Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/9ZdtzH-yhF9wd5NCYI8cFrI9etg.roa
File:                     9ZdtzH-yhF9wd5NCYI8cFrI9etg.roa (raw, json)
Hash identifier:          UaXxHSzA2xsf1nmX8l2XFJ6RMxSzjY23DWLwhaa2/fk=
Subject key identifier:   F5:97:6D:CC:7F:B2:84:5F:70:77:93:42:60:8F:1C:16:B2:3D:7A:D8
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       70
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/9ZdtzH-yhF9wd5NCYI8cFrI9etg.roa
Signing time:             Tue 01 Aug 2023 01:30:27 +0000
ROA not before:           Tue 01 Aug 2023 01:30:27 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7521
IP address blocks:        210.173.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Aug  1 01:30:27 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=F5976DCC7FB2845F70779342608F1C16B23D7AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:50:d8:ee:27:25:9d:81:89:2d:d0:10:45:b7:
                    f1:43:1e:c0:3f:5c:6f:4b:e9:76:5f:a9:4f:97:06:
                    76:3f:42:4f:73:65:cd:e3:97:94:a7:e1:d4:00:40:
                    ff:64:dc:d9:fb:5b:f5:06:b0:25:60:00:57:c3:c4:
                    72:de:f9:06:6e:e5:53:fc:99:45:02:15:4f:da:72:
                    ff:fe:05:56:f3:95:1b:26:63:cc:bd:b6:74:16:28:
                    48:72:47:8a:d2:28:c0:c2:29:51:6c:2c:40:7f:ae:
                    01:af:dd:ff:21:c7:8d:7f:86:8b:f7:5a:95:12:d1:
                    d2:6e:4f:a9:3c:ef:c4:fc:5b:b3:28:a2:51:9a:0a:
                    8c:c0:b8:80:e7:f0:d5:3a:62:1b:b3:f4:c3:7e:61:
                    88:60:18:8d:09:b0:8e:0d:08:07:ac:6d:e6:0b:b8:
                    5b:42:75:21:68:06:d3:86:23:fd:dd:65:32:7b:17:
                    e2:fa:e3:2f:7b:0c:2b:f7:43:12:9b:43:ed:4f:bb:
                    ad:af:10:8b:f4:a4:5d:4a:f3:55:e2:a0:c1:e2:27:
                    18:e8:28:57:5a:d7:0c:93:96:44:ba:fe:cf:87:4c:
                    6d:d0:ad:fe:b8:05:8e:31:9b:10:6c:76:21:a9:c0:
                    ca:76:77:b5:62:df:2d:80:ef:ab:15:9b:65:64:09:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:97:6D:CC:7F:B2:84:5F:70:77:93:42:60:8F:1C:16:B2:3D:7A:D8
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/9ZdtzH-yhF9wd5NCYI8cFrI9etg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:65:53:07:70:d3:0c:db:2b:64:12:db:42:f4:9a:77:f6:
         be:45:e4:79:45:e2:98:1b:90:71:ba:8b:af:2f:be:3a:14:a6:
         f9:80:89:8d:ad:33:a7:5f:b2:a7:10:1b:55:a1:0c:de:25:6d:
         99:b6:ab:ba:a5:90:a9:6a:81:5b:0b:1c:7e:34:22:18:8e:9c:
         90:6e:67:85:50:e2:d0:4e:bc:b7:55:72:e6:1c:46:b3:c3:d2:
         02:a2:e6:70:b6:e5:ec:27:52:0e:62:b9:21:04:0b:24:dd:12:
         15:7d:19:24:57:bb:80:2d:7c:0e:52:6e:0c:e3:c4:fe:ac:a6:
         0a:cb:4f:7b:a9:b3:85:d7:79:1d:39:f5:11:bc:33:0a:bf:81:
         3b:11:4c:a8:d9:3a:a1:a2:bf:9c:de:a0:7e:d8:33:57:b5:40:
         ac:b1:d8:a6:a5:e7:20:11:bb:84:4f:a5:9b:06:34:d5:29:ac:
         d1:73:97:ea:71:aa:98:63:fe:a2:e0:f9:fa:25:e5:ca:96:6b:
         39:63:71:7c:5c:3b:7d:e2:a8:df:0a:f1:37:fd:d7:37:99:9c:
         15:70:b5:91:25:9e:3b:2b:e1:b8:02:90:3e:0a:29:c3:d5:b1:
         7e:b8:41:71:53:e6:9e:be:23:e4:13:fe:af:4c:1f:40:e9:f6:
         85:42:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:25 2024 by rpki-client on console-fra.rpki-client.org