Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BUlLlRgypk0YjNx2CCc7IK9kvBg.roa
File:                     BUlLlRgypk0YjNx2CCc7IK9kvBg.roa (raw, json)
Hash identifier:          ZaKYKZaf/0j8TesD/R4P7299SFonH82d0ejpbjqiz84=
Subject key identifier:   05:49:4B:95:18:32:A6:4D:18:8C:DC:76:08:27:3B:20:AF:64:BC:18
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       030C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BUlLlRgypk0YjNx2CCc7IK9kvBg.roa
Signing time:             Tue 30 Apr 2024 01:50:44 +0000
ROA not before:           Tue 30 Apr 2024 01:50:44 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f008::/46 maxlen: 46
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 01:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:50:44 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=05494B951832A64D188CDC7608273B20AF64BC18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:14:cc:61:49:24:96:5c:c1:9e:0c:3d:58:92:
                    32:6c:27:28:9b:7e:c7:33:50:a8:d6:ff:30:03:d1:
                    eb:56:c2:b1:9a:9a:27:9a:40:3b:46:9d:51:5c:23:
                    95:d0:2d:a3:39:49:6e:7d:95:c5:e3:6e:a1:11:a6:
                    e5:c8:be:58:81:96:90:c7:17:aa:3b:2c:08:81:6a:
                    34:05:13:a0:94:1c:cb:9e:c7:2a:ad:22:5f:85:10:
                    8e:0c:5e:f8:3a:cc:a6:8f:75:11:b4:2a:58:ae:0d:
                    0c:29:70:40:1d:e3:50:11:f0:80:33:d6:c5:7d:5f:
                    4c:4d:2e:47:60:97:02:5b:1e:2e:3b:f5:d6:86:a0:
                    32:09:4d:eb:c2:87:30:54:f8:55:2f:62:7e:8d:f6:
                    ab:f4:98:61:61:19:7c:d1:8f:7f:fd:53:96:17:2f:
                    1d:43:9c:ed:52:2a:43:2e:f4:51:e2:a7:17:41:c2:
                    a3:34:1a:cb:86:3a:0a:a1:dd:4d:59:d9:3f:3a:b2:
                    b3:b6:f7:e8:72:f0:6d:ff:f9:f9:b6:ee:46:83:f0:
                    f7:1b:bb:36:95:1b:1b:be:d2:d1:96:0b:a7:e5:ce:
                    ff:23:60:97:15:8a:9e:4f:14:f8:63:31:02:93:02:
                    e5:92:12:b3:48:26:d4:fd:35:54:b4:e3:0b:d9:88:
                    3c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:49:4B:95:18:32:A6:4D:18:8C:DC:76:08:27:3B:20:AF:64:BC:18
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BUlLlRgypk0YjNx2CCc7IK9kvBg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f008::/46

    Signature Algorithm: sha256WithRSAEncryption
         56:e3:af:bc:39:4e:3f:2e:a4:e7:21:7a:90:c9:fc:eb:eb:71:
         5a:a6:14:a7:ba:cd:0d:7b:4e:7e:be:12:9a:b0:8e:7b:10:40:
         03:6b:38:8e:e3:9b:08:6d:f6:70:37:d0:55:0b:fc:00:3f:26:
         1a:7a:51:ad:0c:d4:b6:66:a2:03:bd:7b:2c:e4:10:22:3e:93:
         5e:99:72:31:95:41:dc:3f:e4:de:8b:6c:99:8c:47:57:d6:7b:
         56:9f:06:6f:33:12:b7:57:86:d0:df:df:e7:80:e2:e1:0e:74:
         02:36:f6:b9:c0:0f:e3:32:a5:9c:c1:a9:12:88:2b:90:79:b6:
         1e:7d:d7:ba:1e:2e:3a:fa:60:e6:69:44:2d:fd:4e:ac:cd:07:
         68:5b:e2:cf:e3:b4:31:bb:a9:3a:f4:f1:92:b1:3f:0f:c0:21:
         b3:8d:ce:75:a3:78:64:4d:d0:f4:5e:2a:ff:9b:f0:84:b9:85:
         60:07:1b:3c:ef:26:5e:71:76:b8:4a:1f:a8:df:74:88:54:1a:
         b1:6e:81:ef:4f:bf:45:6d:5f:41:1d:bb:e8:9a:d3:8d:81:fa:
         97:62:b5:76:f5:94:d7:37:6b:72:a5:5b:7f:36:3c:c0:17:1f:
         2f:b4:12:6a:8b:bc:91:6a:13:6c:14:b1:c6:d1:28:6d:44:37:
         76:a2:81:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:59 2025 by rpki-client