Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/pBCIFkqPrqQwOG_1kE5Qsh3-zU0.roa
File:                     pBCIFkqPrqQwOG_1kE5Qsh3-zU0.roa (raw, json)
Hash identifier:          ZXwMYA78UscYdcTkjSTp0LReRUeLtBAhrUj5ttVBfP8=
Subject key identifier:   A4:10:88:16:4A:8F:AE:A4:30:38:6F:F5:90:4E:50:B2:1D:FE:CD:4D
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       22
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/pBCIFkqPrqQwOG_1kE5Qsh3-zU0.roa
Signing time:             Wed 19 Jul 2023 06:09:42 +0000
ROA not before:           Wed 19 Jul 2023 06:09:42 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     131934
IP address blocks:        219.100.16.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Jul 19 06:09:42 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=A41088164A8FAEA430386FF5904E50B21DFECD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:67:3f:98:0c:fe:4a:b1:3d:ef:b0:5e:31:
                    6e:df:28:c5:5a:62:d2:10:48:47:f3:46:79:02:b8:
                    e5:73:15:d1:f2:81:02:88:04:47:ef:02:05:08:fd:
                    f8:7b:40:bc:63:5f:42:1c:1a:b0:a0:43:b5:3a:5a:
                    14:bd:3c:91:4d:e3:e3:8f:cf:1b:bf:bb:c8:e6:13:
                    4f:69:25:83:f7:ae:69:2d:4a:9f:b7:03:c5:fb:1f:
                    fa:60:c0:16:61:81:1d:e3:07:4d:55:7d:2d:84:c7:
                    40:33:30:32:48:51:eb:79:c3:98:6b:eb:1b:d4:14:
                    33:ab:8f:4b:ef:db:72:6e:c4:5f:a3:a6:77:52:e0:
                    40:93:e5:81:3b:22:4e:b3:15:34:35:4d:f1:1e:d9:
                    60:ab:9c:6f:0c:42:df:49:7e:af:01:23:45:6f:70:
                    66:40:49:14:5c:c4:63:18:e2:67:ef:d6:96:36:83:
                    01:e2:6a:30:bc:ee:e1:1a:e3:4a:28:e1:59:09:fb:
                    e2:c8:2b:7b:2f:a0:e8:57:77:49:0e:6f:fe:43:9a:
                    3e:0d:2c:ce:20:e7:0b:93:13:d9:c0:dd:c3:7c:d2:
                    bb:fa:9b:5e:54:1f:9a:b2:61:84:de:39:73:06:9b:
                    fb:20:39:22:df:c2:e0:d2:cc:d2:53:48:be:17:a6:
                    38:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:10:88:16:4A:8F:AE:A4:30:38:6F:F5:90:4E:50:B2:1D:FE:CD:4D
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/pBCIFkqPrqQwOG_1kE5Qsh3-zU0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:14:cc:bd:4e:8b:37:ec:9d:79:8e:d6:ee:c6:21:15:f7:20:
         3b:33:a3:5e:eb:f9:9b:60:3c:f1:38:36:7f:30:fe:45:22:f8:
         30:05:17:f0:22:d4:d4:45:13:24:2d:75:b8:57:71:c1:cb:af:
         70:05:cd:86:eb:f7:27:28:ae:f3:3f:8b:27:07:55:12:1b:cd:
         88:7a:81:8e:c4:0f:8f:10:5c:32:c4:93:cf:05:80:25:d3:76:
         c1:12:f7:f2:6b:80:56:28:53:0e:d8:90:db:5c:5d:9a:ef:b4:
         09:18:9e:9f:8d:a2:74:fa:0d:a3:fa:f0:bb:fb:b7:4c:db:d5:
         02:1a:3e:44:c5:30:52:31:c7:8e:df:c3:7b:dc:39:40:b8:c5:
         8a:26:72:46:8f:fb:1f:05:d7:5c:ad:21:90:35:aa:f9:f2:ef:
         20:fb:c3:ac:2a:85:2a:dd:be:c7:80:75:57:03:93:84:83:76:
         0c:6b:39:be:eb:06:5a:42:76:d0:22:f2:75:8f:6a:b1:10:25:
         cd:f2:3f:cc:3e:50:6c:dd:84:92:7c:29:08:a3:82:5c:21:a3:
         ec:8d:8c:e0:cf:1b:fc:7b:5d:a5:45:72:75:f3:36:63:4d:d0:
         e5:13:fa:80:bb:7e:82:15:cd:c9:62:ae:e3:7a:80:4c:c6:46:
         78:c4:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:42 2024 by rpki-client on console-ams.rpki-client.org