Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39054/QQWjvPKsv3R2j99vc2iX3m1pic0.roa
File:                     QQWjvPKsv3R2j99vc2iX3m1pic0.roa (raw, json)
Hash identifier:          JX5m+5anBbrQcvO04xgPuASvpEsocxrcMVI3fnBoE3Q=
Subject key identifier:   41:05:A3:BC:F2:AC:BF:74:76:8F:DF:6F:73:68:97:DE:6D:69:89:CD
Certificate issuer:       /CN=997690ACF79DC4F581EBE6D3522A0F6250B52043
Certificate serial:       2A
Authority key identifier: 99:76:90:AC:F7:9D:C4:F5:81:EB:E6:D3:52:2A:0F:62:50:B5:20:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/QQWjvPKsv3R2j99vc2iX3m1pic0.roa
Signing time:             Mon 01 May 2023 01:29:14 +0000
ROA not before:           Mon 01 May 2023 01:29:14 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     18131
IP address blocks:        2001:df4:1f80::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997690ACF79DC4F581EBE6D3522A0F6250B52043
        Validity
            Not Before: May  1 01:29:14 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=4105A3BCF2ACBF74768FDF6F736897DE6D6989CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9a:be:b2:f5:a1:b5:4f:24:8a:7e:47:ec:07:
                    0e:4c:d7:48:af:b9:00:59:56:99:c7:9a:a3:c3:2e:
                    08:74:de:ae:3e:c4:8e:10:43:b3:97:64:3b:8b:04:
                    74:66:08:78:97:f9:c2:4c:2b:f9:c5:ad:cb:3f:6c:
                    cd:66:ff:48:43:72:c6:b2:2c:ce:04:6b:3f:e4:2a:
                    c8:cd:54:f5:6e:5d:66:93:3c:20:b4:b0:e4:7b:6b:
                    4f:e5:e0:4c:ac:c4:6e:49:8a:d3:91:dc:de:74:b6:
                    98:98:12:44:e9:57:03:af:18:c9:df:00:82:03:4e:
                    0b:26:d3:9c:82:d4:2e:e9:d4:65:c8:0e:32:2c:49:
                    e6:f2:3f:61:54:5c:f2:17:2b:df:0d:15:3c:2d:21:
                    f7:bf:be:b3:0a:b6:d0:ff:7e:03:0c:c6:14:eb:b9:
                    5f:00:fb:b3:62:eb:77:48:39:99:57:c8:d9:46:ed:
                    c5:d2:36:64:4f:0e:2b:6c:1b:b3:4b:ec:60:75:7e:
                    f9:ae:76:16:b1:5f:11:0e:f8:eb:48:06:40:c9:54:
                    55:80:5f:88:79:96:ec:f2:ce:46:5c:9f:a2:21:c6:
                    c7:d1:5f:99:a8:76:19:59:0c:e3:8c:fd:b0:ab:7e:
                    3a:9b:21:14:ce:3c:0a:ca:bb:5b:95:11:42:74:0f:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:05:A3:BC:F2:AC:BF:74:76:8F:DF:6F:73:68:97:DE:6D:69:89:CD
            X509v3 Authority Key Identifier:
                keyid:99:76:90:AC:F7:9D:C4:F5:81:EB:E6:D3:52:2A:0F:62:50:B5:20:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/QQWjvPKsv3R2j99vc2iX3m1pic0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:1f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:d4:f9:93:14:0b:b3:91:01:aa:36:4c:6c:bf:0f:50:f3:a8:
         55:3d:6f:28:53:12:7f:50:9b:de:4b:29:a8:0e:bf:a9:3a:70:
         50:6e:63:5e:2e:8c:9d:a5:a7:82:b9:c0:30:6b:d2:e0:91:05:
         6e:e6:7e:58:cb:8a:90:d2:63:af:0c:d9:c9:bb:72:09:d8:ae:
         f4:dd:bf:60:07:83:db:b6:1c:10:ea:72:19:c7:e6:ac:62:22:
         3a:1b:d6:15:a3:f5:5f:b4:46:e3:e4:ef:b7:aa:c0:92:04:9c:
         eb:73:ed:e6:6c:fc:75:c5:35:e9:27:a3:f1:30:b0:1f:20:40:
         e3:f5:6a:33:86:5e:a3:6d:1b:08:e3:85:07:f6:73:d1:3e:b8:
         01:73:8d:68:52:71:db:12:4b:da:22:81:e4:98:7d:8a:83:87:
         02:d2:78:74:1c:be:92:a2:3f:05:1b:19:bc:e9:40:cd:70:e7:
         35:a2:42:9f:e6:da:50:2c:3c:38:d9:16:72:07:e0:79:0e:f0:
         07:50:0c:5b:16:c7:12:83:f3:1b:fb:17:f6:26:84:ee:5b:1e:
         b1:b4:8a:f5:35:d7:52:0c:9a:da:67:d1:91:4b:89:5a:16:6a:
         02:22:c1:68:56:80:f9:fd:76:81:a1:bb:56:10:cd:73:2e:8e:
         94:38:59:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org