Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/6GZcsHCRI0n1P7Dj5k98Ei4a6Vk.roa
File:                     6GZcsHCRI0n1P7Dj5k98Ei4a6Vk.roa (raw, json)
Hash identifier:          17g52sTfSiQeuoH6jtgAhamsLBceXU8Lffew8iLa8vE=
Subject key identifier:   E8:66:5C:B0:70:91:23:49:F5:3F:B0:E3:E6:4F:7C:12:2E:1A:E9:59
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       47
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/6GZcsHCRI0n1P7Dj5k98Ei4a6Vk.roa
Signing time:             Sat 01 Jul 2023 01:28:11 +0000
ROA not before:           Sat 01 Jul 2023 01:28:11 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     17675
IP address blocks:        203.169.8.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Jul  1 01:28:11 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=E8665CB070912349F53FB0E3E64F7C122E1AE959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:61:04:91:d1:80:78:aa:50:cf:d1:d0:b9:55:
                    4d:10:44:e2:dc:49:d4:ef:dd:a5:ef:ff:6c:4c:68:
                    61:cf:7e:47:b3:27:b0:73:39:74:dd:ad:03:b6:e1:
                    f7:88:0f:e0:4a:07:9c:d9:7b:b1:4b:ea:56:97:b4:
                    b8:ef:4d:28:fc:02:1c:ea:23:27:fa:4b:1c:63:9a:
                    a9:62:f6:a7:49:99:73:0f:46:13:93:8c:ad:e0:35:
                    09:3a:87:b1:09:fa:ae:5b:98:83:8b:48:ae:65:c2:
                    71:3b:05:91:d4:58:8f:a0:0d:10:3e:2a:39:69:6c:
                    7c:66:86:1c:da:a7:a6:d3:71:1e:80:fb:6c:26:61:
                    96:a3:4c:ce:1d:01:8c:9e:29:d2:d5:29:e8:2c:ad:
                    77:03:3c:c1:57:3c:83:64:c5:15:8e:6e:fd:5f:51:
                    63:6c:5d:f7:8c:97:05:49:ac:ae:62:40:db:e8:c8:
                    96:92:32:f3:10:a2:a3:51:7e:4d:70:94:eb:fe:c3:
                    6a:c6:b2:55:0c:61:00:1c:06:70:9f:3d:58:02:39:
                    90:71:a5:85:de:cc:78:f4:78:e8:7e:66:95:04:36:
                    79:44:1a:bb:03:86:88:e8:78:e2:66:2a:7b:26:93:
                    c6:e6:76:6f:6f:2c:4a:de:a0:b9:c9:8a:b8:46:fa:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:66:5C:B0:70:91:23:49:F5:3F:B0:E3:E6:4F:7C:12:2E:1A:E9:59
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/6GZcsHCRI0n1P7Dj5k98Ei4a6Vk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:c4:e9:9b:01:12:9a:98:62:d9:e9:cd:a5:5b:01:5b:9d:a8:
         44:13:32:64:82:ef:c5:7f:a0:4d:35:54:6d:09:ee:81:4e:9f:
         6b:ef:0a:44:a8:42:6a:13:1f:4f:93:83:82:51:c5:52:b1:af:
         2f:95:a4:ae:20:84:6a:c6:77:29:5a:0c:3b:cb:91:2c:6e:7c:
         1d:70:6f:a5:71:9d:89:ff:d0:14:3c:52:56:58:44:ed:38:9b:
         93:63:d4:9f:3d:d1:1c:90:7c:bb:a7:ad:07:bf:b9:a2:f8:3b:
         68:10:07:ec:c4:2a:26:69:71:58:15:e4:0c:4d:b8:5a:a1:9b:
         98:06:2e:2a:5e:dc:c2:54:ca:13:7a:23:57:0a:df:f4:d9:26:
         a3:8a:ee:be:3f:ae:21:39:02:be:12:18:76:68:59:6b:e0:96:
         ad:4f:bc:80:ab:8b:64:fe:3f:b3:0f:6f:68:da:e7:d0:64:29:
         53:ec:0b:f7:8f:62:c9:fe:ef:f6:78:67:dc:dc:21:50:af:74:
         9d:ce:b7:61:cb:db:31:8e:d8:0c:2a:37:00:23:46:77:e8:10:
         a2:6f:c1:e9:39:eb:e2:84:5e:93:86:d4:e2:b9:77:49:c5:87:
         1e:60:dc:31:9b:82:80:c7:76:30:81:ac:72:93:47:65:d8:5d:
         2a:82:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org