Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/ll0u2RRje95JMc70HmTRT1fPHWI.roa
File:                     ll0u2RRje95JMc70HmTRT1fPHWI.roa (raw, json)
Hash identifier:          jedTpL/uBQVmjh50hoR/qh/i1sfi6MFVJz2/nmLbM3Q=
Subject key identifier:   96:5D:2E:D9:14:63:7B:DE:49:31:CE:F4:1E:64:D1:4F:57:CF:1D:62
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       2E
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/ll0u2RRje95JMc70HmTRT1fPHWI.roa
Signing time:             Wed 01 Feb 2023 01:30:28 +0000
ROA not before:           Wed 01 Feb 2023 01:30:28 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     17676
IP address blocks:        61.114.240.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb  1 01:30:28 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=965D2ED914637BDE4931CEF41E64D14F57CF1D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c6:25:13:d7:3d:f5:90:ed:49:0e:81:a6:6b:
                    82:68:db:05:49:b7:11:d0:66:53:6b:cc:56:68:6d:
                    74:13:4d:26:cd:85:61:15:38:01:52:1f:43:a0:97:
                    61:06:fc:21:d0:da:bb:1f:66:ec:b4:73:a7:45:c2:
                    aa:c7:3f:88:40:85:64:eb:6a:cc:9e:b0:26:df:08:
                    b3:47:81:61:77:30:d4:3c:9e:e9:a6:2a:8c:2d:5a:
                    df:15:93:ff:ab:18:97:aa:b6:21:8d:0a:b6:eb:f6:
                    6a:74:ea:a4:f6:2b:94:1c:d6:a0:17:64:20:13:c4:
                    8c:a4:d1:3b:49:a8:33:8a:3a:d1:ff:f6:ec:49:08:
                    4d:94:02:3d:73:7d:c2:85:78:a2:bb:7e:a0:25:ed:
                    c3:e0:52:20:81:b3:7b:9d:6a:8e:9f:ee:1e:5a:03:
                    3b:31:37:6f:61:70:71:64:1c:13:db:1d:15:4e:4b:
                    fe:37:3a:b2:01:df:eb:97:94:0a:06:e4:6d:18:d5:
                    2e:60:06:bf:2e:b8:cd:be:8c:06:71:a5:c1:cf:e4:
                    a0:39:70:4f:f2:0a:41:01:c3:97:9a:32:4a:6f:45:
                    9c:7d:2e:28:ca:95:5f:86:c3:1b:60:70:65:54:23:
                    b6:00:75:5f:f7:ef:6b:ab:43:6c:f6:15:d0:7e:ac:
                    83:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5D:2E:D9:14:63:7B:DE:49:31:CE:F4:1E:64:D1:4F:57:CF:1D:62
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/ll0u2RRje95JMc70HmTRT1fPHWI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:22:31:87:a1:8f:32:53:c3:95:c1:42:1b:c5:d1:2c:52:4f:
         41:b0:ad:3b:44:1a:df:83:10:40:cd:1e:4f:d9:9d:d8:28:b2:
         c2:88:3d:40:1b:79:77:ca:49:86:b8:88:0a:f7:73:9d:43:f5:
         33:93:5e:f3:5f:3c:66:74:61:16:cd:0c:40:37:99:21:b3:c4:
         23:b8:3c:7b:d5:fa:7d:7e:78:7d:eb:85:24:6e:4e:27:20:2d:
         06:63:e0:b0:db:fa:d0:1b:9a:ad:98:19:4a:81:ad:25:65:05:
         63:f7:08:e3:87:bb:8c:e7:9e:95:ba:10:b0:c3:da:98:05:d6:
         30:f0:a1:be:12:49:5d:27:f2:9e:aa:07:0e:3e:d2:80:89:a6:
         3a:d7:1c:eb:74:a9:2a:72:cd:04:64:d3:fd:8c:49:c9:31:f8:
         b4:76:7d:56:9f:09:fa:35:0e:36:77:f3:58:c8:95:c1:e5:d1:
         da:92:6c:e6:ab:ee:ad:4a:31:b7:89:59:3a:b6:9f:62:4b:63:
         a8:9f:df:09:cd:40:57:2c:38:cf:e5:b8:35:d5:a6:b6:c8:0d:
         b9:0d:74:e4:b9:97:2c:f8:de:47:33:83:c7:a6:ec:39:ad:92:
         41:bc:1a:ac:f9:5e:20:2c:92:06:3f:d8:07:ca:2b:73:4d:3c:
         6a:10:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:38 2024 by rpki-client on console-ams.rpki-client.org