Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mIXhLS8VloPLZ-piV5iLXa3LFy8.roa
File:                     mIXhLS8VloPLZ-piV5iLXa3LFy8.roa (raw, json)
Hash identifier:          jA9e4hrmc5CdWE8eY5sO0NIMrx7yTiNkBmxLEZXsTo4=
Subject key identifier:   98:85:E1:2D:2F:15:96:83:CB:67:EA:62:57:98:8B:5D:AD:CB:17:2F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05A1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mIXhLS8VloPLZ-piV5iLXa3LFy8.roa
Signing time:             Thu 27 Jul 2023 17:00:15 +0000
ROA not before:           Thu 27 Jul 2023 17:00:15 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        220.159.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441 (0x5a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 17:00:15 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=9885E12D2F159683CB67EA6257988B5DADCB172F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:5e:83:9b:c2:18:52:c8:40:12:8e:e0:cd:
                    3c:c2:0f:94:d7:d1:0b:a6:7c:79:c0:25:e8:ed:5d:
                    2d:2c:02:34:a1:2b:0f:ca:35:a9:66:dd:b9:99:4d:
                    e8:75:7b:78:84:33:8f:9a:a6:60:58:ba:3b:11:8e:
                    ab:1a:63:b5:1e:f3:8c:be:1f:1d:ea:ea:5a:58:11:
                    90:28:bb:ed:c9:67:9a:d3:81:98:b6:7a:1f:3b:8f:
                    e6:21:fd:c2:e6:b6:18:6e:f7:39:37:df:a9:15:2e:
                    1e:a1:01:b2:dd:82:17:cc:83:54:fc:cc:97:bd:49:
                    9c:c2:90:f3:64:77:d4:fd:1f:19:7a:99:ae:97:20:
                    b2:c8:2e:3e:44:e7:fe:ee:0f:38:0a:bc:92:d0:04:
                    70:92:68:a2:2c:d1:32:1e:ff:a7:de:35:85:da:84:
                    9c:bd:ee:ae:f0:53:bd:f0:c7:5a:18:b7:10:d0:dd:
                    fd:8e:56:10:c1:e0:9d:83:c4:e6:ca:d9:42:f5:48:
                    a3:3f:70:ac:bb:2f:43:eb:2b:f7:bb:9c:ad:b1:ad:
                    af:45:2b:37:9e:e4:fb:67:cb:76:d2:0d:c7:7b:65:
                    a9:87:11:d9:8e:00:66:e6:02:13:f5:4f:d5:7e:a9:
                    31:76:c4:9b:25:4b:cc:76:fe:e1:59:63:9c:2f:1d:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:85:E1:2D:2F:15:96:83:CB:67:EA:62:57:98:8B:5D:AD:CB:17:2F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mIXhLS8VloPLZ-piV5iLXa3LFy8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:40:c3:d5:7d:4f:a7:56:4a:d9:b3:a4:ff:ab:13:7b:82:27:
         ca:7a:62:9e:e3:16:4f:15:66:39:2f:be:d9:1a:d5:7e:ff:6b:
         ad:04:d6:0f:9b:e3:72:7e:d1:22:4e:59:17:6f:94:a3:9d:0f:
         3b:e7:69:2d:c5:61:59:69:34:96:c8:1e:f0:bf:3b:28:80:1a:
         b1:13:1a:73:00:0b:b7:aa:bd:dc:a8:1a:73:a2:17:48:be:59:
         2d:69:22:a5:44:d5:c1:1e:91:b8:8a:64:b6:17:59:d9:f8:e9:
         9e:cb:1f:fe:28:21:0c:66:ea:8d:f8:eb:b1:63:eb:fa:34:4c:
         6d:fe:c1:d1:ef:1f:2b:74:bd:10:d9:0e:8f:a4:3e:66:5a:f6:
         71:af:b8:ce:f7:07:00:3d:82:a0:62:a1:24:d8:80:86:35:71:
         82:4d:05:01:d7:26:0f:c3:4b:e7:c5:27:0d:bb:ef:c6:62:95:
         03:c7:fd:50:24:92:4b:18:d6:61:3d:b2:83:0a:43:ec:9b:03:
         41:32:82:75:07:8d:18:5d:75:40:fe:19:ac:a4:79:6a:61:87:
         01:5d:42:c3:80:1d:d1:72:56:2e:70:57:4e:3d:11:fa:57:71:
         a4:1e:43:d0:6e:5c:b3:30:f0:ad:d7:f0:0d:74:2e:57:dc:f6:
         33:46:bd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:12:20 2024 by rpki-client on console-fra.rpki-client.org