Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/d8NMVXmzPknfpQfw83vdMQp_x6o.roa
File:                     d8NMVXmzPknfpQfw83vdMQp_x6o.roa (raw, json)
Hash identifier:          75qDRmK1bRGLPBUYIjswBzcK11lNRh3dPwSnHGXMcfU=
Subject key identifier:   77:C3:4C:55:79:B3:3E:49:DF:A5:07:F0:F3:7B:DD:31:0A:7F:C7:AA
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       A7
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/d8NMVXmzPknfpQfw83vdMQp_x6o.roa
Signing time:             Wed 04 Dec 2024 19:31:04 +0000
ROA not before:           Wed 04 Dec 2024 19:31:04 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     3949
IP address blocks:        61.213.172.88/29 maxlen: 29
Validation:               Failed, certificate revoked on Fri 04 Apr 2025 17:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  4 19:31:04 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=77C34C5579B33E49DFA507F0F37BDD310A7FC7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:56:d7:54:cb:4a:85:2f:92:ac:70:11:b9:
                    0f:9c:f3:24:7d:c4:ea:f5:3a:b8:fb:fb:22:66:c5:
                    c7:36:7d:49:49:cf:93:f5:9c:41:a5:cb:dd:02:3b:
                    fb:8d:3b:fa:5a:ca:54:46:9c:0b:0e:83:47:7e:57:
                    36:9b:00:74:43:97:1c:2b:e6:14:f1:12:2e:f4:a0:
                    ef:28:83:7a:07:67:f9:05:1c:3b:9c:3a:eb:d0:8f:
                    40:5a:4e:99:66:01:d8:36:bb:e3:4d:e5:0b:dc:66:
                    34:59:fd:ac:bf:1e:1a:1c:a6:28:cf:a8:e8:bc:43:
                    b1:72:8b:30:91:1a:11:7d:95:42:a6:45:87:d2:79:
                    13:c5:7b:b2:10:48:94:eb:19:2c:04:17:86:d7:48:
                    60:c3:a5:4f:b7:34:81:bc:85:46:f2:a1:5f:46:71:
                    e3:46:fc:95:3f:b4:2d:75:63:21:75:62:18:85:82:
                    33:56:4a:e2:c0:de:26:16:4a:3d:2e:ca:11:6f:4b:
                    53:a3:e9:59:8a:2c:12:7e:c4:65:8a:bf:70:26:4f:
                    43:25:fc:df:07:4f:dc:41:64:7d:26:2c:0d:16:eb:
                    d3:0a:28:c8:1c:01:22:6c:6d:d7:d0:45:65:14:d0:
                    1e:20:03:57:66:b2:b5:e6:38:6a:6a:06:48:1c:17:
                    c4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C3:4C:55:79:B3:3E:49:DF:A5:07:F0:F3:7B:DD:31:0A:7F:C7:AA
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/d8NMVXmzPknfpQfw83vdMQp_x6o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.172.88/29

    Signature Algorithm: sha256WithRSAEncryption
         66:41:70:49:57:03:11:6a:22:01:36:4a:68:d4:e8:c2:e8:33:
         82:c5:83:ab:8f:a6:4f:70:4e:8b:7c:52:98:7d:69:ae:be:ce:
         23:9e:99:b1:c9:59:85:4e:e9:83:6c:50:b0:f9:90:08:bb:90:
         d7:f0:9a:63:24:e3:b5:12:3a:f6:46:ef:6a:b3:51:47:b2:be:
         3c:73:78:d2:95:c8:af:bb:83:44:91:3e:12:58:c3:e6:d7:11:
         d6:f0:b1:4a:51:9b:b0:f4:df:b3:da:4e:31:d7:a3:67:2b:f6:
         5b:40:46:b9:41:b7:3e:38:6c:ac:1d:b8:70:26:33:53:4d:67:
         37:d1:ac:78:16:90:0f:e7:25:66:6e:88:c3:42:24:67:0c:0e:
         62:30:e6:7a:58:18:57:46:31:45:1b:39:f8:7c:eb:98:bf:fd:
         b4:f7:67:73:9e:24:2e:10:73:a8:a9:3d:52:db:3b:9d:88:96:
         ec:0c:0a:84:d2:2f:30:6a:cb:45:d0:84:fe:3d:93:dc:c8:dc:
         32:5c:fc:67:94:04:ef:c7:4f:c9:92:a3:c5:d7:06:22:6a:93:
         2e:f0:7f:95:95:76:7c:97:d4:db:bb:2b:1a:38:6f:5e:a4:bf:
         6a:c6:19:0f:f8:b4:4a:62:91:d8:fa:be:f5:4a:4a:ee:12:5c:
         14:4f:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:15:58 2025 by rpki-client