Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/9eCAHVSQhn0yW93yLni9v0Zw7-o.roa
File:                     9eCAHVSQhn0yW93yLni9v0Zw7-o.roa (raw, json)
Hash identifier:          OlTi+tBAT6T8TpbFbw0uJQ/66CopAqCxCQrCSmtUDtQ=
Subject key identifier:   F5:E0:80:1D:54:90:86:7D:32:5B:DD:F2:2E:78:BD:BF:46:70:EF:EA
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       B8
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/9eCAHVSQhn0yW93yLni9v0Zw7-o.roa
Signing time:             Sat 01 Jul 2023 01:31:16 +0000
ROA not before:           Sat 01 Jul 2023 01:31:16 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        36.53.128.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:16 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=F5E0801D5490867D325BDDF22E78BDBF4670EFEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:72:68:92:bd:ed:86:30:f6:55:b8:de:55:
                    20:91:7e:a9:32:b4:27:3d:5c:41:8a:1f:ac:93:ef:
                    58:a8:3f:fa:02:4a:8c:a5:ea:8a:05:8c:a3:16:e9:
                    8a:58:87:9b:14:60:ea:0d:66:28:74:91:ca:4a:63:
                    f0:15:64:d5:16:ef:9c:de:ee:2b:3b:66:bb:2d:65:
                    94:6d:aa:78:11:f6:ac:18:ac:07:05:d1:b6:e7:f2:
                    4f:d3:02:f7:a1:89:2f:73:0a:ca:4e:a4:2d:51:12:
                    27:a3:be:9a:cf:7a:27:60:77:92:24:1c:df:71:14:
                    09:5b:3e:87:8f:6b:d5:1c:0c:00:04:06:52:dd:26:
                    22:d8:6f:3b:4c:1e:42:d1:c7:35:39:e0:7e:b8:69:
                    d0:3d:90:05:96:b0:74:ba:f6:23:51:d1:3c:51:9f:
                    92:45:70:44:ca:f2:f5:cf:ef:ec:4e:05:1c:1a:cc:
                    fe:2d:5d:f1:ad:3d:e4:1d:6e:9f:c1:b8:66:a0:d5:
                    17:8e:c6:9b:2b:cc:88:97:88:a0:a1:3c:ea:f7:d9:
                    dc:5c:0e:27:e0:b9:a9:bb:c5:0e:ab:23:c3:a2:ed:
                    c9:10:4e:81:3e:8f:9a:f0:0b:f2:22:fc:19:e7:31:
                    a7:da:11:ae:25:42:88:e3:26:6f:e6:de:0e:0e:35:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E0:80:1D:54:90:86:7D:32:5B:DD:F2:2E:78:BD:BF:46:70:EF:EA
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/9eCAHVSQhn0yW93yLni9v0Zw7-o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.53.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:a0:7a:dc:52:c0:70:7b:8f:95:05:9a:94:4b:5b:67:db:ea:
         76:f6:8c:c5:d4:80:71:b8:c8:3c:88:3a:df:51:a1:19:af:af:
         f4:03:70:47:b8:35:d5:d8:f6:e2:a8:84:ac:26:cb:28:e5:5a:
         c0:bb:41:41:f4:88:ba:e2:44:6b:4d:f7:7a:b5:d4:0b:26:7c:
         e1:01:0a:be:2d:92:4f:51:49:cc:bb:7d:46:91:82:74:62:29:
         96:5f:02:b2:e3:3a:e9:a1:38:ff:3b:e8:4a:fa:5b:c7:1e:1f:
         90:91:c4:8e:f3:81:03:77:bb:39:cc:95:94:7e:04:b1:45:1d:
         b8:27:45:43:80:c4:1d:a7:8b:fb:cb:09:b6:eb:5f:7d:08:6f:
         f7:b3:85:8c:ce:d0:24:19:bb:2d:49:80:f4:1f:cf:91:32:0f:
         e8:50:48:b0:d4:8c:a5:90:96:4d:38:3f:0b:c6:00:d0:33:fd:
         86:49:a9:87:33:62:94:a2:d4:c9:a2:eb:e7:05:51:16:f8:fb:
         ee:4d:a4:b7:f3:25:d7:eb:c8:cc:29:87:ff:7d:9b:97:af:1d:
         5c:c9:7d:00:7d:1d:56:e7:62:55:a4:e6:6d:03:a1:f0:dd:a1:
         b6:1d:a2:59:b1:1e:c9:a5:bc:68:3d:eb:1b:46:54:59:39:93:
         b7:c0:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org