Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/k6ZMg_n2Txoqfh2RTr_LGjwv-YU.roa
File:                     k6ZMg_n2Txoqfh2RTr_LGjwv-YU.roa (raw, json)
Hash identifier:          aJxXmysAxgljboX4Nn1+PjcYqp5nSNY92LI9D+B9M0k=
Subject key identifier:   93:A6:4C:83:F9:F6:4F:1A:2A:7E:1D:91:4E:BF:CB:1A:3C:2F:F9:85
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       33
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/k6ZMg_n2Txoqfh2RTr_LGjwv-YU.roa
Signing time:             Fri 15 Sep 2023 06:46:42 +0000
ROA not before:           Fri 15 Sep 2023 06:46:42 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18144
IP address blocks:        202.208.112.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Sep 15 06:46:42 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=93A64C83F9F64F1A2A7E1D914EBFCB1A3C2FF985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:b1:a8:40:d0:05:42:07:e9:65:31:fc:dd:
                    8c:5b:93:4f:c3:86:b6:26:3f:33:2c:d5:13:a6:eb:
                    d2:92:96:7c:1e:24:0c:a6:ea:f7:73:98:bf:f1:2c:
                    55:77:93:23:c1:91:f2:dd:85:a7:ee:4d:c0:8c:a4:
                    82:cc:52:97:39:d1:f6:88:ba:c1:17:ae:9e:15:70:
                    53:b2:36:ca:77:f5:e2:e2:10:d2:a9:70:f8:54:6a:
                    4d:ec:f5:c3:c9:4f:54:cb:f8:c7:49:c9:85:17:43:
                    e9:98:40:47:fc:23:8b:84:3b:e3:72:4d:87:c1:69:
                    eb:f9:ce:16:b4:47:a7:7c:3a:77:9f:23:73:f3:a8:
                    51:58:83:a8:18:81:a8:89:e1:7b:10:2d:4a:56:fe:
                    0d:88:f6:1f:dc:af:ab:3e:59:15:33:80:4b:a4:44:
                    c4:61:0f:17:da:49:6b:21:fa:a8:64:84:98:c8:3b:
                    ed:83:99:03:c1:a4:44:82:1c:4a:ba:53:a3:65:32:
                    22:d4:64:69:5f:65:59:01:e1:31:ec:24:f3:35:78:
                    b9:bb:64:d3:a0:5a:d9:78:06:0e:33:e7:39:aa:8e:
                    ea:09:30:bc:4c:d4:80:85:47:80:ea:3a:01:f3:dd:
                    17:66:b2:2c:a8:a5:ac:21:1c:73:55:ca:b3:af:1d:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A6:4C:83:F9:F6:4F:1A:2A:7E:1D:91:4E:BF:CB:1A:3C:2F:F9:85
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/k6ZMg_n2Txoqfh2RTr_LGjwv-YU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.208.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:ef:28:72:83:98:c4:3d:97:1b:71:b1:cd:de:84:eb:27:d9:
         06:39:0b:1a:47:22:0d:62:8c:2c:7d:c9:31:dc:49:ba:1b:ac:
         a2:ea:8a:e3:b8:96:4e:fe:ba:51:30:ac:3e:01:d9:05:e0:59:
         b6:a4:59:6b:73:eb:de:66:28:fc:87:0f:43:d8:b6:47:e5:73:
         66:82:3f:ea:c8:56:8b:6c:2e:58:01:41:b2:15:e9:91:a4:5d:
         44:b0:54:99:b2:43:ff:ee:35:9b:7b:23:cf:5d:a0:c2:e4:19:
         be:da:ab:9a:cc:f8:b9:b9:6a:5c:5a:d1:7a:73:51:e3:71:15:
         91:dd:42:75:a5:5e:f8:2d:b4:7c:e6:03:9d:14:45:6b:fe:f9:
         0d:65:8f:c1:39:53:16:1c:48:7d:84:31:47:fe:57:e6:d0:95:
         14:41:88:0d:78:22:ad:ec:b3:b7:bf:3f:b9:fa:cc:f4:c7:b2:
         7c:73:2b:d0:ac:e0:5b:26:f1:1e:d7:35:2b:1c:bd:c1:a0:22:
         1a:23:3f:4a:34:00:1b:ca:44:20:7c:4b:0f:f4:8a:ad:9f:ad:
         a6:22:dc:ad:13:c5:86:ab:5e:69:97:07:16:3a:74:d2:81:96:
         47:14:10:af:1b:ce:f7:dc:ee:d0:89:9f:f3:df:a0:a0:2a:ce:
         de:92:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:56 2024 by rpki-client on console-ams.rpki-client.org