Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yFR-kea9mu-WLsXTNx4i6C-bn5M.roa
File:                     yFR-kea9mu-WLsXTNx4i6C-bn5M.roa (raw, json)
Hash identifier:          tWBWoUUImiXopi1/rpUT+aRymqVIMyez6jQfYOnsytM=
Subject key identifier:   C8:54:7E:91:E6:BD:9A:EF:96:2E:C5:D3:37:1E:22:E8:2F:9B:9F:93
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0492
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yFR-kea9mu-WLsXTNx4i6C-bn5M.roa
Signing time:             Thu 27 Jul 2023 16:46:05 +0000
ROA not before:           Thu 27 Jul 2023 16:46:05 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        211.14.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170 (0x492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:46:05 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=C8547E91E6BD9AEF962EC5D3371E22E82F9B9F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:77:0c:0f:5d:b0:56:53:25:02:fc:91:f3:7c:
                    03:ae:32:c8:97:c3:db:94:2c:bd:76:27:03:41:fe:
                    01:06:fb:8e:e6:6b:11:e1:3f:02:84:38:26:4a:98:
                    80:39:44:ab:85:11:1e:55:10:9c:06:a1:c0:12:bb:
                    9f:cb:f1:8a:73:f2:9a:5c:46:d0:76:a9:4e:c3:76:
                    34:37:31:ee:20:58:16:ea:5f:91:71:58:b3:a4:9b:
                    55:c0:cf:18:d7:41:f6:60:17:b4:52:41:4f:84:1e:
                    f8:da:7b:95:cc:aa:2a:f5:53:2a:66:de:d6:f0:83:
                    bb:00:29:c1:d4:93:fa:7d:ac:16:f5:30:28:5c:9b:
                    92:b7:84:ed:26:be:33:fd:1b:24:55:e3:f2:6b:9d:
                    61:75:0e:28:79:61:74:7b:7c:ce:df:b1:ae:d5:60:
                    0d:de:fd:00:19:90:52:a9:47:45:0c:1b:47:f3:f3:
                    3c:39:01:1e:c7:a8:ee:2f:3c:58:9f:5d:79:4c:68:
                    11:7e:2f:90:a0:18:49:ec:c2:e5:3b:68:5f:3a:be:
                    34:f6:f6:12:59:c5:8a:78:18:91:4a:1b:68:a8:51:
                    17:89:21:4e:87:bc:14:bf:67:6e:66:8e:bf:22:23:
                    d1:75:ca:47:ee:62:02:99:97:db:ca:eb:04:f1:3a:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:54:7E:91:E6:BD:9A:EF:96:2E:C5:D3:37:1E:22:E8:2F:9B:9F:93
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yFR-kea9mu-WLsXTNx4i6C-bn5M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:52:7c:aa:dd:7e:ab:36:f5:ce:69:f3:1c:17:fb:fb:5b:89:
         2d:5a:87:57:de:86:b4:32:16:fa:d9:4e:a5:8f:5c:f0:58:f4:
         08:9a:20:d8:a7:28:f1:94:ea:b6:06:f3:d8:bb:2a:ce:93:6a:
         6b:57:eb:a3:9d:06:86:39:2d:70:10:75:0d:ef:11:b8:55:5b:
         5d:b5:45:98:84:d6:6d:22:f1:b4:1b:9f:d0:73:fd:5c:91:83:
         23:9a:ef:3f:85:53:d0:1c:8b:55:f5:8d:95:76:ff:03:4a:11:
         4a:ee:8a:f7:05:1c:be:08:b9:e6:02:09:ad:f2:10:29:cb:d0:
         56:18:bb:31:67:57:94:98:41:b9:1b:b8:b9:b4:df:98:86:e3:
         34:d4:e9:a2:a1:48:98:f6:63:07:1a:21:82:fe:48:6d:77:08:
         e5:d9:6b:72:69:c7:49:7a:95:70:fe:bb:5c:a8:97:bb:6f:d0:
         a6:15:3e:a5:b1:45:11:92:11:55:57:c7:f7:c2:07:12:c8:80:
         01:83:a7:f7:fe:4f:0e:0e:6b:be:7f:90:67:94:68:eb:a5:03:
         a7:76:ac:87:eb:51:64:27:69:d1:d9:43:57:3c:e9:cf:8d:2f:
         b5:f4:6f:af:a3:f7:05:8b:c8:00:5d:2e:9b:18:5d:a0:38:f6:
         69:d0:04:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:41 2024 by rpki-client on console-ams.rpki-client.org