Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5SVIAHePLdlq88X_Kg_y-b6SaNg.roa
File:                     5SVIAHePLdlq88X_Kg_y-b6SaNg.roa (raw, json)
Hash identifier:          ka5x7lspRsRIzJgKL8DwBljhJ/ACGrJdF+DDjJ+6NAw=
Subject key identifier:   E5:25:48:00:77:8F:2D:D9:6A:F3:C5:FF:2A:0F:F2:F9:BE:92:68:D8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0289
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5SVIAHePLdlq88X_Kg_y-b6SaNg.roa
Signing time:             Tue 30 May 2023 16:36:25 +0000
ROA not before:           Tue 30 May 2023 16:36:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.188.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649 (0x289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:36:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E5254800778F2DD96AF3C5FF2A0FF2F9BE9268D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:f4:0d:dd:95:df:aa:dd:a0:f2:bf:e0:30:
                    d3:c7:6a:18:88:26:84:52:68:dc:0a:6c:aa:02:f3:
                    32:df:cb:f7:78:de:01:9f:43:64:fa:e0:3f:f5:fa:
                    8b:e8:8c:28:0a:03:cd:28:09:57:51:84:d7:e8:cc:
                    00:85:2e:0a:7c:69:94:4b:90:d7:0a:d4:39:86:5f:
                    2f:1c:59:9a:7d:f2:00:bf:9b:e4:f7:e1:31:1c:e9:
                    90:2a:36:b7:f1:47:1e:2a:bf:b7:92:ad:ad:95:b8:
                    a2:a5:61:7c:61:cf:34:ef:21:7d:b2:38:35:22:b1:
                    bc:0c:8c:64:da:14:7f:d1:ae:73:2f:34:f5:21:73:
                    2e:2b:48:c7:8c:81:7f:88:b8:d4:65:45:10:35:88:
                    8b:13:53:20:a7:2f:48:06:8a:1d:35:fb:28:b5:bc:
                    ff:85:66:67:b3:75:f4:ac:9e:f8:e4:12:dc:1a:a9:
                    db:e2:47:43:63:de:28:2d:6e:5a:e7:b0:20:66:77:
                    2b:b8:d9:59:8f:48:16:c9:88:cb:7b:d0:46:f1:42:
                    c6:4e:00:4f:53:3d:91:04:5c:b5:74:f2:0b:1d:80:
                    04:06:0a:6c:ff:3b:50:0b:9d:3a:68:c1:10:c9:8d:
                    f5:50:2d:d6:6d:b6:c4:b6:a6:e1:1e:e2:6b:48:ad:
                    a0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:25:48:00:77:8F:2D:D9:6A:F3:C5:FF:2A:0F:F2:F9:BE:92:68:D8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5SVIAHePLdlq88X_Kg_y-b6SaNg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:8f:d1:b0:a4:d1:b1:1e:1a:94:f9:c0:e7:c6:7c:a2:69:c4:
         92:fe:81:a3:68:af:ad:f4:59:d1:d1:fe:17:45:fc:ce:88:26:
         d6:90:a2:d2:95:60:9b:f6:2d:49:83:10:94:9c:36:62:63:f8:
         f3:53:d0:5b:4b:b1:fd:7c:32:71:33:72:d3:b3:f8:5e:ae:55:
         4a:59:86:a2:1a:82:5c:d7:13:ac:a2:1b:33:69:d8:ef:df:a6:
         01:dd:ed:23:41:25:d3:47:b9:b1:47:c6:aa:f6:b4:e0:24:f8:
         a0:87:eb:a4:e9:56:fd:2e:51:db:d4:6f:85:5b:34:b0:5c:40:
         c9:4b:81:b3:32:e9:07:c8:d5:89:f8:b6:09:8d:89:0a:bb:a7:
         e6:c5:ee:5d:fd:f9:0c:cd:1f:d3:27:62:79:e3:91:de:08:88:
         99:3f:6c:08:22:f6:6e:2e:75:07:5b:ac:83:ed:c5:67:05:98:
         84:ca:5e:e0:45:92:c3:34:fa:6a:fd:cb:ff:38:43:56:9d:f4:
         98:46:73:d6:29:59:0d:19:30:72:b0:8f:05:2b:70:15:43:6f:
         fd:c7:5b:18:fd:85:5d:6c:ea:3b:66:f6:71:fa:c3:1f:d0:c4:
         ea:8c:31:da:e4:c3:b3:54:be:22:71:29:b3:45:0d:57:94:97:
         e2:f9:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org