Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/EQ2j80Nrf6gMe-yA7rWDEBcLnVU.roa
File:                     EQ2j80Nrf6gMe-yA7rWDEBcLnVU.roa (raw, json)
Hash identifier:          xsP8m773OpAEHTdyViYNgoQTuzmoJH6azfgrlL5kfZY=
Subject key identifier:   11:0D:A3:F3:43:6B:7F:A8:0C:7B:EC:80:EE:B5:83:10:17:0B:9D:55
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       B0
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/EQ2j80Nrf6gMe-yA7rWDEBcLnVU.roa
Signing time:             Sat 01 Jul 2023 01:31:13 +0000
ROA not before:           Sat 01 Jul 2023 01:31:13 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        110.44.128.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:13 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=110DA3F3436B7FA80C7BEC80EEB58310170B9D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0d:2f:7b:43:b6:d5:81:c8:0b:cd:21:c3:d3:
                    75:85:28:3c:09:8c:d9:20:8b:cb:ba:36:b7:5b:09:
                    42:ca:d3:85:4f:13:7d:98:39:a5:bb:44:c4:f0:bf:
                    76:1d:ee:1a:8b:f3:2b:88:03:0a:08:74:fc:4a:55:
                    65:31:cc:54:02:94:26:2e:e2:ec:41:9d:a0:1a:61:
                    5e:fb:cc:d1:51:cd:f8:e7:51:db:fb:01:bc:e6:bd:
                    c8:42:92:12:24:06:85:eb:63:1c:ec:80:34:d1:6f:
                    a4:1b:bb:06:78:f8:05:fd:18:eb:b8:82:cc:57:30:
                    08:56:c4:48:17:6a:2b:c3:1c:65:86:dd:39:2e:cd:
                    e6:66:d5:f0:5b:00:bb:57:47:b6:3d:84:2c:49:22:
                    a0:85:02:4a:77:7d:de:9d:64:ca:41:2c:09:4b:ac:
                    59:52:5c:b5:e2:12:0c:71:f9:ed:ab:1b:38:90:ad:
                    2b:8a:59:13:8e:10:1b:65:cd:39:fe:12:c5:b6:8c:
                    c5:28:c8:66:d9:e1:d7:16:43:2f:e9:5a:fb:e0:65:
                    14:32:11:1e:5a:a3:a7:32:48:1c:4a:5a:3c:42:80:
                    c1:21:2b:ef:bb:05:91:1b:bf:cf:d8:70:51:3b:86:
                    4f:57:58:2c:99:c2:c0:4a:6c:4e:ae:8a:5c:02:ac:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0D:A3:F3:43:6B:7F:A8:0C:7B:EC:80:EE:B5:83:10:17:0B:9D:55
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/EQ2j80Nrf6gMe-yA7rWDEBcLnVU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:09:34:cc:36:1d:5c:7a:8b:ec:4f:19:9f:ad:c0:f7:0e:e9:
         d2:fa:b5:79:fa:49:67:76:30:bd:d0:69:99:34:2d:9c:61:47:
         95:48:85:c3:c3:f0:dc:dd:c3:57:9b:a8:a8:30:6a:91:73:44:
         da:bd:95:d8:89:8d:75:a3:e1:7b:6a:64:f2:e1:85:4e:f2:c4:
         b5:58:83:e4:95:38:80:ef:d4:30:13:c8:ad:f0:6b:24:65:38:
         ee:9c:1a:a0:27:4f:c4:41:af:45:20:cd:86:d1:ea:64:64:78:
         d2:0a:09:dc:d3:04:91:c1:38:0d:6a:75:ef:19:60:71:3a:0d:
         f3:77:3a:45:b0:19:e0:1c:1b:d4:99:1c:27:7c:45:2f:63:0d:
         ea:72:68:8c:79:d9:f7:a3:46:db:76:ed:b9:f5:d1:97:e6:4d:
         b2:dd:31:95:37:f0:64:c6:b3:2f:31:1a:7d:b5:60:a9:1b:7f:
         93:cb:d1:5e:df:d4:e0:5a:ee:3e:87:b5:6c:c0:5a:23:8e:04:
         59:de:bd:dd:07:0d:5d:c2:ef:51:63:d5:aa:26:2f:b1:64:58:
         d4:9e:0e:f5:b7:b9:19:a6:9b:83:44:94:f8:fd:03:10:ac:cf:
         5c:5b:57:5d:b9:58:f9:3f:f2:61:dd:74:1e:5f:c8:8e:b3:41:
         07:8a:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org