/nenaMVFv9tjI1XTKrhyDTR_PJUo.roa
File:                     nenaMVFv9tjI1XTKrhyDTR_PJUo.roa (raw, json)
Hash identifier:          hPGosjwYXfOD9XE0LDwLshv3Dz3pMl+dbOSM8d4Xg78=
Subject key identifier:   9D:E9:DA:31:51:6F:F6:D8:C8:D5:74:CA:AE:1C:83:4D:1F:CF:25:4A
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       3A
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/nenaMVFv9tjI1XTKrhyDTR_PJUo.roa
Signing time:             Tue 15 Aug 2023 00:56:22 +0000
ROA not before:           Tue 15 Aug 2023 00:56:22 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     4694
IP address blocks:        202.239.32.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Aug 15 00:56:22 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=9DE9DA31516FF6D8C8D574CAAE1C834D1FCF254A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d7:45:60:08:9f:a8:5f:f8:ce:1c:e8:db:43:
                    7f:fd:03:36:78:7d:74:33:25:9f:74:bf:76:ec:07:
                    e8:e9:7b:cc:36:a3:53:b4:93:39:f1:82:d8:79:63:
                    21:8c:2f:05:20:47:7f:2d:7a:a5:1a:4c:d5:20:ce:
                    78:dc:d6:87:ca:bf:ef:51:d8:c2:b6:32:4e:14:14:
                    c5:a7:05:fb:0d:e1:7e:e2:9e:1a:98:9f:ef:9e:dc:
                    dc:1d:14:fa:85:04:27:3e:f8:70:76:40:fe:d0:f6:
                    ed:fa:1e:30:fd:47:bb:95:93:07:b7:08:90:f5:4c:
                    e6:58:b7:0f:d0:be:de:90:4a:4c:2a:da:dd:55:c9:
                    3d:32:46:d4:c7:ad:df:d3:bf:a5:df:93:3b:38:17:
                    4d:f4:83:48:a6:14:09:2e:09:4e:b4:fe:dc:8b:e6:
                    37:d1:f6:01:4f:43:fd:44:4f:3a:78:bb:8a:20:a7:
                    fe:76:e4:5c:b1:dc:0c:dc:fd:18:ba:98:17:74:da:
                    f7:82:e7:db:ef:cb:cc:ca:a3:5d:d2:41:19:c5:00:
                    79:99:1c:ae:d5:47:ce:6c:35:17:4f:4d:24:ea:42:
                    9f:93:94:0d:0e:09:a1:b4:c7:e1:9e:26:c1:65:9a:
                    df:61:02:22:61:21:e0:cf:4a:4b:65:65:0f:cd:96:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E9:DA:31:51:6F:F6:D8:C8:D5:74:CA:AE:1C:83:4D:1F:CF:25:4A
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/nenaMVFv9tjI1XTKrhyDTR_PJUo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.239.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:dc:4b:35:d5:ec:19:9f:fd:9b:53:3d:f0:9b:2f:60:97:bc:
         76:0b:ab:d8:4d:6d:80:3b:c9:b6:66:8b:e5:71:15:5b:b1:74:
         cf:e9:fe:bd:91:6b:ca:07:ec:05:10:36:0b:ae:cd:02:6b:af:
         5d:23:23:d9:f8:2a:4a:83:76:92:d8:6a:3b:93:cb:3d:c8:8f:
         de:34:5e:a9:4a:92:86:4f:78:0c:35:99:ab:5c:0b:9e:cc:dd:
         4e:cd:30:66:df:7c:b6:79:18:69:16:04:98:31:55:1e:74:08:
         c2:f5:23:88:a4:bf:cf:74:61:f6:44:58:a1:46:aa:23:e9:da:
         dc:ae:e3:89:94:34:2b:8e:bb:bb:f7:d0:7e:b2:83:cb:88:ae:
         71:57:bd:24:34:73:e6:07:52:6e:1e:af:dd:05:d5:e0:27:a0:
         f1:28:b4:7e:be:96:15:6e:70:77:f4:5d:94:d3:ec:29:b7:81:
         07:bd:b9:2c:8d:3b:04:a8:0e:85:44:40:a6:47:04:84:a2:14:
         82:83:aa:84:cd:51:9d:fe:32:c9:33:bc:52:3a:a0:7c:1f:f7:
         96:d8:1c:73:78:55:18:9d:12:0b:d3:b0:9d:72:25:88:71:05:
         fe:29:15:83:9c:f1:8a:75:5e:7e:df:ca:bc:be:f8:04:09:20:
         7a:1c:ee:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:25 2024 by rpki-client on console-fra.rpki-client.org