Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/T9LfzzkqBtQ3mNo-xyO40uRvYzk.roa
File:                     T9LfzzkqBtQ3mNo-xyO40uRvYzk.roa (raw, json)
Hash identifier:          YSBSJzf6dCMzGsAhjHr3/8ZggI/y0ESYOxUU+Fl0ItQ=
Subject key identifier:   4F:D2:DF:CF:39:2A:06:D4:37:98:DA:3E:C7:23:B8:D2:E4:6F:63:39
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       80
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/T9LfzzkqBtQ3mNo-xyO40uRvYzk.roa
Signing time:             Sat 01 Jul 2023 01:28:27 +0000
ROA not before:           Sat 01 Jul 2023 01:28:27 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        119.244.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:27 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=4FD2DFCF392A06D43798DA3EC723B8D2E46F6339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:60:46:59:7c:a4:a8:82:0d:4f:68:5b:ab:
                    8c:34:01:cc:fc:65:08:27:fb:0d:e2:54:64:dd:f7:
                    5d:51:3a:17:12:df:b3:31:79:88:23:cd:87:4f:fc:
                    e3:79:32:4e:a9:fb:e3:14:05:ed:c7:ef:84:84:23:
                    e5:71:8a:8e:c5:c8:d8:0c:25:5b:97:6c:92:6a:40:
                    e5:32:d9:10:83:66:07:44:ee:de:63:12:5f:ff:1a:
                    54:91:00:b8:9c:bc:bc:c0:63:63:34:81:73:e1:c9:
                    7a:93:b2:d6:38:fc:a0:a9:a9:bb:ba:e2:c5:50:55:
                    b5:9b:21:21:1d:c8:da:04:d1:00:87:c7:7b:e8:4b:
                    26:e1:85:6d:e8:7a:d4:d5:66:d0:33:a1:8b:87:ae:
                    e7:1e:23:3f:18:f0:21:12:2e:0d:35:28:01:29:e7:
                    78:19:e1:78:fe:0f:c4:fa:da:58:9d:a2:6b:ba:0d:
                    68:d3:0e:c8:58:10:19:25:1f:3c:3c:6a:a2:e6:dd:
                    26:22:58:87:6d:e6:b4:d0:2c:20:2a:37:c6:7f:34:
                    d3:ae:00:71:e9:cc:98:a1:77:37:d7:dc:98:56:95:
                    b6:e6:de:30:b1:4b:44:00:ee:78:8e:9e:7b:4b:cc:
                    cb:ba:01:e7:92:c9:e0:cc:af:97:cb:57:2b:75:35:
                    69:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D2:DF:CF:39:2A:06:D4:37:98:DA:3E:C7:23:B8:D2:E4:6F:63:39
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/T9LfzzkqBtQ3mNo-xyO40uRvYzk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:78:e6:c5:9b:1d:c2:21:40:9e:d9:7f:35:33:dd:70:07:7f:
         86:80:cb:5e:02:c3:f5:45:b5:67:f5:8c:d6:c9:c2:af:bd:77:
         3b:53:f1:df:0b:48:dd:df:fa:87:c3:4f:d0:cf:ae:25:52:23:
         22:9a:5e:fd:be:62:74:a1:0f:f9:6a:90:6f:07:3a:0e:70:7c:
         44:17:63:23:de:d4:f6:f1:01:16:ee:c7:fd:85:19:da:d9:cf:
         5c:5a:b7:6b:bd:f1:d1:77:87:3f:f9:7d:df:b3:a6:e8:c1:7e:
         1b:2c:06:e8:b0:8d:b6:97:49:63:c4:84:b6:f1:1e:9d:2c:95:
         67:97:6f:c1:a9:11:bd:aa:1b:a1:fc:8f:15:25:67:9e:d2:7f:
         9a:25:e4:e0:66:82:34:74:a6:75:bc:df:8f:5b:62:9b:d5:1c:
         c6:df:64:b2:75:eb:96:21:b3:dd:d0:22:ff:67:37:e0:99:2e:
         44:1b:8f:99:d9:d3:d5:b2:47:cd:1c:14:32:e6:d8:29:5e:e1:
         ad:01:54:4a:95:e7:2c:58:64:d9:02:28:b7:fd:84:6b:06:d3:
         de:f1:53:cf:22:58:62:39:c9:ed:20:ac:73:12:e9:ef:62:09:
         08:79:0e:4b:75:69:ce:eb:61:99:85:8d:63:b4:c7:69:6c:e7:
         1a:e2:7e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org