Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/UIT3rlXeTFPyORULRb8AXiUvDe0.roa
File:                     UIT3rlXeTFPyORULRb8AXiUvDe0.roa (raw, json)
Hash identifier:          O6pWoUqWpOwwfiLzlf4TeNOsAZJIar2gCY0EgZPaNhw=
Subject key identifier:   50:84:F7:AE:55:DE:4C:53:F2:39:15:0B:45:BF:00:5E:25:2F:0D:ED
Certificate issuer:       /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial:       45
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/UIT3rlXeTFPyORULRb8AXiUvDe0.roa
Signing time:             Thu 13 Apr 2023 09:54:23 +0000
ROA not before:           Thu 13 Apr 2023 09:54:23 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        2001:e44::/31 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
        Validity
            Not Before: Apr 13 09:54:23 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=5084F7AE55DE4C53F239150B45BF005E252F0DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:b0:f8:ca:8e:68:99:25:d6:25:aa:3f:e2:
                    ab:86:72:6b:bf:d5:5d:e3:f6:8e:ec:ac:8e:c8:b0:
                    40:5a:4b:a7:66:20:bd:e8:3e:ca:f3:74:00:8e:0a:
                    78:04:c1:3f:02:11:d9:f8:9c:55:29:c8:3d:5d:30:
                    95:c8:11:d7:28:7c:22:26:7e:63:b0:2e:02:b3:26:
                    43:58:9d:74:fe:5b:78:52:0a:44:ed:6f:43:7a:7c:
                    39:68:fd:3e:c8:51:59:2d:38:54:a8:0b:59:5c:f8:
                    a2:8b:c9:c5:89:f0:c6:89:33:da:5d:05:42:da:bf:
                    1d:c6:f3:87:0f:02:77:0a:83:8b:0e:8e:fd:da:83:
                    98:73:fe:7a:6b:21:f5:d6:53:1e:83:30:00:9e:72:
                    c5:9d:6c:2f:29:b1:ce:94:11:5f:fc:6f:2d:48:f8:
                    ee:b7:6c:13:f2:ea:37:90:20:31:d0:73:fe:fc:d9:
                    63:a2:50:b6:50:33:89:8a:ec:50:00:3d:c4:1f:6f:
                    c3:91:35:1f:ca:99:db:f1:c6:5a:d0:63:76:51:f8:
                    f3:b1:67:21:c9:e9:03:7c:0f:aa:fe:85:ad:8b:2d:
                    ac:95:8b:6f:48:dd:43:e8:fc:ee:33:f1:4a:bb:c2:
                    48:40:e6:f0:b8:d3:a3:70:17:db:e1:5c:82:60:c0:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:84:F7:AE:55:DE:4C:53:F2:39:15:0B:45:BF:00:5E:25:2F:0D:ED
            X509v3 Authority Key Identifier:
                keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/UIT3rlXeTFPyORULRb8AXiUvDe0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e44::/31

    Signature Algorithm: sha256WithRSAEncryption
         4e:13:dd:18:1c:d8:15:8e:57:ba:24:89:c7:a0:9d:f5:6d:17:
         bc:4c:7a:e7:21:e9:57:9d:6e:d5:81:0b:26:31:cd:c7:7f:5e:
         91:98:65:ee:ab:84:c1:de:e3:37:14:cf:71:77:43:a2:aa:78:
         91:2d:eb:16:c3:5f:fd:a1:08:7f:f4:b1:d4:67:7d:c6:da:27:
         8e:96:36:e9:05:46:a7:a5:0c:28:18:53:a5:ff:00:a8:20:26:
         81:3a:8b:9c:b2:45:7e:34:01:74:5e:f3:5f:61:fd:a6:f6:aa:
         ed:d9:b9:12:18:b3:ee:98:70:fa:78:f2:7f:25:f6:6c:f1:99:
         4e:1b:a6:d3:f2:d4:59:45:b8:62:66:ae:68:bc:17:25:1f:d9:
         62:80:39:a3:50:00:d3:93:75:a0:70:03:b8:d1:0a:75:c4:30:
         52:5b:45:f5:ba:78:96:d2:14:22:31:5b:6a:9e:ce:26:84:91:
         14:5d:2f:fc:ba:7f:19:a7:2d:23:e5:f0:44:44:7e:ca:c1:c9:
         72:82:d0:5a:be:a3:d0:9b:4e:16:3b:05:b3:62:a8:c4:6b:47:
         e6:a0:aa:31:92:e0:40:ed:fd:df:8b:c6:4c:a3:43:69:79:24:
         b8:36:8a:44:26:fe:be:75:d6:44:e8:31:b0:ef:fc:61:02:d1:
         26:a0:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org