Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d64lrsu-ezOmMBgOOf6elXhygNg.roa
File:                     d64lrsu-ezOmMBgOOf6elXhygNg.roa (raw, json)
Hash identifier:          ivaOdde7qQ9ZYkaIZwFLWUPfUMalqvWGPe/shTFEGjc=
Subject key identifier:   77:AE:25:AE:CB:BE:7B:33:A6:30:18:0E:39:FE:9E:95:78:72:80:D8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       031C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d64lrsu-ezOmMBgOOf6elXhygNg.roa
Signing time:             Tue 30 Apr 2024 01:50:52 +0000
ROA not before:           Tue 30 Apr 2024 01:50:52 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:17:fcc::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 01:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796 (0x31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:50:52 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=77AE25AECBBE7B33A630180E39FE9E95787280D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7e:db:be:53:a8:9f:4a:e6:8b:a4:42:02:d9:
                    3f:1b:3e:63:08:30:1f:59:13:22:6e:6d:32:db:50:
                    17:ee:76:64:fb:b2:b0:aa:ee:c1:33:22:f3:89:91:
                    06:e6:e9:2e:45:2f:82:eb:55:e8:b3:ad:c7:d4:fe:
                    91:3c:38:3e:51:30:9f:c1:38:23:96:a2:3a:91:53:
                    55:f1:80:84:c9:63:3a:e0:9f:b2:bd:bf:59:ab:2a:
                    22:64:8b:88:50:18:80:af:e5:11:bc:32:e6:42:78:
                    ed:6e:70:de:ae:4c:50:32:40:d3:22:4d:1d:4b:e5:
                    f0:03:18:02:b0:2d:a1:0b:d2:a2:0f:5d:3a:13:26:
                    17:98:31:c1:30:db:69:01:37:f9:55:0e:92:99:1c:
                    84:0d:37:56:9d:f2:ba:5d:e8:d0:48:0e:42:cf:ab:
                    02:42:94:5d:4c:3e:05:63:3f:7f:13:ee:e1:cd:69:
                    ee:48:12:bb:75:13:0c:39:2b:91:f5:33:cd:87:22:
                    df:78:21:7e:f8:01:c2:00:46:8c:6e:ea:d7:1a:3b:
                    b8:29:de:b6:5e:95:18:57:52:2f:30:24:65:36:ec:
                    80:bf:6d:5a:5e:1d:c0:ba:1e:ae:2a:13:3c:b2:dd:
                    d1:30:3d:8c:08:5d:d1:02:04:f7:53:92:0d:b8:47:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AE:25:AE:CB:BE:7B:33:A6:30:18:0E:39:FE:9E:95:78:72:80:D8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d64lrsu-ezOmMBgOOf6elXhygNg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:17:fcc::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:42:d8:79:e7:dc:91:1e:2e:83:0f:1c:15:50:cc:16:a0:8f:
         42:fb:76:be:16:91:e9:81:8c:3b:70:d7:81:84:ee:c5:7f:7c:
         18:9a:3b:9e:ac:90:8b:dd:01:07:1a:21:45:d5:b8:88:65:b5:
         31:e4:ef:8a:c9:4c:b2:d5:5d:94:b9:6a:4c:fb:af:92:7b:b9:
         db:72:ee:df:d3:4b:ca:00:12:92:a0:99:be:94:0d:fe:70:dc:
         34:5a:93:93:1a:18:9d:a3:a7:87:b5:97:d9:0c:ff:3e:c0:a5:
         f4:33:ea:80:99:de:34:c9:6d:c7:ec:af:b5:c6:84:4a:0f:9b:
         c9:2b:0b:68:8c:b8:12:c4:8d:64:58:7e:98:22:57:85:9b:a2:
         70:e0:07:9d:4f:85:b3:9e:32:72:99:c3:f7:f9:dc:a6:84:85:
         16:14:5a:01:b7:7c:64:af:0f:09:10:01:35:d7:4d:2b:b2:fb:
         d6:40:20:c0:07:15:b1:49:1d:aa:ab:da:0f:ed:21:36:a7:9b:
         14:d5:36:41:8e:e3:bf:f8:bb:f3:ad:7e:a2:21:7e:d8:e1:e5:
         e4:ee:6c:d4:36:6b:7b:08:97:be:14:b2:62:1b:aa:1a:31:9b:
         25:c8:88:2c:d2:fc:1a:b9:fc:a9:8e:29:04:99:87:22:66:c4:
         54:ca:50:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:51 2025 by rpki-client