Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/FaIjcf0QgPSg2EOsuQITBfCSwag.roa
File:                     FaIjcf0QgPSg2EOsuQITBfCSwag.roa (raw, json)
Hash identifier:          ZEY7uGRunbyFftXjaDXAAZ+brNf33NlvsDj/I6/qyKs=
Subject key identifier:   15:A2:23:71:FD:10:80:F4:A0:D8:43:AC:B9:02:13:05:F0:92:C1:A8
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       14
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/FaIjcf0QgPSg2EOsuQITBfCSwag.roa
Signing time:             Tue 02 Apr 2024 00:05:07 +0000
ROA not before:           Tue 02 Apr 2024 00:05:07 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        157.8.48.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 19 Jul 2024 09:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Apr  2 00:05:07 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=15A22371FD1080F4A0D843ACB9021305F092C1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:6b:c5:4c:59:ef:37:8b:68:17:bb:0b:35:
                    f5:9e:5b:53:ca:0e:1a:78:0d:11:04:7c:79:34:fe:
                    ef:ed:97:62:62:e1:90:3b:4a:9e:82:73:86:d6:31:
                    80:02:1e:db:d2:a6:46:f4:59:47:e8:18:cc:d5:33:
                    2d:1b:f8:13:f8:97:78:00:12:a6:c2:c1:a6:07:bf:
                    86:cf:24:bc:57:63:b0:69:74:39:4c:8c:6e:2e:c2:
                    1d:9c:c3:5c:a4:fd:19:0e:f1:3e:52:1f:54:02:96:
                    39:2b:06:50:ce:ca:ac:6c:ce:b4:af:86:42:3e:c9:
                    21:20:43:a3:d2:58:4f:66:1b:f9:31:96:45:d9:be:
                    63:c7:db:24:95:2d:d8:57:c1:ca:ae:85:ac:ff:75:
                    d8:c0:8a:a1:36:91:96:f7:cf:7c:f2:2a:4b:5c:da:
                    93:86:ca:bf:06:3b:29:94:91:9b:47:55:cc:14:8f:
                    b9:1a:92:ef:c6:ed:ff:47:b6:b1:e5:3c:99:ef:b3:
                    de:e0:91:2a:57:d5:08:5c:25:23:e2:6b:91:d2:6a:
                    ba:3e:93:df:cd:61:7f:e6:7c:e6:0e:b1:aa:d9:ab:
                    ce:59:c6:90:95:30:1b:2b:92:87:4a:b6:04:01:e8:
                    3d:5c:86:19:bc:47:b0:d0:e0:d7:bd:31:19:a6:bc:
                    f2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A2:23:71:FD:10:80:F4:A0:D8:43:AC:B9:02:13:05:F0:92:C1:A8
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/FaIjcf0QgPSg2EOsuQITBfCSwag.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.8.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:40:0d:b4:44:32:12:8a:8c:d1:46:fb:8f:d6:1c:1e:f1:
         ad:8c:3a:2b:fd:61:46:eb:c0:da:32:02:37:ae:a0:c3:6b:8f:
         83:de:6c:f5:38:83:e9:55:ea:38:bf:b1:fb:ac:64:7c:44:51:
         56:bb:3d:2d:93:d2:0a:07:ec:fd:c1:a4:74:3a:fd:2a:9a:c0:
         c9:96:ff:f5:69:de:c1:8d:0e:0d:8e:13:2d:a0:ce:72:5b:ea:
         f1:29:20:f5:b5:78:cf:75:48:19:d6:ab:57:85:c4:42:4d:56:
         e5:9f:61:19:4f:88:70:50:ff:ac:55:a8:22:c5:53:14:10:78:
         af:f0:75:9a:e5:f9:61:1a:89:29:6e:35:f9:d4:31:e2:68:8d:
         72:79:2c:e2:3f:da:26:7a:40:c3:10:55:ac:dc:89:c3:28:69:
         d8:b0:b1:40:28:1a:a1:b8:c5:47:1a:39:45:aa:a3:cc:65:ce:
         cf:b5:4f:ae:6d:46:3c:41:60:25:50:f9:86:38:1b:a0:08:59:
         2d:4e:a1:6a:04:ef:a7:4c:3a:0a:97:a6:99:77:eb:8d:6e:c7:
         29:ba:f5:17:fb:07:b3:65:ff:df:89:02:00:b0:2d:23:90:03:
         91:c0:52:35:5f:ac:6b:30:99:f8:84:69:77:1a:41:44:c8:25:
         4b:ce:19:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 10:50:53 2024 by rpki-client on console-fra.rpki-client.org