Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/KLUGZLWC2PV_qT8uBQ4vTmDlpXU.roa
File:                     KLUGZLWC2PV_qT8uBQ4vTmDlpXU.roa (raw, json)
Hash identifier:          QDc3vxfNapgq5F3JGOdJmUsftwnZDHLG3bRt4HSTqxE=
Subject key identifier:   28:B5:06:64:B5:82:D8:F5:7F:A9:3F:2E:05:0E:2F:4E:60:E5:A5:75
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       48
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/KLUGZLWC2PV_qT8uBQ4vTmDlpXU.roa
Signing time:             Fri 01 Sep 2023 01:29:46 +0000
ROA not before:           Fri 01 Sep 2023 01:29:46 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     131896
IP address blocks:        103.239.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Sep  1 01:29:46 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=28B50664B582D8F57FA93F2E050E2F4E60E5A575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:1f:bc:58:d9:ea:49:a4:40:e0:c7:bd:29:
                    99:e1:3e:12:76:a2:93:91:a3:d8:15:e4:2f:12:16:
                    c4:ef:20:0a:6b:5c:cf:2f:76:db:14:df:09:37:bb:
                    e0:34:bb:3a:15:cf:56:dd:ab:b5:37:27:ea:79:36:
                    f0:89:a9:44:43:43:04:81:a6:ef:3c:e0:af:ad:f9:
                    64:9c:bb:c1:c2:ab:ca:9e:38:02:da:e8:94:4a:f0:
                    fa:e1:8f:17:de:84:92:da:4d:e2:6a:4d:84:55:25:
                    03:ca:65:26:99:73:ad:de:63:76:87:b1:55:bd:12:
                    ef:99:4c:61:d6:c1:56:44:98:8f:db:24:13:be:b2:
                    a1:bf:a2:2e:51:06:27:e6:83:98:fe:37:4f:b7:7f:
                    0a:89:73:cd:a1:49:b7:a8:bd:e8:67:36:66:7e:b7:
                    6a:dd:10:33:32:87:47:64:8c:a5:25:dd:0c:75:64:
                    27:49:76:a1:95:b3:6c:b7:bb:a6:ec:43:89:7a:f4:
                    f6:9a:ba:5c:ae:30:ac:fd:b0:28:46:a0:83:65:e4:
                    d4:0c:ee:40:86:67:e8:bb:87:ee:9b:88:90:8a:d0:
                    a9:d2:fa:90:34:0d:c9:8d:85:14:59:25:1b:f3:f0:
                    54:f6:fe:32:f4:9c:32:f0:11:71:f0:4c:d4:e6:11:
                    58:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B5:06:64:B5:82:D8:F5:7F:A9:3F:2E:05:0E:2F:4E:60:E5:A5:75
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/KLUGZLWC2PV_qT8uBQ4vTmDlpXU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:09:39:52:53:33:62:1b:b5:2c:42:fb:6a:f6:77:3b:19:85:
         2b:1c:f7:26:61:90:1d:73:16:b5:6a:58:2b:06:31:13:00:48:
         2e:ba:c2:ea:a5:93:7c:14:d8:2d:0d:40:3f:c8:2b:49:1c:aa:
         72:9d:1c:2e:06:d0:a7:d2:ea:9a:93:2d:71:6f:02:e1:b1:66:
         d3:c5:61:07:52:02:2a:2d:e5:5b:be:c0:b6:8a:f3:4f:7f:24:
         65:72:16:71:6b:0e:fe:15:a3:ca:d7:69:4c:b2:92:55:19:21:
         04:a2:01:1d:10:ef:ae:a2:1e:21:59:01:fb:63:94:50:4d:af:
         3d:f2:7e:5e:c4:81:1b:af:b3:23:bb:a1:fb:e2:37:23:18:96:
         b5:db:84:05:09:78:08:40:28:d8:04:b6:3f:fc:bc:53:7a:20:
         76:e5:be:94:f0:22:23:6a:3e:33:fa:c9:83:24:62:4e:68:0b:
         61:6d:35:4f:9e:27:29:ea:d7:b4:05:81:ed:9c:fd:37:e3:2c:
         c1:93:6b:06:33:43:60:51:dd:d8:24:e7:0a:07:51:54:84:d7:
         91:b1:c0:c4:2b:2b:97:f3:76:c1:bc:bb:43:9e:ec:43:59:0a:
         c8:cf:17:99:de:8e:29:c8:83:80:9a:5a:14:25:ca:e4:e8:c6:
         e2:82:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:26 2024 by rpki-client on console-fra.rpki-client.org