Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/eH6iLjg4uC3VwdReIUYUo-_FyRs.roa
File:                     eH6iLjg4uC3VwdReIUYUo-_FyRs.roa (raw, json)
Hash identifier:          xqLouxJuOCTbbHzneLCd597n/Sw7rN2eXqn/mWdgFf4=
Subject key identifier:   78:7E:A2:2E:38:38:B8:2D:D5:C1:D4:5E:21:46:14:A3:EF:C5:C9:1B
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       A6
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/eH6iLjg4uC3VwdReIUYUo-_FyRs.roa
Signing time:             Wed 04 Dec 2024 19:31:03 +0000
ROA not before:           Wed 04 Dec 2024 19:31:03 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     3949
IP address blocks:        61.213.172.80/29 maxlen: 29
Validation:               Failed, certificate revoked on Fri 04 Apr 2025 17:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  4 19:31:03 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=787EA22E3838B82DD5C1D45E214614A3EFC5C91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b6:ad:a7:79:e8:6b:43:26:1c:e3:e3:e5:fa:
                    9b:ae:3d:c5:d6:59:88:2c:ba:bb:22:24:5e:59:92:
                    ef:a3:24:9d:ad:e5:68:f5:16:87:b8:5d:fd:d4:9c:
                    8f:d8:62:09:21:1e:23:ed:b2:8f:22:d1:07:32:46:
                    e0:b0:04:66:c7:40:54:21:5c:8d:20:1b:33:cf:8f:
                    9e:4a:c9:b8:76:99:d1:3f:ee:a7:f5:31:8a:6d:0b:
                    d7:19:4d:e9:05:c1:63:7a:b5:a1:ed:aa:ba:65:39:
                    ff:32:d4:fc:60:06:ff:15:fa:74:0f:41:04:60:31:
                    cc:bd:a5:a1:2c:26:c2:5c:39:0b:31:e7:ef:fe:4b:
                    22:c4:99:68:dd:43:59:3b:8c:cc:55:17:b6:f1:bc:
                    0d:b2:1d:fb:b7:70:83:c4:58:5c:dc:16:18:2b:8a:
                    36:71:89:01:56:46:78:0d:3e:11:72:85:64:4b:95:
                    88:ad:61:56:40:0b:df:4e:63:a4:e7:54:f9:ea:b6:
                    96:11:bb:b9:c2:aa:7a:6f:9b:be:93:ab:8d:1b:2c:
                    06:8d:99:a7:3f:05:86:f9:e7:26:87:14:b2:05:de:
                    5c:fa:3c:e8:14:47:f2:c9:76:89:28:b0:b8:1d:3c:
                    69:ed:25:80:a2:a5:25:07:92:12:46:a0:54:5d:d7:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7E:A2:2E:38:38:B8:2D:D5:C1:D4:5E:21:46:14:A3:EF:C5:C9:1B
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/eH6iLjg4uC3VwdReIUYUo-_FyRs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.172.80/29

    Signature Algorithm: sha256WithRSAEncryption
         8b:d1:7d:ef:db:03:8b:80:53:75:10:ef:86:ba:cd:65:7c:a2:
         d2:8a:18:dc:9c:aa:e7:3b:2f:b5:4f:5d:9e:20:a7:f9:ca:eb:
         1c:ef:01:1c:ce:eb:e3:37:84:9a:dd:8a:48:7e:21:10:97:08:
         73:f9:0e:3e:7d:1f:c2:12:8e:70:85:ee:4a:fb:27:6a:a5:3f:
         75:2a:82:a7:fc:f6:60:5a:a9:51:19:7e:47:5c:cf:bd:1e:df:
         e5:9e:94:4e:f9:6d:01:dc:54:29:68:14:73:0f:00:39:f3:39:
         96:eb:ce:7b:39:eb:3f:ff:59:d8:d6:9c:94:20:68:e8:18:33:
         73:35:30:ea:b9:2c:7d:20:32:30:81:e7:36:86:57:dc:3d:14:
         54:28:22:14:ea:f4:6d:ba:bc:67:33:f8:36:59:69:3b:77:89:
         76:27:57:12:d0:b4:ef:93:94:ee:d1:39:bb:99:9e:73:8c:c4:
         39:a0:bd:80:54:e4:5d:65:25:f6:d2:48:52:96:1f:39:6b:9a:
         4c:f3:6b:7e:42:dd:4c:0f:f8:f2:85:0c:88:c8:4c:2a:1d:b7:
         55:25:5a:4e:9e:c3:10:ed:7d:79:e3:e2:34:66:9e:cb:55:06:
         66:eb:1c:be:eb:f4:9c:c2:7c:a1:d8:6a:f6:4e:b1:56:9d:29:
         9b:6e:64:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:20:05 2025 by rpki-client