Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/NwaOZm2DadABw6Cb_lOHQ8dp08U.roa
File:                     NwaOZm2DadABw6Cb_lOHQ8dp08U.roa (raw, json)
Hash identifier:          LfK3jnBMa35EbVBGJ2eSTjvdosfvaQAq6/ncEJA/vYQ=
Subject key identifier:   37:06:8E:66:6D:83:69:D0:01:C3:A0:9B:FE:53:87:43:C7:69:D3:C5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       042D
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NwaOZm2DadABw6Cb_lOHQ8dp08U.roa
Signing time:             Thu 13 Apr 2023 09:55:22 +0000
ROA not before:           Thu 13 Apr 2023 09:55:22 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1069 (0x42d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:22 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=37068E666D8369D001C3A09BFE538743C769D3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:94:87:1d:c6:be:de:3c:81:93:91:0d:9f:42:
                    93:a8:e9:a5:8c:f3:91:9f:5e:e0:2b:32:41:79:c9:
                    c6:41:8b:42:99:0c:a5:20:72:aa:df:5c:f5:6d:b1:
                    06:2b:37:2c:d1:70:d8:8f:0a:96:bf:96:19:58:b5:
                    1a:fa:e5:d8:36:0a:f2:7d:cf:86:49:d5:b3:70:0f:
                    5c:d7:b2:99:46:d8:8d:6b:c6:ec:1e:b5:95:f3:64:
                    50:77:ce:03:74:92:2d:8d:51:fb:c5:bd:7f:4a:08:
                    9e:cd:d5:8a:99:75:6c:14:07:ea:bc:d6:a6:39:09:
                    ad:af:85:1a:94:bc:3d:cb:79:98:a0:5b:a0:e1:98:
                    61:1a:65:96:40:cf:5f:92:cd:f1:de:32:40:e4:98:
                    94:4b:59:f1:d1:f6:fc:3a:12:d8:fc:af:f0:e3:4a:
                    b6:9f:8e:3f:64:76:1e:54:fb:33:28:75:b7:9d:6f:
                    be:0f:43:ab:09:2b:e2:23:31:ce:f2:8b:ae:a2:31:
                    3f:b7:56:9c:8c:a7:06:23:ad:61:af:ab:d4:a9:5c:
                    63:51:df:a9:24:8a:0f:dc:6d:4a:35:68:2b:f3:ec:
                    49:e7:2a:df:99:0d:60:c2:06:0f:a9:d0:3d:f9:6b:
                    15:25:a4:01:76:a3:d8:88:7a:f0:22:70:b2:ee:cc:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:06:8E:66:6D:83:69:D0:01:C3:A0:9B:FE:53:87:43:C7:69:D3:C5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NwaOZm2DadABw6Cb_lOHQ8dp08U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:6d:79:50:0a:44:c6:b4:8d:98:22:48:25:bf:bf:50:f5:45:
         68:a0:f8:10:9e:5c:ce:72:18:b2:f4:35:24:19:f1:42:74:92:
         42:ca:0f:26:91:dc:83:89:45:6f:f8:54:54:7e:fc:0e:29:19:
         41:f4:8f:9d:5b:7c:3e:07:97:4d:71:16:9a:ac:79:8b:1b:47:
         b2:f3:fa:eb:44:44:5b:5a:66:95:c7:3c:bf:37:9a:56:f1:a0:
         ec:6b:8f:1f:78:8d:a5:89:f5:06:ba:ba:78:1a:eb:5b:69:79:
         2c:df:0f:a3:35:85:02:42:d4:03:69:76:99:4f:48:d1:8e:21:
         3e:60:f5:df:9f:1c:e9:cf:18:b1:d8:20:8a:50:90:a5:ef:33:
         5c:61:85:f4:f2:be:30:88:d1:2c:83:eb:6f:76:f2:9f:2c:77:
         5b:4c:bb:a8:4d:9f:73:59:24:51:23:9c:e2:2e:ae:95:8f:ef:
         76:20:25:cb:63:64:4b:4b:d0:2c:89:a5:da:76:89:74:8c:b1:
         3a:6c:23:11:6c:48:63:0d:f1:e0:fc:0b:ea:92:49:83:2c:1d:
         d2:8d:7c:7a:1e:70:85:48:57:c1:c1:5d:38:b9:22:8b:de:35:
         ad:d3:ba:0b:51:dc:8d:6c:a8:aa:00:ef:79:37:4c:70:5e:00:
         b7:8e:b3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org