Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7a4JkLeFRUR5Agsz0Sqs5LLatCY.roa
File:                     7a4JkLeFRUR5Agsz0Sqs5LLatCY.roa (raw, json)
Hash identifier:          QvHIbhdpRBYjBfFOMnbAOb8gTbUmrgwlhp3tHLJ00pQ=
Subject key identifier:   ED:AE:09:90:B7:85:45:44:79:02:0B:33:D1:2A:AC:E4:B2:DA:B4:26
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       20
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7a4JkLeFRUR5Agsz0Sqs5LLatCY.roa
Signing time:             Tue 30 May 2023 16:36:30 +0000
ROA not before:           Tue 30 May 2023 16:36:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        146.160.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: May 30 16:36:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EDAE0990B785454479020B33D12AACE4B2DAB426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:9c:65:b1:ce:b2:54:a3:be:37:51:81:7a:
                    eb:d5:1a:24:01:c0:bc:aa:67:30:f1:b1:96:e5:74:
                    6c:bf:c7:27:b8:5a:31:61:33:35:b4:ff:d7:50:c2:
                    b3:a3:67:06:c1:2c:76:40:13:d9:f8:3c:b5:c2:41:
                    c2:5e:81:cc:6d:c8:e3:0a:f4:ea:1b:41:f9:94:3a:
                    bd:7f:59:9c:02:d0:44:ce:e7:29:67:51:35:c6:e5:
                    06:66:9d:a3:28:f0:c0:86:c0:ec:88:54:09:08:d4:
                    de:ba:84:f2:13:83:10:5e:99:8f:11:ed:59:ed:b9:
                    8d:ca:8c:f0:30:a5:88:e1:73:e3:a0:c5:b3:85:78:
                    7e:7d:5d:a3:ac:40:ad:9b:2d:cc:36:a8:dd:a8:76:
                    8d:4a:84:bd:48:a8:44:62:54:7a:45:65:c7:5a:12:
                    8a:7f:5a:77:1a:cb:ff:b8:00:62:aa:7c:b3:d3:2a:
                    76:14:3b:57:06:b9:9a:92:b7:e7:45:29:53:04:79:
                    38:0c:00:6c:b4:bb:33:4b:5f:42:f6:53:4a:f9:8e:
                    4e:9a:b4:3a:86:79:db:79:65:11:a4:32:87:55:58:
                    4b:c7:a1:31:62:b5:49:92:48:c6:39:7a:34:e0:22:
                    39:d1:81:86:be:75:18:0d:e2:04:1b:ce:dc:65:69:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AE:09:90:B7:85:45:44:79:02:0B:33:D1:2A:AC:E4:B2:DA:B4:26
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7a4JkLeFRUR5Agsz0Sqs5LLatCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:c2:74:f4:e0:ce:93:f4:0d:5c:10:84:84:c9:7a:82:fa:b2:
         84:e3:1d:94:19:3b:7d:67:21:71:08:00:93:da:a3:91:57:30:
         b9:ea:a0:af:8f:b5:11:f9:bc:b2:7f:4b:f7:79:96:a1:65:80:
         93:7e:af:d4:18:b4:3a:e5:ae:d4:da:7c:c8:4f:c4:86:ae:38:
         d9:d7:82:0a:93:0e:c6:2d:ea:04:6a:ff:d7:e6:28:59:ac:28:
         f8:a4:ed:3e:c9:10:b3:bc:bf:45:48:53:77:00:6a:7a:85:5f:
         5a:b8:50:6c:96:a9:6c:4e:90:3f:fd:85:f0:33:c6:83:af:2b:
         b7:a2:1b:93:9a:95:ed:01:f2:00:81:36:22:b6:21:43:3c:c5:
         e2:74:29:e9:91:d8:3f:f2:3d:23:06:06:db:88:e0:ce:7f:c1:
         a4:73:56:e5:18:70:ef:c2:57:e9:0a:f1:03:89:6c:76:84:6e:
         61:fe:13:d9:34:3a:0e:cf:c2:a3:24:fb:7b:cd:b2:30:da:61:
         e4:80:7e:01:91:7c:dc:a5:7b:49:04:b6:72:25:cf:f1:52:ab:
         4e:b6:a1:a6:67:27:2e:bb:69:1d:e5:ce:34:be:66:73:1b:c8:
         90:df:eb:dd:80:79:14:95:a0:1b:a2:a9:ea:ef:36:b7:c7:69:
         ab:2f:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org