Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30303/393wKdK6LgmTBl47L6vFXQzQYm0.roa
File:                     393wKdK6LgmTBl47L6vFXQzQYm0.roa (raw, json)
Hash identifier:          mWB9Lzp6Y1YXHWcO1jBWad+FQ0gUIQI5D+SW5e62He8=
Subject key identifier:   DF:DD:F0:29:D2:BA:2E:09:93:06:5E:3B:2F:AB:C5:5D:0C:D0:62:6D
Certificate issuer:       /CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
Certificate serial:       03
Authority key identifier: 66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/393wKdK6LgmTBl47L6vFXQzQYm0.roa
Signing time:             Sat 22 Jul 2023 09:15:42 +0000
ROA not before:           Sat 22 Jul 2023 09:15:42 +0000
ROA not after:            Sun 21 Jul 2024 08:56:38 +0000
asID:                     63771
IP address blocks:        2401:7640::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sat 22 Jul 2023 09:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
        Validity
            Not Before: Jul 22 09:15:42 2023 GMT
            Not After : Jul 21 08:56:38 2024 GMT
        Subject: CN=DFDDF029D2BA2E0993065E3B2FABC55D0CD0626D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:19:c2:42:cd:35:99:cc:72:e5:94:10:57:
                    a2:d8:19:ef:4c:a0:a9:83:44:49:a4:53:6e:07:68:
                    68:dd:94:b1:70:6a:d7:77:3a:eb:49:73:fb:22:a4:
                    d8:64:f6:b5:6e:c0:4b:85:8c:5a:10:50:e4:28:20:
                    c1:65:69:93:fc:30:10:d0:89:28:46:99:08:cc:b3:
                    7d:23:03:1e:85:17:f0:42:22:01:9e:3b:c0:af:f5:
                    3f:67:46:33:36:6f:2f:d7:1a:9e:cf:3a:62:10:46:
                    0e:f2:72:4e:f2:38:c0:c1:3b:ce:76:03:93:ee:68:
                    d6:bb:c0:fa:45:32:41:e6:73:94:a8:1f:87:fd:d0:
                    70:71:8b:f1:94:cb:8a:33:8b:e3:f1:cb:3d:c2:9b:
                    4d:4b:1b:6c:7c:2a:ba:2e:cc:0e:53:82:22:ae:aa:
                    62:94:9b:58:4e:93:b8:ee:c5:d2:18:9f:27:7b:a9:
                    52:de:a4:1f:74:1f:d6:81:87:31:f9:42:0b:f2:6f:
                    46:cf:50:3a:ef:e8:ef:da:d7:c2:6d:e0:53:cc:8a:
                    c9:e5:d5:1d:95:5b:ec:ff:f6:65:3c:73:37:f8:96:
                    7b:44:21:fc:f1:f5:90:36:2e:fe:96:f6:26:9f:08:
                    de:6f:58:89:38:3b:9b:24:07:8d:67:95:fb:c2:8f:
                    0e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DD:F0:29:D2:BA:2E:09:93:06:5E:3B:2F:AB:C5:5D:0C:D0:62:6D
            X509v3 Authority Key Identifier:
                keyid:66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/393wKdK6LgmTBl47L6vFXQzQYm0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7640::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:f2:e0:44:8a:54:05:f6:89:f2:78:d4:d7:7c:3b:bc:de:a5:
         ab:3c:66:6b:ea:47:d3:f4:aa:85:46:33:d3:32:0d:07:a6:22:
         ce:b4:58:2d:0e:2a:f4:59:92:1c:ee:85:55:65:9e:51:b5:cf:
         a8:d0:f5:0c:d6:52:b7:12:58:3d:d3:93:5f:72:fd:66:23:78:
         af:02:c6:1d:85:da:fb:ae:46:36:73:19:1d:53:59:d3:d3:b7:
         c5:db:1c:6e:3c:f6:ac:18:f0:14:a7:20:87:85:32:f5:cb:b9:
         57:08:18:5c:39:a9:93:d6:72:f9:42:d5:60:2c:11:a1:d2:09:
         a8:88:a7:40:5b:84:f6:a0:25:1c:ba:e5:a2:c5:ec:67:75:d8:
         c9:f9:36:02:85:40:d3:8d:84:96:d3:bc:b5:dd:49:40:72:d5:
         cd:0a:06:2c:72:06:28:8c:bd:79:2c:9c:bc:35:58:92:03:0a:
         10:95:c0:8c:d3:8d:38:2a:ac:27:d2:ee:15:53:64:6d:71:6f:
         6d:d9:6f:e7:00:6a:0e:15:cc:77:8c:71:b9:24:07:cf:aa:22:
         9f:74:bf:11:bd:27:e2:11:96:17:88:fc:2c:0e:9c:2b:83:56:
         16:78:9d:80:c8:b7:a2:29:49:c3:1e:c1:3b:4d:b4:cc:9d:67:
         ed:79:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org