Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/NJC1w7fH6lPr3Xw4Oh7ylYaydqk.roa
File:                     NJC1w7fH6lPr3Xw4Oh7ylYaydqk.roa (raw, json)
Hash identifier:          nsOK+umNm5g9hF/IztXY8uyiz2pz6GGTR5bgkLYRS7w=
Subject key identifier:   34:90:B5:C3:B7:C7:EA:53:EB:DD:7C:38:3A:1E:F2:95:86:B2:76:A9
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       C3
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/NJC1w7fH6lPr3Xw4Oh7ylYaydqk.roa
Signing time:             Sat 01 Jul 2023 01:31:21 +0000
ROA not before:           Sat 01 Jul 2023 01:31:21 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        110.232.160.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:21 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=3490B5C3B7C7EA53EBDD7C383A1EF29586B276A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:66:8a:da:89:e3:a0:94:2c:ee:33:01:97:
                    2b:b0:b5:84:04:c9:49:fb:b6:a2:f2:77:40:59:86:
                    72:0e:d9:e6:f0:94:e6:c2:22:cc:5c:6e:94:99:36:
                    cf:d1:fa:b3:37:ef:2d:5a:ee:7c:b1:39:de:6c:27:
                    9e:dc:ea:6c:08:f5:95:05:fb:64:43:21:85:aa:56:
                    aa:4f:2f:1f:8e:3f:e9:b6:4a:b4:65:e8:a4:3e:08:
                    00:cd:2b:43:a4:26:c5:ed:1a:f8:c0:2b:fc:ad:b1:
                    c4:ef:a3:b5:a5:88:c8:9e:ea:28:65:46:31:d7:de:
                    4a:df:c5:7d:4a:26:93:3b:f2:e8:dc:7a:4a:12:8c:
                    6e:94:37:6e:78:09:81:af:33:f3:88:f9:11:0e:03:
                    d0:a6:86:4b:76:37:0f:87:c5:5d:35:6c:4a:ca:40:
                    2a:45:52:07:ad:f2:a9:3f:81:00:dc:bb:91:0d:dd:
                    1c:94:f6:da:34:29:0d:17:c5:1b:7f:43:14:10:4b:
                    47:ed:bd:9b:ef:3b:2e:7b:26:ae:5f:8d:77:ce:29:
                    2e:47:ac:13:f7:8f:4b:33:88:98:61:94:5e:66:02:
                    a7:9c:5b:29:3c:b8:df:98:61:c5:31:9c:8e:a2:df:
                    7e:80:bf:45:47:f7:69:d8:7b:83:29:86:dd:47:85:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:90:B5:C3:B7:C7:EA:53:EB:DD:7C:38:3A:1E:F2:95:86:B2:76:A9
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/NJC1w7fH6lPr3Xw4Oh7ylYaydqk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:d8:f8:27:36:62:7b:9e:cf:12:19:21:bc:f8:30:78:fd:16:
         3c:b7:78:d2:5f:c0:00:fc:91:fd:5d:dc:91:5d:5e:4e:02:cd:
         32:16:a1:3d:7f:3e:81:c6:f2:76:28:7a:fd:15:56:ab:b0:a3:
         b1:17:a6:11:f5:96:dc:37:5f:28:79:fe:5f:9f:5c:13:af:39:
         58:09:11:d8:97:dd:dc:d0:35:68:9f:42:97:49:53:23:de:ea:
         57:43:9c:4f:e8:87:11:f5:3a:33:23:9e:e9:50:c2:4c:ef:7b:
         83:3a:6b:09:79:fc:e2:5e:85:71:08:07:7e:73:a6:17:e9:6d:
         8b:4e:91:bc:d2:27:a8:a0:00:d6:17:cb:54:25:e9:41:95:28:
         49:1c:24:4e:10:06:8a:5d:0d:1c:2d:85:60:2d:86:99:6e:c5:
         cf:a2:39:77:85:c7:34:8e:d7:87:37:17:23:9d:61:c7:9c:31:
         cf:71:c8:5a:1a:94:f5:ef:83:a1:c4:0d:eb:0b:31:47:87:ec:
         f3:32:e4:f3:65:eb:07:df:dc:99:6d:9f:02:ac:1a:eb:98:92:
         27:38:ca:dd:77:7f:b3:8a:a9:0b:2e:c8:2b:ce:11:da:84:3a:
         e7:77:17:43:26:20:f8:08:38:ef:c4:4f:84:dc:14:6c:f0:c8:
         d1:6c:7b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org