Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EP6t4YfSva_uqoW0xt6xT1aUH28.roa
File:                     EP6t4YfSva_uqoW0xt6xT1aUH28.roa (raw, json)
Hash identifier:          eVKWKtjBJbZ+js9PJcXm9jdxJwLXAlvclnPJ9KpkSZI=
Subject key identifier:   10:FE:AD:E1:87:D2:BD:AF:EE:AA:85:B4:C6:DE:B1:4F:56:94:1F:6F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0387
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EP6t4YfSva_uqoW0xt6xT1aUH28.roa
Signing time:             Thu 01 Jun 2023 17:57:37 +0000
ROA not before:           Thu 01 Jun 2023 17:57:37 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        220.159.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:37 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=10FEADE187D2BDAFEEAA85B4C6DEB14F56941F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1c:2a:67:bc:0e:d9:09:77:ca:74:3b:6c:5e:
                    ff:cd:5c:0c:31:29:87:57:78:e1:c1:e6:fa:8e:af:
                    9d:5b:e2:84:c5:77:3d:c6:cb:a7:dd:45:bb:6f:75:
                    8f:a7:ac:99:9f:a6:3a:75:c3:94:52:02:37:d4:44:
                    a3:8e:10:f1:91:94:9d:a8:01:47:35:51:95:35:76:
                    4f:32:d6:2c:02:3a:19:00:e9:61:44:37:c1:c5:77:
                    66:3a:1c:a5:40:e2:88:42:54:56:d8:ce:a4:87:01:
                    5d:6e:b3:5b:95:1c:c4:37:52:e8:17:f4:7d:4e:b0:
                    08:e9:24:1a:e5:b0:19:60:aa:92:95:93:26:c5:ff:
                    2e:ed:6d:99:0d:f6:62:1c:1e:45:71:41:16:57:8f:
                    f1:50:12:92:62:30:d5:eb:27:05:dd:23:5a:02:b6:
                    7e:b5:79:22:4f:cd:03:ee:9a:f7:da:79:fe:b6:66:
                    1d:d5:6c:20:a6:c8:f5:cc:6f:a5:37:a6:b5:40:58:
                    05:49:a1:1e:6d:b7:5f:b0:af:d5:ba:04:31:7d:09:
                    4b:dc:4e:06:af:73:26:21:9a:1b:66:02:03:db:be:
                    e4:bc:79:d4:41:75:f3:29:6a:d7:8d:f1:ec:34:7f:
                    2e:ea:2e:4e:23:0f:d4:ae:47:cb:aa:20:4f:d2:aa:
                    b9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FE:AD:E1:87:D2:BD:AF:EE:AA:85:B4:C6:DE:B1:4F:56:94:1F:6F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EP6t4YfSva_uqoW0xt6xT1aUH28.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a0:56:f7:d8:da:cf:f6:db:9b:ba:7a:92:ba:74:a8:b4:ca:
         26:c8:19:9d:50:34:e1:e5:f1:cd:22:6c:95:86:00:25:f3:6f:
         15:ec:b4:b1:93:66:cf:f1:f1:33:98:06:90:05:00:58:bc:a4:
         d7:ce:dd:78:b1:5e:4b:8e:b0:9d:fe:b6:6a:a6:0b:7c:93:ed:
         9a:66:54:85:8e:5d:7a:42:78:0e:73:60:64:6b:97:1d:29:98:
         78:da:c8:bc:5d:d0:bc:75:32:bd:11:37:6b:81:e0:8d:fc:f6:
         06:ce:06:65:27:c5:9a:21:62:72:c8:f3:1e:a6:61:2f:29:b1:
         3a:ab:a7:0d:10:b6:f3:40:43:b3:20:e5:e9:10:d7:f3:ce:f4:
         03:33:0f:ab:37:ff:87:13:40:34:a7:a1:cf:05:78:51:a4:a3:
         15:9a:80:40:fc:f6:5e:ce:e7:f1:b4:d0:88:54:99:ed:16:55:
         e2:19:06:48:95:77:03:79:fa:46:98:ea:c3:a5:14:ba:f7:5a:
         68:d5:ac:66:a0:43:bb:bd:95:aa:ce:51:71:07:43:86:40:ff:
         2a:05:ae:79:3c:ca:5f:a0:45:7d:48:f0:51:53:8b:42:24:ee:
         55:9d:79:d1:ab:9b:24:4a:b5:04:9a:82:8e:95:5b:aa:3f:c5:
         0b:76:23:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org