Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/MgwQI3Cr7b3svKz35RUDTo69MY4.roa
File:                     MgwQI3Cr7b3svKz35RUDTo69MY4.roa (raw, json)
Hash identifier:          9Kk0Haq7T89VGTJZzEJ6jqjA/1epHTIBIxwTLxcZjxc=
Subject key identifier:   32:0C:10:23:70:AB:ED:BD:EC:BC:AC:F7:E5:15:03:4E:8E:BD:31:8E
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       2B
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/MgwQI3Cr7b3svKz35RUDTo69MY4.roa
Signing time:             Fri 01 Sep 2023 01:29:58 +0000
ROA not before:           Fri 01 Sep 2023 01:29:58 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     131921
IP address blocks:        153.122.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Sep  1 01:29:58 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=320C102370ABEDBDECBCACF7E515034E8EBD318E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ef:db:50:a0:4f:2b:bb:8c:5d:28:02:75:5e:
                    d4:40:e0:3a:14:89:13:f4:d8:8c:d7:32:0d:06:3f:
                    a6:e0:84:a8:52:f6:22:c3:9a:ae:5c:d6:fb:04:f4:
                    74:7b:e2:be:73:c1:f8:12:4c:7e:a2:8e:a9:a7:ff:
                    80:f6:cf:38:f9:8f:5b:62:85:46:55:b7:1f:4a:03:
                    18:60:15:13:c1:b7:f8:75:06:aa:ed:10:be:00:92:
                    e4:32:5f:9b:e5:b4:f8:d8:9e:f1:fe:32:09:59:a9:
                    7a:1c:56:9d:67:ae:bb:2e:d3:c4:83:4f:94:dd:1f:
                    70:0b:6d:79:de:2f:1d:56:61:c4:c0:90:19:a0:b9:
                    36:a9:f9:a2:53:d0:21:2f:87:fc:62:f9:31:7e:81:
                    70:23:74:44:28:09:82:39:6f:d4:4a:29:fc:95:b2:
                    1e:eb:34:58:22:f5:83:e9:5c:6e:20:4a:4d:63:c7:
                    36:fd:08:98:88:58:ca:3e:c5:5f:19:ee:45:ab:a7:
                    76:52:1a:b6:5c:00:9f:78:1e:a5:cf:61:78:b2:e2:
                    67:06:1e:3c:77:2b:fc:9d:77:dc:4b:62:3a:a5:5d:
                    cc:2f:80:ad:fd:12:2c:74:1f:8c:50:26:8b:5a:be:
                    10:79:32:1f:e2:c3:af:d2:e0:00:a0:90:76:ac:f0:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0C:10:23:70:AB:ED:BD:EC:BC:AC:F7:E5:15:03:4E:8E:BD:31:8E
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/MgwQI3Cr7b3svKz35RUDTo69MY4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.122.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:0e:dc:b7:3a:ce:c6:0a:21:75:07:69:5d:4e:a6:94:d1:1a:
         8c:27:c8:69:22:f2:68:df:42:aa:47:7e:3f:25:9b:01:e2:47:
         ec:7c:2f:bb:86:38:b8:37:c5:ae:e0:ee:e3:83:ae:30:30:e1:
         86:8b:96:e5:c9:e4:b4:92:49:b7:6c:4f:98:9c:97:2c:1f:fd:
         a9:20:51:ae:e2:8f:d8:af:33:05:15:9c:d8:0c:85:51:5e:d7:
         92:11:40:f4:f6:99:a2:9a:38:94:0c:e0:d0:0d:87:9e:a3:dd:
         0f:66:df:85:c5:a9:46:9c:a3:55:40:f7:0e:6a:35:04:36:c9:
         93:99:56:75:4a:5d:25:df:4a:71:e5:ce:1d:68:d8:68:2a:eb:
         b8:ec:79:bf:3a:2c:9f:b0:73:5a:67:be:3b:1b:2e:3a:36:ae:
         37:0d:ad:b4:40:89:4f:d4:1f:ec:11:70:0a:31:6a:4d:fe:21:
         3d:96:43:73:92:0b:23:cc:12:88:45:9a:5b:65:1b:69:64:16:
         b8:60:4f:7c:7a:d1:fa:b8:0b:7c:c5:1f:01:e7:96:85:c0:33:
         cf:9e:26:a3:13:b5:56:5b:66:f5:9e:13:e1:48:8d:65:2c:ef:
         82:1d:fe:87:49:c0:7f:2b:83:0e:fe:be:1b:2d:11:78:9b:09:
         fb:67:91:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:26 2024 by rpki-client on console-fra.rpki-client.org