Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/rpMbnDde1hB7OZRyPCj1yNoC-mY.roa
File:                     rpMbnDde1hB7OZRyPCj1yNoC-mY.roa (raw, json)
Hash identifier:          ljyalWYvTzKs+m0GOU6DJoVpzIpm0m2sAul/w2xmEbU=
Subject key identifier:   AE:93:1B:9C:37:5E:D6:10:7B:39:94:72:3C:28:F5:C8:DA:02:FA:66
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0471
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rpMbnDde1hB7OZRyPCj1yNoC-mY.roa
Signing time:             Thu 13 Apr 2023 09:59:48 +0000
ROA not before:           Thu 13 Apr 2023 09:59:48 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        219.126.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1137 (0x471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:48 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=AE931B9C375ED6107B3994723C28F5C8DA02FA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:6e:aa:61:5f:f3:40:fe:ea:eb:6a:74:9f:
                    73:da:54:06:65:8d:f1:9b:d0:d9:33:14:86:1a:9d:
                    e1:72:23:63:a5:f7:97:e2:6b:af:b3:b7:d8:48:6c:
                    91:24:d1:63:d9:f4:b6:c4:90:16:7b:4c:b3:8f:59:
                    1b:71:af:ac:52:74:4e:72:3b:1d:b9:25:d6:56:3d:
                    af:de:cc:a3:6b:36:90:f9:3d:8a:15:8b:0b:1e:0d:
                    c1:e7:ec:79:39:74:f9:2f:ce:23:78:24:45:b4:9f:
                    35:bf:16:2c:ad:1c:84:c3:ec:34:81:79:56:ea:8a:
                    23:96:0f:05:c4:89:f3:bd:8d:32:bd:3e:f4:8d:ee:
                    a3:ac:3a:69:9e:fb:aa:de:fb:0b:c9:14:37:52:01:
                    4c:19:d7:de:7b:98:47:94:6b:2c:71:9f:5a:72:b3:
                    f9:40:9c:fb:58:dc:fd:91:02:38:0d:9d:88:f8:31:
                    63:4f:a4:49:8d:ec:67:bd:86:9e:5f:b0:03:9b:08:
                    83:2d:63:5c:8b:63:1b:7b:54:1d:8b:ab:aa:d1:97:
                    61:2c:fb:07:ac:35:76:39:eb:4e:53:3a:c0:90:6c:
                    cb:ff:80:65:91:c2:ff:bc:d5:4d:32:ed:48:cd:ad:
                    3c:96:f1:2a:72:3f:7b:a2:23:31:1a:b8:ee:f3:be:
                    8d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:93:1B:9C:37:5E:D6:10:7B:39:94:72:3C:28:F5:C8:DA:02:FA:66
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rpMbnDde1hB7OZRyPCj1yNoC-mY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.126.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:13:5f:39:37:ab:97:16:f9:b9:7a:0a:13:f5:88:8f:49:
         bb:27:39:d4:ec:11:09:45:8b:58:c8:0b:95:39:56:00:18:48:
         e5:4a:30:31:91:3a:fc:6e:7a:8f:8d:19:e2:84:56:95:a4:ba:
         cf:20:02:79:b2:7a:e1:a2:fc:ab:bf:2b:df:fd:e6:be:d5:fc:
         f9:e2:52:46:92:3d:06:c5:ee:02:9d:03:05:1f:96:a9:aa:ee:
         ae:b3:01:ce:b5:51:3d:eb:bc:db:cc:6e:f0:d0:3a:5b:3e:c1:
         3e:37:7f:f1:90:d8:10:33:b2:31:8c:86:84:44:9c:26:b5:ab:
         fd:b6:7f:15:6f:8a:53:0c:f6:81:85:88:2b:da:4f:59:b3:e9:
         5c:64:e6:b7:b3:5f:87:d3:f2:7c:3d:f3:6f:a8:8d:ce:ad:dd:
         ac:b4:ce:57:d8:d0:70:4f:08:3f:d4:4c:8d:66:a9:c3:f8:da:
         18:8d:17:f3:ea:36:25:2e:79:9f:48:0f:b6:5a:44:cd:7e:51:
         16:7a:0b:c5:07:88:8f:d1:06:91:4d:69:ab:44:01:ee:50:c3:
         ab:85:8e:73:e0:bc:55:5f:32:5e:f2:f2:f2:cc:db:5c:ac:7d:
         42:2e:41:af:d9:7b:2d:44:da:b8:42:47:ee:5a:6f:03:59:9a:
         f5:aa:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:05:49 2024 by rpki-client on console-ams.rpki-client.org