Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/LSlyR6ygyVLNu5RlLfOXJcw52B0.roa
File:                     LSlyR6ygyVLNu5RlLfOXJcw52B0.roa (raw, json)
Hash identifier:          f2PJdBG51ePtnWMnRGeqjhe9qT/qGpJ0SfD5pA+/mx8=
Subject key identifier:   2D:29:72:47:AC:A0:C9:52:CD:BB:94:65:2D:F3:97:25:CC:39:D8:1D
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       07
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/LSlyR6ygyVLNu5RlLfOXJcw52B0.roa
Signing time:             Fri 01 Sep 2023 01:39:49 +0000
ROA not before:           Fri 01 Sep 2023 01:39:49 +0000
ROA not after:            Sun 18 Aug 2024 03:04:44 +0000
asID:                     17682
IP address blocks:        61.213.32.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sun 04 Aug 2024 03:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Sep  1 01:39:49 2023 GMT
            Not After : Aug 18 03:04:44 2024 GMT
        Subject: CN=2D297247ACA0C952CDBB94652DF39725CC39D81D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0c:4c:88:23:59:a0:8f:6b:e9:d6:85:cd:28:
                    25:5d:42:0f:bb:99:c7:a4:47:92:b0:fe:9c:d2:a2:
                    ec:9e:cb:14:6d:a4:f0:f2:6d:ba:c1:ad:02:50:1a:
                    d3:d6:1c:6e:12:3f:ed:c8:a9:7a:75:69:d9:b5:2e:
                    28:04:52:37:5b:ac:00:f2:5e:af:20:13:f5:22:64:
                    df:ea:2c:99:fd:4e:55:4d:75:55:ea:8e:9b:3e:7f:
                    29:f3:3d:e5:3f:61:01:82:ee:aa:94:8f:99:a2:e0:
                    7b:2c:e0:3f:e0:fa:a5:d2:01:46:37:a8:07:b6:cf:
                    b5:4f:26:dc:26:ee:69:c0:5f:f6:02:75:8f:ac:11:
                    6b:a8:aa:eb:21:2c:77:e5:70:77:df:a1:3e:82:06:
                    9f:ab:1c:b8:de:2a:01:49:0d:4e:cb:70:e2:3f:fd:
                    59:11:93:76:2f:39:eb:41:06:c2:68:3d:d1:27:12:
                    c3:7e:a0:41:52:56:90:20:58:7e:3d:17:a2:43:81:
                    6d:44:df:be:84:97:32:61:3e:2f:dc:42:76:34:52:
                    5e:d3:f9:90:04:c9:24:58:b8:37:bf:11:bc:7a:7d:
                    ed:14:c9:56:d1:ca:c0:56:4b:90:31:ae:75:2f:e0:
                    39:9d:07:ae:e3:b6:06:1b:ba:56:3b:60:94:13:af:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:29:72:47:AC:A0:C9:52:CD:BB:94:65:2D:F3:97:25:CC:39:D8:1D
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/LSlyR6ygyVLNu5RlLfOXJcw52B0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:dd:d8:9e:1b:cd:24:8e:df:ee:b6:54:8c:d3:9d:95:8b:0c:
         59:f8:b8:80:7d:15:a9:91:24:35:8c:ea:28:d2:d9:14:b3:a6:
         05:67:38:75:b5:15:b8:60:73:3e:77:ec:10:ec:0d:e1:8c:a5:
         96:df:66:a1:2a:74:b4:b9:7e:53:6f:1f:d2:bb:5a:cc:d4:9e:
         a3:b0:88:6a:32:d5:9e:79:3d:81:af:eb:a7:79:74:0d:bc:f1:
         e1:2f:83:90:9c:1b:90:49:d7:54:66:e3:82:fd:62:9c:48:c8:
         57:f1:06:75:4a:3b:38:41:ff:5b:35:ea:1c:d1:9c:e8:d7:db:
         3a:b4:a7:73:22:45:dc:cc:a3:1c:0b:ea:dd:b0:df:31:51:20:
         e2:70:4d:da:84:04:ad:19:ae:9c:06:35:95:49:d0:e8:c4:fa:
         39:50:28:ee:98:a7:51:f9:3b:0a:b0:ac:ce:d9:86:07:16:3a:
         eb:af:90:a6:ca:23:b3:bd:71:c0:b1:1a:3c:6c:0d:7b:7c:b2:
         5b:e4:7c:9f:9e:cf:3a:bb:67:68:5d:94:33:c1:3a:ab:9f:c3:
         06:73:1a:75:ce:22:d3:9c:a1:eb:ff:78:73:a4:1e:d6:64:aa:
         ab:57:7c:1e:99:2a:83:85:ee:eb:10:fd:d1:17:40:91:ec:5c:
         78:8f:b7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 04:46:37 2024 by rpki-client on console-ams.rpki-client.org