Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/OcqJ8mqONe_CxCIjXZKaY7sHIeM.roa
File:                     OcqJ8mqONe_CxCIjXZKaY7sHIeM.roa (raw, json)
Hash identifier:          ddcLzPweyWPIx+Xuno8c02V2us/k2qyTVRi4TzR+VOM=
Subject key identifier:   39:CA:89:F2:6A:8E:35:EF:C2:C4:22:23:5D:92:9A:63:BB:07:21:E3
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       0A
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/OcqJ8mqONe_CxCIjXZKaY7sHIeM.roa
Signing time:             Wed 28 Jun 2023 01:13:42 +0000
ROA not before:           Wed 28 Jun 2023 01:13:42 +0000
ROA not after:            Sat 15 Jun 2024 06:45:48 +0000
asID:                     131965
IP address blocks:        183.181.96.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 06:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: Jun 28 01:13:42 2023 GMT
            Not After : Jun 15 06:45:48 2024 GMT
        Subject: CN=39CA89F26A8E35EFC2C422235D929A63BB0721E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:35:0c:b7:ed:ac:6f:3e:5f:9d:3e:6f:de:
                    94:39:df:c4:43:f7:e7:f5:bd:55:8a:31:11:59:47:
                    a2:b2:64:10:76:e2:f0:7f:7c:fa:85:62:bc:35:c3:
                    60:ed:65:42:6a:f4:cf:77:52:04:07:d6:ee:8b:06:
                    5c:08:ff:eb:71:6e:85:3c:1b:ef:5b:e0:05:57:fd:
                    ed:aa:08:c3:b0:c9:55:c3:21:b9:32:19:ef:85:98:
                    95:4b:0a:48:4c:9b:92:54:7e:51:c3:2b:56:e4:7d:
                    16:6a:32:52:65:fe:d8:99:e2:33:2c:ff:dd:9c:d9:
                    d3:79:5f:d3:d2:88:c6:42:18:27:14:18:e8:00:7a:
                    af:dc:5a:57:4e:e9:ba:1d:bf:17:d9:bf:e5:65:00:
                    0b:14:51:c2:2f:ab:39:84:05:62:fd:86:48:37:0a:
                    6e:72:d6:d9:48:d5:c6:fa:fa:1c:0a:a7:43:99:79:
                    13:38:1f:f1:6e:c9:40:a4:f6:a3:00:f1:31:92:1c:
                    a2:c4:d3:09:30:13:ef:a1:dd:31:c1:18:e3:e8:74:
                    df:d5:c0:30:d4:ec:11:5d:17:fc:ab:0d:75:cd:df:
                    bb:41:f0:9d:6e:01:06:92:9b:a0:8c:70:be:9c:57:
                    2d:e5:ef:ff:ef:6f:f0:23:97:ea:4d:ed:ac:a3:0a:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CA:89:F2:6A:8E:35:EF:C2:C4:22:23:5D:92:9A:63:BB:07:21:E3
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/OcqJ8mqONe_CxCIjXZKaY7sHIeM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:4b:db:41:3e:ad:f9:19:d0:6a:db:14:58:d7:df:06:68:b5:
         99:77:4d:49:f3:3b:e3:1a:55:5a:3e:46:de:ec:d9:97:b3:ea:
         a1:19:cb:33:a7:b6:b8:d2:df:b5:89:a3:5a:9f:68:82:44:2c:
         90:8f:18:3f:2c:a9:e6:9b:7a:bf:ba:a4:4e:16:ae:0a:03:a3:
         b9:51:48:3e:ef:82:24:f5:eb:71:c7:a1:39:76:b9:a4:24:fa:
         59:1f:3c:cd:08:58:90:6e:24:3a:08:4f:be:1b:d4:42:cb:7d:
         3f:53:e0:c3:b5:a2:da:1c:79:76:26:61:59:ac:aa:6a:0f:2f:
         bf:4b:c0:1e:80:a9:a8:86:a2:b7:e2:9a:df:67:51:99:6f:2b:
         25:58:6f:59:92:26:71:52:ff:b4:a0:d3:41:84:3b:d2:76:39:
         20:b6:ad:f9:71:4d:b6:9b:9e:60:4f:4d:ea:10:4f:d8:80:d4:
         98:5a:f9:26:b5:96:97:e1:99:bf:d3:85:1a:7f:07:17:00:e6:
         2f:e6:0b:60:e9:7f:b4:a5:85:19:9d:d5:8b:7e:8f:b7:78:60:
         6e:81:fa:c1:c9:55:e2:24:5b:20:05:c7:e4:e9:c8:37:2e:22:
         5d:48:74:d5:93:ff:f2:0c:b3:e9:f1:c9:c1:e1:f6:8e:72:93:
         aa:e5:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org