Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/Tg8FCD0FKzulygdK3T4uCXGDcI4.roa
File:                     Tg8FCD0FKzulygdK3T4uCXGDcI4.roa (raw, json)
Hash identifier:          RQiIK8SO/cAMSEsAVDLRcuOj8FhF9Rbk4rg8AgZSFGE=
Subject key identifier:   4E:0F:05:08:3D:05:2B:3B:A5:CA:07:4A:DD:3E:2E:09:71:83:70:8E
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       8F
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Tg8FCD0FKzulygdK3T4uCXGDcI4.roa
Signing time:             Sat 01 Jul 2023 01:28:34 +0000
ROA not before:           Sat 01 Jul 2023 01:28:34 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        220.102.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:34 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=4E0F05083D052B3BA5CA074ADD3E2E097183708E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:ba:6c:d5:8e:11:f6:7c:d8:cb:42:b5:ed:
                    6c:bb:2b:fc:bf:f0:f4:f4:72:e0:4e:d6:29:08:8a:
                    8c:ee:24:ad:a5:c2:90:0a:71:1b:c9:c3:24:92:84:
                    4b:a8:a7:7c:d2:3b:b6:ed:bd:d1:7c:02:ea:32:c5:
                    12:2b:d9:5c:5d:dc:f6:e4:e0:f9:d4:b8:94:69:cc:
                    09:87:be:39:d8:2b:db:ee:07:a5:eb:20:f7:d1:4e:
                    92:3c:2c:35:09:a3:e1:41:1e:33:d3:71:e5:64:30:
                    3a:94:50:28:95:3b:2b:c2:36:26:81:da:5a:56:2e:
                    07:4f:de:34:9f:a7:b4:c0:e0:c4:d5:dd:38:34:3d:
                    26:24:a5:92:1a:6b:60:39:2f:97:5f:a5:5f:70:7a:
                    a1:a2:8e:01:c7:41:d3:8f:3e:fd:95:3a:ac:79:f1:
                    66:63:d0:4b:9d:21:51:ca:2e:2e:a4:e8:32:cc:c5:
                    c5:41:d0:3b:ef:d1:08:e7:a7:9d:5b:c6:20:d8:f9:
                    55:69:d4:40:b5:26:6c:fb:e5:a0:b7:27:f7:20:b7:
                    0e:c1:5a:8f:cb:36:4d:dd:b0:3c:b0:46:d9:22:91:
                    81:48:fd:a6:8f:47:34:f4:d5:9d:8e:b5:9f:80:3f:
                    cd:90:cf:1f:e8:70:ad:86:7f:58:de:87:93:84:4c:
                    95:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0F:05:08:3D:05:2B:3B:A5:CA:07:4A:DD:3E:2E:09:71:83:70:8E
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Tg8FCD0FKzulygdK3T4uCXGDcI4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cd:b1:9a:47:68:c0:94:c0:e0:92:ba:ac:48:3e:1f:19:5c:32:
         bc:07:8e:61:27:3b:39:f8:42:74:5b:fa:5c:07:d7:22:97:1d:
         b0:dc:82:de:da:8a:59:55:a2:d0:58:4f:f4:81:97:bd:43:ac:
         1f:55:1b:da:23:ff:04:37:12:07:5d:58:67:28:71:3c:f2:d0:
         d2:f2:ed:e9:4a:1a:08:b5:06:a7:3e:91:ce:76:e4:29:3a:b4:
         79:72:1c:86:3f:41:0e:6f:88:71:02:af:1c:0b:64:86:c4:32:
         2c:02:46:ac:aa:45:f3:c2:87:36:a5:8a:20:10:f1:28:94:ec:
         77:92:88:36:11:67:a4:24:8c:a5:35:54:80:06:1a:0f:38:b2:
         34:b6:38:6f:3e:0d:c5:7c:fd:d9:66:89:a1:46:4e:8f:da:6d:
         c3:44:05:1a:51:f0:98:d5:7a:99:32:f5:84:b7:20:f3:c0:16:
         e7:81:d7:14:79:ed:fb:b5:4b:ed:c9:e3:c7:e5:e2:42:f3:78:
         dc:7f:73:3f:ed:94:9f:e8:54:ee:e5:84:72:ef:ba:f2:de:c0:
         9c:da:28:85:0a:6c:58:5f:0a:45:e0:3a:f1:e6:11:35:99:9e:
         bd:da:04:db:20:6f:e4:ad:a2:4c:e1:5b:7a:f1:a0:8e:6c:de:
         a1:c0:a4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 04:12:41 2024 by rpki-client on console-fra.rpki-client.org