Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gvM62EvPqHDYetTAnq9beDEqIww.roa
File:                     gvM62EvPqHDYetTAnq9beDEqIww.roa (raw, json)
Hash identifier:          G0wvIrAUAZP6hcql1OgalwtFFAuZliE/yt0qWVZUzBQ=
Subject key identifier:   82:F3:3A:D8:4B:CF:A8:70:D8:7A:D4:C0:9E:AF:5B:78:31:2A:23:0C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01B1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gvM62EvPqHDYetTAnq9beDEqIww.roa
Signing time:             Wed 24 May 2023 16:37:05 +0000
ROA not before:           Wed 24 May 2023 16:37:05 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:37:05 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=82F33AD84BCFA870D87AD4C09EAF5B78312A230C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3f:dd:4c:8c:64:b0:13:0b:63:06:23:68:66:
                    4d:c5:e3:8d:eb:c6:ca:f4:86:77:01:13:11:ed:0c:
                    e1:4d:f0:cb:2f:68:ba:4b:77:15:3b:00:85:5e:d1:
                    44:99:97:68:b4:dc:fe:2b:37:1c:3f:40:bf:f7:5d:
                    7b:b6:04:cb:dc:6a:8a:8d:b9:a8:7b:76:41:11:21:
                    5d:52:82:28:67:db:34:00:be:a9:6d:eb:a7:1c:39:
                    f1:9c:5f:23:34:c9:97:0e:a4:4c:03:22:3c:4c:8e:
                    79:b0:65:43:58:fe:74:4a:e4:3f:f8:5f:b4:e8:c0:
                    c6:44:23:aa:de:50:d5:9c:57:55:c3:53:ab:d6:42:
                    7a:50:5b:fd:0a:d6:90:dd:c3:5a:38:e7:95:7b:a3:
                    bd:ab:d5:88:09:c7:af:a5:b6:65:77:b2:7b:04:d0:
                    b1:d7:76:07:a6:58:11:ba:43:36:19:25:31:4a:58:
                    b8:11:ec:7b:d0:db:b0:77:e0:3c:62:bd:b1:d3:02:
                    1d:80:e4:db:74:73:69:c4:2b:0d:01:6e:3b:94:6c:
                    a2:89:4e:9f:9f:4c:7e:32:eb:9e:5c:59:eb:58:06:
                    87:35:cd:87:02:7f:ad:c8:d9:f8:5a:4f:80:83:63:
                    0d:db:2d:0e:ef:83:53:bb:d5:81:44:48:6d:22:bf:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F3:3A:D8:4B:CF:A8:70:D8:7A:D4:C0:9E:AF:5B:78:31:2A:23:0C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gvM62EvPqHDYetTAnq9beDEqIww.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:92:6c:ee:3c:46:b1:ad:8f:03:87:41:74:0b:c2:35:fe:10:
         b1:b0:5b:e6:c5:d1:98:2b:5b:f9:6d:38:c8:47:b6:9d:18:f8:
         5f:b4:d4:75:eb:e7:ae:3c:18:fa:8e:f7:f7:77:0b:21:e6:d6:
         78:53:cd:30:fb:a0:61:c9:24:db:9c:b2:eb:7d:6d:eb:f7:39:
         41:c0:96:8a:7b:04:db:cd:90:4a:1a:de:09:54:fb:c1:5c:7d:
         91:1c:ff:b2:59:33:87:20:78:1a:e3:47:ab:40:7f:da:27:b5:
         1e:ce:f5:4f:23:4e:4f:fd:48:74:de:79:b4:2d:f0:05:45:28:
         71:04:1e:4a:a4:00:03:41:09:0e:e1:9b:94:d1:d5:d2:1a:4f:
         94:85:9c:99:fa:d6:cb:f9:60:35:b7:66:84:83:b4:7c:2d:99:
         0d:bf:55:04:15:b5:6e:4f:e3:08:8c:a9:ff:a0:ea:bc:68:c6:
         91:93:8e:ff:7b:5f:cb:1e:bd:f0:fc:0e:b0:06:8c:db:9e:8a:
         d8:f9:1d:26:2f:90:e1:e1:0d:78:ca:48:4a:8f:3c:f7:76:11:
         04:4e:a0:f7:28:4d:03:41:3b:38:6d:2c:aa:7a:52:ad:0e:e7:
         ce:55:8b:c0:ef:d1:c3:f3:92:55:e7:56:12:dd:29:77:6c:14:
         65:2c:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org