Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HyS-10p_ihBfArb86MH10D_r4J8.roa
File:                     HyS-10p_ihBfArb86MH10D_r4J8.roa (raw, json)
Hash identifier:          vSAMiiF5wcD3CqZOeXzN8gV0+VwwZoE+4EB5Qzbtmdk=
Subject key identifier:   1F:24:BE:D7:4A:7F:8A:10:5F:02:B6:FC:E8:C1:F5:D0:3F:EB:E0:9F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       054F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HyS-10p_ihBfArb86MH10D_r4J8.roa
Signing time:             Thu 27 Jul 2023 16:56:12 +0000
ROA not before:           Thu 27 Jul 2023 16:56:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        27.230.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:56:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=1F24BED74A7F8A105F02B6FCE8C1F5D03FEBE09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:b6:76:76:66:26:fb:8f:6a:ce:2e:4f:4f:
                    96:2c:e2:3d:a2:fd:05:28:00:0d:f7:c4:68:c1:71:
                    a6:62:ad:d0:d8:76:6f:a0:e1:39:ed:42:45:8f:a0:
                    90:5c:87:b1:61:b9:f4:dd:78:e9:f6:77:3d:9e:66:
                    77:7a:bf:de:26:49:90:b6:0c:c4:66:85:2c:ec:b5:
                    c0:66:e0:fc:2b:cb:9c:65:96:23:13:6b:20:e6:d2:
                    11:1f:8c:64:5f:fc:11:84:88:a4:39:b2:b6:ed:cc:
                    78:24:37:85:ad:f7:12:7a:2b:7b:dd:0d:0b:58:ab:
                    d3:ac:63:8f:a7:7f:11:48:79:7c:0b:1f:07:8d:9f:
                    0d:f4:b6:67:e6:79:43:ed:85:c9:ed:3b:bb:71:49:
                    36:23:c0:f6:e5:d3:c9:d6:33:71:a4:9b:e6:60:8b:
                    0c:90:8f:31:61:f4:3d:f9:15:f2:c9:da:be:76:15:
                    89:82:af:3a:7e:e9:09:2d:0b:d7:fc:66:ea:6e:a1:
                    b1:45:f4:f8:a0:c1:7a:41:e1:22:7d:92:a2:5e:c3:
                    d7:7e:36:fb:1c:d2:f4:b1:bf:9c:78:79:e7:8c:2a:
                    60:e7:4b:d6:5c:fd:41:30:ff:d3:a8:00:b3:ad:10:
                    02:2b:72:e9:f3:6e:73:3c:23:ab:3c:d9:e5:5d:23:
                    19:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:24:BE:D7:4A:7F:8A:10:5F:02:B6:FC:E8:C1:F5:D0:3F:EB:E0:9F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HyS-10p_ihBfArb86MH10D_r4J8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:bb:67:71:b9:6b:fe:4b:97:69:6b:4a:8b:0f:d2:e6:c6:
         89:fe:fd:d1:29:5b:b6:b6:59:95:e0:2d:a5:2f:7c:51:f9:e6:
         fd:81:46:a4:20:05:37:98:ff:60:da:c9:10:c6:8e:18:f0:d5:
         11:ce:c0:6f:ac:37:34:3c:32:3b:e5:bc:87:f9:cd:29:88:17:
         6c:f4:5b:cf:73:ca:f6:9c:6e:23:c3:44:54:94:75:38:68:8f:
         6f:ad:3f:a3:42:87:f1:38:7d:17:48:ad:23:63:6d:98:3a:32:
         38:36:c6:b4:8a:6b:ec:ff:74:14:6d:06:f8:58:c0:4f:88:d2:
         8a:4d:f6:69:a0:39:0f:33:ed:af:e4:11:23:b7:66:82:6e:7f:
         15:29:63:4e:9f:e5:d3:d8:77:f0:0b:f4:fc:70:fb:02:7c:db:
         02:d0:47:d1:20:da:b2:93:58:64:e3:df:35:f4:0e:b9:1a:43:
         4a:b4:00:52:50:81:aa:bb:c5:54:ca:cb:26:99:1d:f0:c1:7d:
         bc:ec:3c:bf:ef:06:18:ba:88:76:fb:40:30:96:b0:53:50:6f:
         eb:7f:a5:ab:85:13:29:29:49:3c:59:b0:aa:5a:8f:d3:80:4b:
         77:8e:fd:8e:bc:eb:3b:b2:0a:c7:11:40:e3:f5:a8:8b:78:a8:
         47:fc:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:12:19 2024 by rpki-client on console-fra.rpki-client.org