Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/PXsKL03wjUMOnvQMKO_Ec2EbsVQ.roa
File:                     PXsKL03wjUMOnvQMKO_Ec2EbsVQ.roa (raw, json)
Hash identifier:          RV4ve15wmAN+qbqj5ifiQ5NqvOhIjuQd27z+hAwwYY0=
Subject key identifier:   3D:7B:0A:2F:4D:F0:8D:43:0E:9E:F4:0C:28:EF:C4:73:61:1B:B1:54
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       28
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/PXsKL03wjUMOnvQMKO_Ec2EbsVQ.roa
Signing time:             Fri 06 Oct 2023 06:05:40 +0000
ROA not before:           Fri 06 Oct 2023 06:05:40 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        119.148.192.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:40 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3D7B0A2F4DF08D430E9EF40C28EFC473611BB154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:dc:b8:88:d1:cb:c4:33:65:43:a5:a8:ed:
                    be:97:13:0f:62:e9:46:d2:ea:81:d3:c2:1b:49:0e:
                    c8:99:8f:3c:b7:f9:f5:8a:72:2c:cb:43:9e:6b:75:
                    1e:8a:37:a9:e0:db:f4:ea:65:91:30:2e:e2:e7:7c:
                    94:0d:fa:66:08:f0:50:e7:63:b8:47:23:7c:49:2c:
                    f8:1f:45:0a:25:e3:df:c3:33:7e:ef:d5:b1:55:15:
                    e0:ab:c5:54:e6:77:1a:b4:c0:d6:5e:36:7b:49:3f:
                    04:14:c0:ea:2f:64:63:22:cc:b7:cd:ec:d1:f5:de:
                    07:03:a7:88:a8:15:c0:10:92:85:88:42:91:51:69:
                    10:12:0e:2d:71:e1:fe:b9:c0:3d:02:01:44:24:fd:
                    b1:6c:b0:cf:a1:ec:64:7e:c9:cc:bd:da:69:75:04:
                    fc:75:8b:1f:53:3c:9f:c3:7c:b6:bd:bf:ad:3e:94:
                    6e:50:da:f2:4b:03:ce:3d:b7:60:6b:c0:0d:76:62:
                    51:ee:75:27:ef:9a:a8:fe:42:d7:0b:64:38:fb:02:
                    c9:be:20:cb:fc:3d:c8:03:a1:20:41:04:19:cb:76:
                    ac:9e:e9:40:d2:e0:54:ff:c6:96:29:0d:e9:7d:20:
                    cc:0d:6b:81:76:dc:ac:75:c6:cd:73:79:a4:7e:58:
                    b8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7B:0A:2F:4D:F0:8D:43:0E:9E:F4:0C:28:EF:C4:73:61:1B:B1:54
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/PXsKL03wjUMOnvQMKO_Ec2EbsVQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.148.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         83:84:0a:f3:5b:2e:da:0c:a5:c3:45:0f:98:4b:a5:3d:b7:db:
         83:5e:05:e7:61:d8:ac:0f:2d:60:c7:fb:63:5f:03:c3:ee:82:
         03:e5:d9:fe:43:7a:82:6c:29:65:c8:e4:ea:d3:3a:e5:f6:43:
         f6:44:1c:a7:22:eb:22:76:e5:f5:e4:49:f6:fd:7f:84:ec:dd:
         41:67:93:ee:f1:cb:68:23:0f:d1:46:33:7a:1c:ea:4a:5f:5b:
         6c:00:b3:09:6f:08:5a:7a:26:7d:56:6c:65:22:e7:86:76:3b:
         98:c4:a4:c4:20:dc:59:60:c6:5f:2a:68:1d:08:61:a0:f2:34:
         f0:d2:3b:94:8b:9d:3d:f4:5a:ff:6d:10:65:ad:6a:41:86:c9:
         21:d3:9e:79:0e:e3:5b:37:fb:32:22:af:82:63:a5:77:59:08:
         2f:0e:25:03:62:e8:25:29:11:bb:e1:e1:10:cf:d3:ed:7c:51:
         2f:ce:3e:60:b1:2f:fa:e0:1f:9b:5f:41:04:e9:5c:7d:f4:95:
         cf:60:d5:04:f9:9c:80:1a:67:2b:2d:5b:9d:96:59:c5:36:f2:
         a5:b2:d3:a0:95:70:05:7c:4b:77:91:93:eb:e1:f1:6b:26:22:
         9c:72:34:ba:07:fe:a4:1f:8a:f3:ba:46:37:9f:76:7b:c3:45:
         48:0e:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:44 2024 by rpki-client on console-fra.rpki-client.org