Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/CEConr7sPrfhHFH2rUIqA4nm_BQ.roa
File:                     CEConr7sPrfhHFH2rUIqA4nm_BQ.roa (raw, json)
Hash identifier:          UR1BPiv1osUw4AAoUuOFtN/GCxKUi1++bLjGbsEPf4g=
Subject key identifier:   08:40:A8:9E:BE:EC:3E:B7:E1:1C:51:F6:AD:42:2A:03:89:E6:FC:14
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       45
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/CEConr7sPrfhHFH2rUIqA4nm_BQ.roa
Signing time:             Sat 01 Jul 2023 01:28:10 +0000
ROA not before:           Sat 01 Jul 2023 01:28:10 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     17675
IP address blocks:        122.200.36.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Jul  1 01:28:10 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=0840A89EBEEC3EB7E11C51F6AD422A0389E6FC14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:7f:74:35:cf:ac:7f:cc:62:46:a3:a3:62:
                    6e:6a:80:6b:01:fe:ca:0c:58:00:62:bc:8e:30:81:
                    54:c8:4f:7e:d8:be:66:ab:d7:74:f4:94:49:f8:42:
                    4d:47:16:b1:5e:43:5f:49:df:bf:5d:50:18:9c:e6:
                    f1:35:8e:69:cf:22:38:d6:b9:a0:f5:89:9d:6a:53:
                    43:d7:db:1f:1b:ca:1e:36:0d:7a:ff:cb:59:ab:7c:
                    ee:cb:6a:cc:1f:be:7e:32:c8:79:a2:d4:7d:bf:6a:
                    58:0a:0f:25:9b:20:7d:fe:82:72:0f:b8:1a:1c:16:
                    09:0b:1b:b0:99:6a:45:4f:3b:10:fd:f5:c1:08:d1:
                    26:56:be:bf:e0:82:df:56:08:5e:76:e9:48:45:f7:
                    f3:4c:e6:9d:1f:6b:73:48:2c:2f:56:8e:9e:5a:f9:
                    bd:a4:15:a0:6c:2e:19:65:dd:db:49:59:8e:57:de:
                    08:56:08:8a:ab:8f:8c:0b:3c:b2:7f:44:10:76:fd:
                    b8:32:de:ac:df:03:15:dc:62:74:a0:7d:3e:37:ac:
                    03:6e:5f:5c:10:d2:56:05:2e:78:9d:cc:3b:cc:b8:
                    0c:b7:91:be:11:ea:ea:45:12:1c:5d:c3:3d:71:f2:
                    d2:06:50:86:4c:c1:66:8c:5f:ff:07:ae:a8:44:c4:
                    e0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:40:A8:9E:BE:EC:3E:B7:E1:1C:51:F6:AD:42:2A:03:89:E6:FC:14
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/CEConr7sPrfhHFH2rUIqA4nm_BQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:6d:f4:44:5d:37:2b:ae:1b:a8:22:2b:26:e6:22:7d:e8:cb:
         bb:f4:fc:5c:7d:31:5b:ce:72:d5:c2:22:b9:de:68:31:24:85:
         78:25:c5:67:f6:8c:0c:3e:a2:53:dd:f4:fc:c4:9d:3e:30:e3:
         01:95:ef:cb:2d:1f:83:3c:9a:9a:bd:25:79:76:32:bf:48:13:
         e1:70:8d:6f:b6:d0:7c:71:c8:5c:41:96:ad:15:44:e9:c5:0e:
         3e:5e:fe:29:df:0c:ec:c6:eb:83:b8:e1:92:fe:96:f5:e2:b5:
         58:33:45:ca:fe:f4:2b:cf:ee:31:56:c2:c2:77:5f:e0:39:ea:
         97:0d:17:7e:71:98:c2:3e:84:59:2a:60:2c:7f:e3:68:cf:41:
         3f:96:9d:8e:c6:0c:b4:ce:15:65:04:1f:e6:ce:c9:01:a2:45:
         31:d7:22:26:13:67:b0:9c:cd:a7:46:ec:0d:95:59:b5:dc:f4:
         7a:d2:fe:d1:f4:19:08:74:b6:aa:04:7a:de:bc:11:6f:6f:c7:
         25:97:f5:5c:87:65:0d:6c:1c:6d:93:3a:bd:dc:de:64:5d:87:
         4a:81:9d:a0:31:82:b1:ed:8d:bc:01:8a:3e:3f:fd:64:70:bd:
         65:6b:d7:71:d6:93:ff:96:04:d9:2f:eb:1c:50:ba:77:1c:cf:
         7c:2c:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org