Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DE_P_5X_B3_wVZQ9h7xVDamF0a8.roa
File:                     DE_P_5X_B3_wVZQ9h7xVDamF0a8.roa (raw, json)
Hash identifier:          DNFcclclZ4dDi/e1IG/fuQQs4RYPS3ayp3BlN1EL4OA=
Subject key identifier:   0C:4F:CF:FF:95:FF:07:7F:F0:55:94:3D:87:BC:55:0D:A9:85:D1:AF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01C9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DE_P_5X_B3_wVZQ9h7xVDamF0a8.roa
Signing time:             Wed 24 May 2023 16:40:31 +0000
ROA not before:           Wed 24 May 2023 16:40:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0C4FCFFF95FF077FF055943D87BC550DA985D1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:de:35:0e:b0:79:94:a7:38:e1:97:2e:c3:
                    29:a3:eb:8c:68:89:b9:8b:47:dd:3a:11:24:45:bb:
                    1e:60:a7:8f:c8:0b:70:15:fc:36:c1:d3:f2:da:92:
                    b1:63:66:69:75:c2:95:8b:b2:03:5a:ce:4a:ce:19:
                    18:9a:d2:87:5b:10:11:cd:04:83:77:1a:9e:15:dc:
                    ae:39:49:f7:d8:17:e4:a0:a4:ef:45:c0:d2:cd:6c:
                    b0:46:cb:ec:77:5f:f4:0d:d9:2a:dd:2d:28:90:74:
                    de:99:00:c8:ea:a7:4c:0c:d4:43:11:39:7e:b6:71:
                    f4:1c:61:fb:0d:64:9f:8d:ca:75:3e:f5:86:1f:4b:
                    16:31:89:88:6a:69:31:48:e7:e7:a9:f8:1b:28:f8:
                    eb:86:ee:20:cf:58:58:c4:0e:18:fb:5e:70:9c:1f:
                    59:09:8d:7f:25:55:c0:e2:f9:0c:c6:87:2c:f4:12:
                    55:35:7f:c2:57:4c:3b:dc:ea:72:06:04:29:e1:aa:
                    7e:e4:71:a4:4d:9b:c3:cf:98:b5:b3:b9:76:2e:fd:
                    4a:46:bb:dc:78:77:0e:a2:3c:da:9e:8f:ff:9c:99:
                    ff:13:1f:0e:f4:0e:4b:6f:a1:96:00:3a:86:94:29:
                    1e:41:cf:e3:4b:d1:69:1a:52:1b:78:33:1e:8b:44:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4F:CF:FF:95:FF:07:7F:F0:55:94:3D:87:BC:55:0D:A9:85:D1:AF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DE_P_5X_B3_wVZQ9h7xVDamF0a8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:ad:76:ff:82:9f:ae:bf:64:f3:9f:8e:a9:fe:df:79:9a:
         6a:f6:ce:7b:ed:98:ba:26:ca:9c:a3:99:b3:15:2d:9c:8e:bf:
         41:fd:8f:a5:67:1e:55:2c:4c:57:25:86:4b:6e:95:d0:69:c7:
         f8:c5:c8:02:9d:b3:83:c1:46:07:03:90:5b:df:1f:9a:6d:90:
         de:fa:b4:a5:c8:53:96:e4:0c:e6:23:20:a7:b8:5e:f3:0b:44:
         47:25:b3:9a:2b:ac:46:93:87:ef:8a:f0:4e:ed:7e:f9:95:8d:
         d2:16:ce:f3:25:33:e6:0e:ba:8c:4b:ed:20:18:7b:9b:0f:2b:
         2e:3c:a7:7a:26:a0:fa:48:8d:3b:ac:44:a5:51:9c:a4:aa:56:
         59:9e:ac:32:e1:0c:e0:36:c1:a9:4e:57:d5:0f:59:e1:21:da:
         40:19:b7:31:35:58:46:d7:a9:2b:db:4c:09:c9:c0:82:97:a8:
         df:6d:e9:f6:78:07:e4:82:04:c7:f0:e0:03:4d:99:62:41:9e:
         62:9a:4d:55:c1:e6:e0:de:1b:8f:e0:ab:c4:02:57:3e:79:bc:
         13:6e:43:01:f3:76:6b:3a:7e:d0:d4:70:04:5c:14:b6:0a:21:
         dc:1b:27:04:ae:cf:72:03:6e:91:80:b6:2a:63:eb:47:fe:82:
         e0:f0:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:32 2024 by rpki-client on console-fra.rpki-client.org