Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/4L-5xeVBI8hr14HYvzOPl76MoGI.roa
File:                     4L-5xeVBI8hr14HYvzOPl76MoGI.roa (raw, json)
Hash identifier:          2u2+Fpm2RZWKf/bmF6lQ1E9BaySVfGQX8v9TUDO+k8c=
Subject key identifier:   E0:BF:B9:C5:E5:41:23:C8:6B:D7:81:D8:BF:33:8F:97:BE:8C:A0:62
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       35
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/4L-5xeVBI8hr14HYvzOPl76MoGI.roa
Signing time:             Fri 06 Oct 2023 06:05:45 +0000
ROA not before:           Fri 06 Oct 2023 06:05:45 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        210.199.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:45 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=E0BFB9C5E54123C86BD781D8BF338F97BE8CA062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:d5:c8:8c:30:f9:64:8c:b5:ed:61:5d:75:
                    c7:13:e1:b6:e6:7a:0c:1b:d7:a4:fa:f0:25:6c:9f:
                    53:c7:98:35:f7:03:a3:71:5e:9e:6e:68:a2:bc:56:
                    51:53:22:5f:b8:ac:53:83:a6:f1:49:16:94:a4:b5:
                    1e:4b:fd:1e:5c:b0:85:93:79:07:01:f7:6d:3f:89:
                    1a:6c:98:43:ad:48:bf:8c:57:53:00:74:99:a8:8c:
                    17:78:3e:2f:48:05:7b:89:de:21:22:6c:f2:c9:21:
                    61:df:ba:8a:b8:79:c3:41:22:cb:1b:94:f6:ec:47:
                    ba:37:04:52:da:9f:76:f2:c2:e3:82:62:1e:76:58:
                    94:11:11:66:ba:18:d5:e1:1d:47:f1:8b:37:37:c5:
                    f9:92:d9:8d:9c:70:12:8f:d2:b4:a4:ca:d9:40:18:
                    fe:4c:66:ca:2e:8b:fb:3e:d9:af:da:90:b9:a8:91:
                    3c:cc:10:62:00:d4:45:81:98:31:1f:34:96:34:9e:
                    1a:7e:eb:48:de:b1:72:ac:e6:80:0a:6c:2b:38:a1:
                    bd:9d:94:b5:cc:0f:9c:06:1b:e7:c3:70:13:19:f0:
                    ca:f2:2a:da:65:95:23:6f:38:51:45:af:72:6d:12:
                    21:82:f7:67:2d:02:ff:de:2b:27:b3:f6:80:3f:9a:
                    09:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BF:B9:C5:E5:41:23:C8:6B:D7:81:D8:BF:33:8F:97:BE:8C:A0:62
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/4L-5xeVBI8hr14HYvzOPl76MoGI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.199.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:57:55:2c:4a:f3:47:e6:f2:62:7f:d8:df:80:7f:06:9e:0c:
         60:af:54:9d:9e:ee:94:56:5b:49:82:33:9f:e6:93:92:c8:c9:
         ec:cb:6e:35:64:a5:16:0e:a0:f1:14:e7:75:e3:3e:12:44:4d:
         78:97:cd:55:b5:58:13:c0:d7:47:fe:62:89:a1:22:90:e2:96:
         0c:cf:13:46:f2:23:5f:dd:48:2f:d7:8b:64:57:a9:e6:b8:bb:
         50:a1:6e:e7:69:b7:b8:dc:21:ca:4b:4b:41:81:1b:5a:99:03:
         8f:15:ec:4c:24:ac:b7:3a:c6:44:2c:31:7d:ad:9e:c8:b0:82:
         ae:be:8d:53:94:d8:98:7b:14:ec:19:9f:97:55:2c:4f:52:38:
         fe:b4:0f:67:34:74:d9:17:62:6d:1b:b7:67:95:a5:59:ce:f2:
         95:0c:55:10:48:4f:ba:f7:34:16:79:46:08:f8:3f:6c:a7:37:
         8e:db:44:71:c5:cd:e7:7d:3d:ba:c1:a2:a9:ba:a2:2a:1b:2d:
         f1:df:9b:17:68:37:40:90:64:e0:f0:6b:6d:c2:6b:dd:70:01:
         2e:08:19:f7:1a:e5:7b:e9:e6:c7:f0:a8:aa:99:0e:d0:aa:f5:
         35:e9:89:99:8c:a9:cc:42:6c:dd:40:84:44:34:94:1a:42:23:
         38:09:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:44 2024 by rpki-client on console-fra.rpki-client.org