Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/tGMSV59N9vYMArVaO7tiWPc3ZWs.roa
File:                     tGMSV59N9vYMArVaO7tiWPc3ZWs.roa (raw, json)
Hash identifier:          NBjw7xqwItzr3N/dFR8uuT5BXUHzjDeCM2CSsuvkGc4=
Subject key identifier:   B4:63:12:57:9F:4D:F6:F6:0C:02:B5:5A:3B:BB:62:58:F7:37:65:6B
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       4B
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/tGMSV59N9vYMArVaO7tiWPc3ZWs.roa
Signing time:             Sat 01 Jul 2023 01:31:02 +0000
ROA not before:           Sat 01 Jul 2023 01:31:02 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     7684
IP address blocks:        153.125.128.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Jul  1 01:31:02 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=B46312579F4DF6F60C02B55A3BBB6258F737656B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:c1:b1:c4:88:0e:56:13:4a:f0:62:e9:f9:
                    d6:71:d3:18:fe:a3:0f:23:f7:c7:5e:34:1d:be:10:
                    fc:26:38:a4:30:25:d3:5b:3f:3b:eb:c5:f9:3e:b2:
                    a1:b0:aa:7c:a7:7e:7a:2c:97:a2:37:4f:e2:59:d3:
                    f6:1a:6d:fc:72:81:0c:df:e4:a5:d7:9a:cb:67:c9:
                    db:f0:0e:0d:37:2e:e2:c1:ec:41:73:43:21:0d:05:
                    24:a9:ea:4c:c0:11:49:36:45:fa:bc:dd:15:b8:70:
                    c7:cf:c1:17:45:4f:f7:91:33:b3:ad:46:8c:c0:07:
                    7a:1b:fc:37:65:aa:f7:01:fa:6f:40:61:b8:af:f2:
                    47:f9:23:fa:c1:32:d7:e3:9d:ba:0f:9f:ef:f8:da:
                    2a:67:1d:f9:ff:60:dc:3d:b2:57:26:30:40:b7:a4:
                    3e:b4:b9:16:e3:d5:be:6c:88:ed:6e:2b:ba:bd:e1:
                    e8:b7:72:cd:63:90:0f:ed:a4:20:c0:58:17:ee:86:
                    0d:58:86:73:65:0a:50:5c:da:c2:77:ce:d2:4b:5b:
                    7f:1a:04:31:99:7a:c4:24:70:7d:d6:46:15:72:9f:
                    c7:e5:64:7a:57:89:6d:ac:7c:45:4b:83:1f:85:01:
                    c5:0b:81:02:3b:54:16:3f:31:53:6e:dd:30:88:dc:
                    cd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:63:12:57:9F:4D:F6:F6:0C:02:B5:5A:3B:BB:62:58:F7:37:65:6B
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/tGMSV59N9vYMArVaO7tiWPc3ZWs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.125.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0f:47:ed:c5:d5:82:30:3e:00:51:44:5a:d8:fb:4c:d1:67:31:
         ba:c0:5b:11:ef:05:ab:4c:b1:64:5f:06:cd:c1:b6:cd:0e:45:
         06:7a:b6:f3:f4:80:b2:06:6d:41:20:64:1d:b2:82:44:5e:50:
         f5:af:2c:56:76:9e:12:a5:f6:e5:e6:3e:dc:9b:03:85:3c:0a:
         e3:9b:7e:9e:25:a0:5c:a2:93:89:71:88:14:75:62:15:b0:55:
         ab:c2:1b:18:9c:bc:5e:37:fd:05:fb:b7:c2:c1:59:7c:72:ff:
         9b:eb:bb:88:79:b7:e5:22:06:7b:9b:b3:b8:e0:3e:1a:c2:3e:
         2f:f6:15:42:4a:96:a1:f6:21:03:e5:18:24:72:3c:fc:80:a4:
         86:6a:07:91:5a:cf:0a:ed:f6:8f:97:3f:05:f0:10:af:5f:88:
         a6:12:d0:2a:30:d4:de:44:dc:68:23:67:fc:0a:40:43:69:24:
         49:95:2d:7b:6b:09:56:17:d2:b4:94:e8:8c:c4:40:ef:25:62:
         e8:47:59:42:c8:a0:4a:19:76:6f:4a:9c:11:55:a2:1d:4b:a1:
         3d:55:54:82:af:83:f6:44:52:fe:15:44:13:93:42:ff:79:7a:
         22:01:e7:e8:84:0c:10:47:7b:78:ca:b2:8f:99:ab:8e:42:9c:
         ea:46:77:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org