Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/xA984tewlBnw8eA716AncpbhhbU.roa
File:                     xA984tewlBnw8eA716AncpbhhbU.roa (raw, json)
Hash identifier:          00r8ru4QtsbwjWixboZOGxTYB+EAVM52SGGDQtcI3Ec=
Subject key identifier:   C4:0F:7C:E2:D7:B0:94:19:F0:F1:E0:3B:D7:A0:27:72:96:E1:85:B5
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       43
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/xA984tewlBnw8eA716AncpbhhbU.roa
Signing time:             Thu 13 Apr 2023 09:54:03 +0000
ROA not before:           Thu 13 Apr 2023 09:54:03 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18260
IP address blocks:        210.141.216.0/21 maxlen: 32

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Apr 13 09:54:03 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C40F7CE2D7B09419F0F1E03BD7A0277296E185B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:12:bc:f0:4e:14:76:57:39:97:77:8f:79:76:
                    cd:3c:a3:2a:dc:64:3e:fd:1d:00:15:c6:78:5a:c7:
                    f7:47:2c:d9:fa:86:ee:e8:ee:4b:de:d9:6e:2b:59:
                    a1:d2:b1:e7:73:6d:2f:e8:78:8a:28:5d:64:35:43:
                    d3:8a:b6:51:d3:4e:24:ee:ab:8a:d2:ed:6a:4e:ab:
                    5c:01:a5:d6:1c:7b:d3:09:67:e4:85:47:bd:bf:af:
                    fd:b4:a1:29:62:a1:a5:6d:81:c4:97:9a:ee:6f:97:
                    80:65:a3:f8:62:04:f1:7a:38:0b:19:41:01:ba:db:
                    44:ff:51:98:70:5f:e7:45:d8:40:2e:93:69:b6:53:
                    8c:a2:7b:2a:52:b8:f3:8a:ad:77:1f:3f:5d:04:6d:
                    b6:85:20:7b:7f:90:31:d2:35:bf:4e:a4:85:43:6d:
                    a8:60:36:af:d6:42:0d:dc:74:f5:2d:c3:3a:f1:7b:
                    80:bd:89:46:4b:4f:29:72:56:92:18:8d:a9:7b:1b:
                    e1:82:3d:41:35:fb:9f:96:89:9c:9b:78:2c:2a:af:
                    80:04:b9:f3:e9:3c:2c:c4:08:51:17:2e:95:54:cb:
                    b1:16:1d:ff:6d:03:52:79:5e:cc:59:51:67:48:6c:
                    3b:0a:95:c9:b0:3d:ba:cf:06:7c:b0:d1:77:0c:95:
                    46:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0F:7C:E2:D7:B0:94:19:F0:F1:E0:3B:D7:A0:27:72:96:E1:85:B5
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/xA984tewlBnw8eA716AncpbhhbU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:b1:eb:b0:14:2f:a4:68:1a:eb:ef:bf:1d:83:b0:4b:f0:98:
         c7:fc:61:7f:d9:3e:17:e0:66:01:1d:3e:ec:a4:cf:2f:ec:82:
         7a:46:4a:4c:4e:e7:87:d9:16:6b:71:e1:e9:5d:5c:4b:97:8e:
         6d:09:6c:35:6a:96:90:32:39:0b:9d:55:9f:dd:52:31:00:97:
         e2:8f:7b:4b:84:c3:b6:c5:f9:2d:79:18:5f:b7:2a:77:aa:5e:
         0e:d2:49:9a:fc:29:dc:3b:75:d3:9a:61:06:88:46:43:08:d1:
         4f:c8:53:71:89:83:44:24:0b:5d:30:b2:07:1a:06:51:95:86:
         b4:a3:df:65:02:ad:f8:50:58:cd:ea:d6:d6:03:72:a3:97:15:
         b9:06:9c:a4:e5:c6:83:4a:e8:fd:ae:82:bb:4e:4d:1d:fb:f0:
         a2:a3:18:ed:99:93:cc:08:6f:54:2b:ed:c6:8b:e9:b1:df:91:
         fb:22:7a:3e:9b:c0:4a:74:5e:dd:5e:f6:c7:6c:19:6e:1b:5f:
         20:6b:a7:e5:ed:2e:16:3b:1b:04:2a:09:9d:e2:60:5d:f8:09:
         3a:5d:53:1e:f0:70:bc:56:65:b1:b1:e2:8a:90:b6:42:69:ce:
         12:9f:57:fe:19:d6:3a:79:c6:2c:7e:f5:b8:2a:ab:81:d5:02:
         c8:39:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org