Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/BHdTwVdHjiR69UfKhtUQJX7aWsk.roa
File:                     BHdTwVdHjiR69UfKhtUQJX7aWsk.roa (raw, json)
Hash identifier:          m0fd5fCNqjU9BHfLSluLVnvQTy03ihfN7aMj5BZmBX0=
Subject key identifier:   04:77:53:C1:57:47:8E:24:7A:F5:47:CA:86:D5:10:25:7E:DA:5A:C9
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       34
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/BHdTwVdHjiR69UfKhtUQJX7aWsk.roa
Signing time:             Fri 06 Oct 2023 06:05:44 +0000
ROA not before:           Fri 06 Oct 2023 06:05:44 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        210.141.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:44 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=047753C157478E247AF547CA86D510257EDA5AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:07:f6:29:d3:89:40:f9:ac:74:38:63:24:94:
                    ce:93:e7:a2:0f:d4:d9:62:d3:4d:90:75:42:02:73:
                    e2:5f:3e:8e:af:4a:cd:10:77:9a:65:96:aa:d6:96:
                    f3:ce:56:01:47:46:0f:0d:af:ae:8b:c2:f4:56:3b:
                    bf:d8:35:73:0c:4a:a7:16:97:01:cf:78:48:eb:23:
                    6b:67:d7:e6:aa:0b:10:e9:f7:fe:bd:5b:40:27:de:
                    b9:61:e8:ec:0a:e0:c8:c2:8a:d3:11:73:12:bf:29:
                    5a:ce:7b:b2:5d:df:d8:7c:9d:f2:d8:70:42:62:ce:
                    96:2e:25:fb:c0:b5:f1:ea:f6:f4:37:73:a8:82:cc:
                    75:98:09:61:00:5a:53:da:72:55:1b:c3:57:38:14:
                    a7:0d:7b:9f:e6:e4:ea:6d:24:ef:b6:eb:16:d0:9b:
                    e4:72:3f:dd:cf:eb:83:73:ee:c0:69:a9:3f:7c:96:
                    47:11:1f:b4:47:6c:b0:27:d6:c3:10:d0:92:b2:c3:
                    79:84:e0:91:e4:c0:43:82:46:9f:70:af:2f:0f:58:
                    2c:20:65:62:e2:77:d1:d0:8d:a0:67:93:49:cc:5f:
                    0e:d4:f5:e6:18:37:50:0c:c6:64:cd:0a:8c:58:6c:
                    c3:0f:79:0c:5a:9a:4e:eb:dc:4a:7b:9d:37:27:19:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:77:53:C1:57:47:8E:24:7A:F5:47:CA:86:D5:10:25:7E:DA:5A:C9
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/BHdTwVdHjiR69UfKhtUQJX7aWsk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         38:cd:1c:f9:71:b3:f8:6b:ca:ac:f5:c0:dd:88:9d:9c:d1:b3:
         12:fc:14:fd:c0:d4:81:5c:4a:51:83:44:0e:d3:8e:6d:ad:8e:
         36:48:eb:33:9b:1e:28:0b:05:05:ff:8d:36:5c:cd:88:8b:ec:
         0a:43:70:ea:bd:6c:5c:33:c6:a6:23:9f:4e:0c:78:aa:90:da:
         1d:21:7d:df:8c:f4:50:40:f7:7c:8a:e8:88:da:12:b5:b3:d9:
         ac:66:7e:f4:e1:e2:b9:63:22:82:95:95:e9:e2:d0:ad:45:b8:
         78:57:ce:a4:26:0b:42:44:1d:a8:9d:6c:3d:2d:b0:1a:97:a9:
         e4:ed:d1:0d:da:84:a6:b6:b6:d3:d1:5b:3b:e9:63:6c:64:f2:
         95:cc:4e:ea:47:91:8a:3c:e2:06:5b:35:d2:45:93:d4:21:93:
         52:cc:30:8f:e1:c1:ba:a0:ff:19:83:00:ea:1c:05:29:c9:7c:
         c2:c0:f8:ee:8a:38:d7:e7:a0:96:76:36:e1:df:04:cf:18:7e:
         57:48:e2:ad:ed:23:5a:3f:6b:29:20:0a:d4:06:6e:d9:3e:8b:
         f8:4a:a3:fb:df:11:6f:ac:30:db:e0:b6:e5:99:80:86:50:93:
         46:4b:cd:e0:01:03:aa:c4:5b:02:65:b6:6e:2d:51:20:d9:7c:
         63:0a:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:44 2024 by rpki-client on console-fra.rpki-client.org