Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/LPb9_N63JRiSDHmWCCSg5JmZH3M.roa
File:                     LPb9_N63JRiSDHmWCCSg5JmZH3M.roa (raw, json)
Hash identifier:          6BAr5tOPNgkWzgIiIDHYXB4Ja4MymxnIHWuAKR06bbo=
Subject key identifier:   2C:F6:FD:FC:DE:B7:25:18:92:0C:79:96:08:24:A0:E4:99:99:1F:73
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       B8
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/LPb9_N63JRiSDHmWCCSg5JmZH3M.roa
Signing time:             Thu 13 Apr 2023 09:52:59 +0000
ROA not before:           Thu 13 Apr 2023 09:52:59 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9607
IP address blocks:        203.141.52.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Apr 13 09:52:59 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=2CF6FDFCDEB72518920C79960824A0E499991F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d4:94:c5:76:d2:82:59:a6:29:f0:be:c1:36:
                    3e:b1:89:31:88:c5:20:e5:f0:ee:3f:d6:48:52:37:
                    59:83:39:e6:9e:4e:7a:d8:14:0f:74:88:cb:a1:c1:
                    23:21:2c:56:19:80:97:ff:70:3c:38:d8:4c:67:0a:
                    8e:f2:2f:c7:bd:95:cd:28:d3:6e:ce:6e:c5:8b:1a:
                    66:ce:05:70:4e:21:e0:2b:ed:20:3b:03:99:85:f6:
                    b3:4e:19:cd:e8:1d:0e:81:5e:5c:a8:be:f7:e9:34:
                    0f:84:5e:52:eb:9e:12:c2:c7:30:f9:2f:8e:04:12:
                    d2:d5:a7:a3:c9:5a:43:02:21:c0:76:33:6b:3f:20:
                    5b:a7:bb:c3:45:3e:e0:28:90:99:f1:7c:04:32:be:
                    7d:33:eb:7f:39:99:b3:27:e3:10:a4:1f:89:30:3e:
                    2a:68:ee:c8:d8:06:0c:e4:1f:85:b3:68:88:cb:ba:
                    d0:71:7d:7e:68:2c:bc:83:8b:b2:64:83:b8:26:7b:
                    c4:fa:b9:59:e1:6d:5e:53:40:a9:a6:44:3e:8e:2c:
                    7d:72:22:9b:b0:65:a0:64:40:19:99:df:1e:fb:8c:
                    19:d2:5f:ee:f9:3c:98:aa:99:2f:e9:8b:2a:f1:c3:
                    73:32:3b:73:2c:b0:d5:7f:d5:73:7e:46:8c:6c:a4:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F6:FD:FC:DE:B7:25:18:92:0C:79:96:08:24:A0:E4:99:99:1F:73
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/LPb9_N63JRiSDHmWCCSg5JmZH3M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:2f:96:10:9a:79:32:75:64:1b:a1:51:66:35:7f:ec:61:11:
         4f:21:38:85:58:24:33:98:23:db:30:16:97:5a:52:2b:e0:a1:
         b2:d2:89:f4:03:ab:64:7c:b7:cc:9a:18:a3:31:45:aa:d0:49:
         49:f2:f6:f3:cf:92:75:19:c9:cf:2e:a0:2f:20:c3:d6:83:5c:
         b8:fc:3b:0f:5e:4f:ce:37:c9:76:d5:d7:cf:4e:85:7e:32:31:
         ef:51:4d:4b:f2:5b:66:79:d5:5f:ba:ef:ee:9a:14:1d:cf:78:
         86:8d:04:9f:50:e2:90:03:5e:30:7c:13:66:ff:76:74:5b:b1:
         25:2f:f6:7d:79:54:41:a8:4f:f7:a2:2a:ef:63:09:64:fe:cf:
         77:af:07:3a:0c:c6:a0:d2:07:3d:7b:3c:e4:14:ab:b3:91:28:
         ec:54:25:5f:f2:2d:41:a1:77:29:88:d6:1a:b7:b6:b1:c2:3e:
         2d:d6:ab:45:35:35:40:1d:57:f9:94:89:c9:db:66:7b:c4:49:
         2a:a5:19:a2:c1:8b:01:c9:18:4c:97:4c:2e:54:ca:a2:fc:45:
         49:3d:7b:36:8c:d8:82:82:82:ef:5a:f8:22:1e:ec:74:43:df:
         7e:d9:19:e1:8b:60:30:5c:d1:4f:78:da:c9:5d:3f:04:70:7d:
         9d:14:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org