Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/avkoRDcPhNiCwj5DRxj-DBRFxi4.roa
File:                     avkoRDcPhNiCwj5DRxj-DBRFxi4.roa (raw, json)
Hash identifier:          M7/ERBVH5cibheazir1/TYv5Q3Zanqu8GdSf2U6O5Eg=
Subject key identifier:   6A:F9:28:44:37:0F:84:D8:82:C2:3E:43:47:18:FE:0C:14:45:C6:2E
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       7B
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/avkoRDcPhNiCwj5DRxj-DBRFxi4.roa
Signing time:             Fri 08 Dec 2023 12:08:31 +0000
ROA not before:           Fri 08 Dec 2023 12:08:31 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     131976
IP address blocks:        113.192.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Dec 2023 12:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Dec  8 12:08:31 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=6AF92844370F84D882C23E434718FE0C1445C62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:5e:26:2f:59:c8:b7:c9:38:9a:79:2f:09:
                    be:c8:77:c3:f9:f8:90:6a:99:e8:1d:52:c8:2a:7e:
                    eb:95:66:3b:9a:f2:d2:dd:13:30:8a:54:cb:89:bf:
                    ca:03:93:89:dd:1a:aa:37:c6:53:2c:5b:b3:72:3d:
                    08:e1:bd:e4:a7:53:76:13:ea:d5:a3:08:57:09:c7:
                    0a:18:11:e4:b4:ec:0c:1e:9c:5f:d2:b9:2e:89:87:
                    dd:d7:1a:0d:23:5c:c8:06:75:b3:71:f3:83:2f:69:
                    e6:1e:17:f4:ae:5b:80:12:c5:7d:2a:df:dc:57:1b:
                    37:ca:ce:b0:95:d8:20:50:12:3d:3e:d4:01:64:90:
                    eb:98:05:9d:97:e0:7c:a1:a3:54:c8:3b:30:67:b1:
                    f1:ea:fb:c4:29:12:9d:c6:03:82:80:e3:54:c0:a1:
                    58:37:2a:57:99:41:bb:4b:5e:a5:14:04:ef:33:9f:
                    4b:90:21:0e:18:e5:32:a0:55:8b:00:7c:fb:8b:71:
                    2f:87:d0:25:c9:f3:d1:bd:34:28:7e:34:2a:2a:50:
                    30:c5:78:7c:f5:43:ea:d0:a3:de:3b:bc:e0:92:85:
                    dd:44:44:62:23:03:df:5b:05:b5:58:a5:39:a2:8a:
                    d6:e1:75:64:13:cc:a9:69:6d:19:15:a5:d0:5f:50:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F9:28:44:37:0F:84:D8:82:C2:3E:43:47:18:FE:0C:14:45:C6:2E
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/avkoRDcPhNiCwj5DRxj-DBRFxi4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:a3:4f:4a:d0:65:9b:dc:ea:9e:42:9d:00:9a:40:20:cc:24:
         4d:c7:30:9e:ad:90:61:7d:d0:5f:f6:56:75:fe:82:2e:fe:91:
         da:a4:bf:8b:15:78:21:11:8d:32:06:61:08:01:52:14:34:ad:
         1f:20:6b:cf:f6:15:02:d8:73:3c:58:9c:32:40:06:a5:d2:05:
         1f:98:a5:c6:8d:c8:b8:10:ae:f7:b4:83:8e:c4:4c:74:42:73:
         ce:62:87:3d:1b:91:0c:51:19:f5:eb:09:80:39:40:ed:75:2f:
         3e:db:e3:be:72:7d:cd:12:b6:1e:26:1a:90:07:af:82:cf:6c:
         7e:32:84:56:59:f5:d1:45:25:53:ac:bc:81:0e:90:48:85:74:
         9f:3f:df:9d:4b:05:e6:ec:c6:f3:e1:00:dd:bf:7c:ef:95:de:
         bf:b1:f0:72:56:64:91:8f:54:09:95:a3:34:9f:4c:92:a0:bf:
         38:ce:2f:08:91:2c:99:62:47:ef:2b:1b:40:fa:eb:9d:c6:40:
         fe:ab:2b:65:90:29:57:26:5c:42:a6:c6:63:d1:f7:b0:bb:56:
         14:2c:4b:a9:85:bb:f2:69:6b:3a:c7:e5:6b:37:9f:3f:9a:cb:
         b8:0c:32:1e:af:74:03:aa:87:f9:33:fe:f1:25:ef:21:e0:2e:
         33:e7:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org