Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/LP_EIomyk5C9MI_8HYGUsLNX4Rk.roa
File:                     LP_EIomyk5C9MI_8HYGUsLNX4Rk.roa (raw, json)
Hash identifier:          2mhu3sJdXl/cwriCpDsqSpya04BJRNr4GMVSc6c0AlM=
Subject key identifier:   2C:FF:C4:22:89:B2:93:90:BD:30:8F:FC:1D:81:94:B0:B3:57:E1:19
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       29
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/LP_EIomyk5C9MI_8HYGUsLNX4Rk.roa
Signing time:             Tue 01 Aug 2023 01:29:17 +0000
ROA not before:           Tue 01 Aug 2023 01:29:17 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     131921
IP address blocks:        153.122.208.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Aug  1 01:29:17 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=2CFFC42289B29390BD308FFC1D8194B0B357E119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:31:40:c1:88:12:05:3c:6d:77:3e:87:e1:
                    bb:4e:bc:2f:35:d9:70:b4:ba:bb:f9:f1:28:9f:7e:
                    13:7a:cb:a1:fc:9f:e4:c3:67:e8:6a:68:31:76:fb:
                    1d:66:bb:5d:5a:ea:76:2b:33:80:75:9d:b8:09:c7:
                    ef:54:4c:af:9d:aa:48:64:1b:05:12:89:37:db:b3:
                    7e:70:44:4e:77:17:3a:3e:6b:ab:52:27:7d:6c:d9:
                    a0:3a:bc:6b:a8:65:d4:26:4f:58:ed:7f:1b:4e:04:
                    6c:d2:69:2c:63:c3:9e:9b:94:aa:8f:ea:6e:74:2d:
                    05:af:00:f1:2a:71:32:f3:11:c5:fd:86:3c:47:c5:
                    16:24:93:3e:aa:d3:5f:77:e6:25:b4:c3:d6:5a:50:
                    78:13:08:42:0a:00:44:c4:4a:8c:13:29:2a:ba:40:
                    48:9d:0a:76:40:60:e7:08:09:de:51:0a:d3:d0:aa:
                    28:0b:44:48:05:e6:b5:c3:cd:47:28:4e:99:64:80:
                    f9:63:47:83:9b:aa:d1:47:f9:f0:87:e2:e7:07:c3:
                    4b:4a:dd:63:fa:d3:6d:43:76:76:33:4d:fb:3d:6d:
                    c0:29:ef:7e:17:3a:84:73:31:d5:f6:43:25:64:42:
                    31:06:aa:7d:23:51:0f:7c:23:48:d7:37:22:f5:1e:
                    b3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FF:C4:22:89:B2:93:90:BD:30:8F:FC:1D:81:94:B0:B3:57:E1:19
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/LP_EIomyk5C9MI_8HYGUsLNX4Rk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.122.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:14:b3:05:e5:58:1f:c5:1a:f3:32:c3:6b:d1:a7:6c:ee:78:
         e4:23:e1:6f:7c:db:8f:54:c5:d8:e4:ce:3f:2a:ea:8f:78:7b:
         e6:da:9b:94:68:79:13:36:7a:77:21:c2:87:86:79:df:fb:74:
         1e:14:e0:9f:78:6f:36:57:4b:ef:3d:1d:5e:bf:d2:0e:11:9a:
         85:d0:9c:f2:6e:64:e5:98:24:10:1a:5c:a3:20:7a:a7:83:a6:
         bd:00:b2:1f:39:d3:35:1f:e0:49:a4:95:5d:11:f8:b0:31:53:
         13:32:2f:1b:b3:95:8a:02:eb:d3:6c:c4:f8:3c:b2:68:cd:c0:
         46:c0:53:db:25:eb:30:b3:4e:04:00:98:fe:00:e6:d8:70:ac:
         49:59:d5:45:81:20:37:16:db:01:c4:ab:20:b5:57:3f:16:4e:
         b7:bd:c3:72:8d:5f:22:0c:a8:31:5f:d4:07:4f:38:7c:c9:89:
         d5:39:2b:b7:89:ef:49:cc:82:97:57:b1:dd:6e:23:17:cf:9e:
         66:6c:fd:70:18:4f:02:8c:04:ea:49:f2:6e:dd:91:57:21:f5:
         07:35:8c:ce:4d:e9:e0:f8:87:70:4f:e1:a1:d4:da:ec:ab:35:
         3f:a4:fe:52:e3:fa:f3:8e:a0:c2:38:8c:ad:ea:a7:14:fb:72:
         6c:34:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:42 2024 by rpki-client on console-ams.rpki-client.org