Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/8T0iloJek85U4-oJ8QQnDc_JMpk.roa
File:                     8T0iloJek85U4-oJ8QQnDc_JMpk.roa (raw, json)
Hash identifier:          94mGtkYKNYZw2v4WxvUWoTMESsGDbjU7fJzGOFcJVaA=
Subject key identifier:   F1:3D:22:96:82:5E:93:CE:54:E3:EA:09:F1:04:27:0D:CF:C9:32:99
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       55
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/8T0iloJek85U4-oJ8QQnDc_JMpk.roa
Signing time:             Sun 30 Jun 2024 01:31:39 +0000
ROA not before:           Sun 30 Jun 2024 01:31:39 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     23816
IP address blocks:        219.100.144.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 01:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jun 30 01:31:39 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=F13D2296825E93CE54E3EA09F104270DCFC93299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2a:7d:73:f4:43:64:74:94:d1:e5:cb:f1:6e:
                    7a:23:90:7c:62:b6:22:52:4f:27:6b:48:5b:d2:3c:
                    7f:3f:0f:61:b4:f0:c9:d2:c6:76:f2:8c:b1:43:64:
                    9d:fb:86:30:24:b7:70:4d:2d:cd:34:df:32:d3:fd:
                    5a:ac:a8:42:d6:cb:3a:32:eb:0a:73:6b:cf:47:d0:
                    1c:40:f0:03:ef:6f:94:a2:59:af:87:66:0f:65:58:
                    8f:2c:e6:e3:f3:83:ea:ed:c8:e0:2e:d7:be:02:e7:
                    27:f2:30:a2:bd:6a:09:05:13:fc:be:a9:30:d6:92:
                    9c:c5:0c:2b:f7:2d:95:92:69:cc:00:54:59:59:a0:
                    a2:89:03:6a:96:10:04:97:37:b1:c4:c9:c0:08:3a:
                    c0:6d:16:40:58:1d:6e:b9:67:ec:c9:88:1c:f9:bc:
                    1c:58:ad:ce:73:a0:96:e9:b3:cb:95:e9:cc:5d:53:
                    21:de:45:19:5f:68:fd:ae:72:97:80:46:83:00:c5:
                    27:e0:3f:5d:2e:e5:0d:be:59:c7:30:45:53:6f:a2:
                    bd:8a:a8:34:69:31:9d:63:12:89:be:a2:fa:86:76:
                    73:dd:da:20:74:3b:a6:b5:eb:46:20:a5:bc:c5:5b:
                    28:a7:96:c5:22:88:09:8f:93:5b:b5:2a:e0:9a:31:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3D:22:96:82:5E:93:CE:54:E3:EA:09:F1:04:27:0D:CF:C9:32:99
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/8T0iloJek85U4-oJ8QQnDc_JMpk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:1d:0d:1c:64:2c:41:74:dc:a1:49:8e:95:63:1b:46:ca:68:
         85:16:f6:c6:ee:db:7f:a3:65:13:00:7b:bb:3a:ca:3c:5a:98:
         f9:33:c9:20:90:7d:8b:7a:37:43:b1:cf:dc:fa:34:56:41:46:
         71:a8:33:ce:0c:ca:30:b7:02:b8:c6:90:ff:c4:75:1c:e9:75:
         04:50:5b:f4:74:45:f3:8e:df:9d:cc:67:4b:d6:c6:e5:ad:ef:
         61:64:cc:76:9f:bd:6c:77:e4:44:64:4e:5e:58:d3:4c:0a:5f:
         9c:08:67:aa:10:eb:da:c2:54:7b:0b:4d:97:b2:20:2e:a7:94:
         8b:2e:f6:20:50:01:39:e2:74:74:f9:52:86:75:21:7b:78:6d:
         a6:36:3d:e1:8a:a6:e0:47:d3:ad:99:b9:b6:95:1f:0d:58:a8:
         99:d8:18:c8:d2:ee:cf:4e:55:09:c2:dd:a1:6c:42:7c:66:96:
         ba:93:38:1a:0b:54:85:fd:fe:eb:f1:9f:45:96:b9:d0:3a:ba:
         0c:3e:6f:12:36:e7:1a:89:ec:c4:8b:f1:16:e9:fc:11:7a:57:
         3d:05:db:c2:3a:19:e9:45:01:84:13:dd:2b:cc:7e:02:54:fb:
         76:80:dd:9a:c3:79:0f:7a:0d:a7:59:d4:61:1a:ff:bb:36:44:
         90:8e:cd:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 12 05:35:55 2024 by rpki-client on console-fra.rpki-client.org