Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30260/pGuMOfnZI--o5MVKrsPLpdktp38.roa
File:                     pGuMOfnZI--o5MVKrsPLpdktp38.roa (raw, json)
Hash identifier:          9Ds8vbcCruBsy0H/uKxmvrdJpeKXCWb+/gK43uzx+Ho=
Subject key identifier:   A4:6B:8C:39:F9:D9:23:EF:A8:E4:C5:4A:AE:C3:CB:A5:D9:2D:A7:7F
Certificate issuer:       /CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
Certificate serial:       3F
Authority key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/pGuMOfnZI--o5MVKrsPLpdktp38.roa
Signing time:             Mon 30 Sep 2024 01:30:40 +0000
ROA not before:           Mon 30 Sep 2024 01:30:40 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     7514
IP address blocks:        2001:2f0::/32 maxlen: 128
Validation:               Failed, certificate revoked on Fri 14 Mar 2025 09:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
        Validity
            Not Before: Sep 30 01:30:40 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=A46B8C39F9D923EFA8E4C54AAEC3CBA5D92DA77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:24:de:69:cc:12:50:87:a8:90:0c:70:27:b3:
                    af:0e:7e:a7:32:12:4d:27:33:2c:e0:96:62:6b:e9:
                    f3:f7:96:85:11:08:fc:6e:67:e6:6a:f1:80:19:12:
                    61:fb:50:60:e8:a8:da:fd:5f:f0:b2:e3:4a:d9:5a:
                    d0:b8:67:aa:ec:08:5b:37:1a:8a:25:62:2b:7a:a8:
                    f9:36:47:28:b6:8f:60:c9:a2:76:74:7f:f3:59:c3:
                    79:f4:1c:09:66:06:81:20:34:20:21:1d:ee:01:6c:
                    bc:f2:93:ea:c8:b2:69:53:49:6f:84:7e:bc:87:f9:
                    d0:df:b9:62:1e:fa:21:7f:96:2d:79:e2:0e:bc:9b:
                    2c:42:4b:cf:fd:0a:1a:9c:df:0f:c3:ab:bd:f1:0a:
                    08:fe:54:09:e7:6f:35:2d:89:7e:cf:75:82:85:f9:
                    e2:23:86:35:0b:cc:c6:31:0f:3a:d9:7b:08:95:70:
                    fa:e6:2f:6c:81:6d:11:b1:f1:64:fd:2a:d5:3b:e3:
                    d6:e0:a9:26:ce:0d:f4:1d:7f:bc:7b:1c:71:21:dd:
                    6a:c1:d0:12:bc:e3:4f:ec:91:9c:df:77:2c:3f:f9:
                    91:ae:47:a9:cd:9d:d9:f3:75:74:4f:51:84:fa:1e:
                    fb:1b:1d:75:9e:a5:be:9a:96:e4:dc:46:bd:6b:c8:
                    a9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6B:8C:39:F9:D9:23:EF:A8:E4:C5:4A:AE:C3:CB:A5:D9:2D:A7:7F
            X509v3 Authority Key Identifier:
                keyid:97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/pGuMOfnZI--o5MVKrsPLpdktp38.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         db:32:3b:42:87:2f:4f:7c:ee:ea:07:94:27:6a:ed:d0:20:45:
         63:40:db:c8:f5:7e:79:67:a8:a0:07:b4:55:78:00:32:41:15:
         02:f8:56:ee:8c:5f:9f:61:92:b2:af:05:4a:bc:1e:41:6a:74:
         75:92:d5:65:59:3e:6c:03:13:a6:0d:40:1c:ee:b4:7a:5b:0d:
         37:18:9a:78:d0:62:6e:6d:de:9d:dc:7b:86:04:06:cf:f4:94:
         83:ac:19:11:1b:82:64:da:84:7f:be:d7:37:24:e0:d8:61:f7:
         9a:e2:a6:26:37:d4:14:9e:9b:62:f8:68:9d:c7:10:a2:ea:d6:
         27:1d:60:e1:8c:1e:20:3a:64:c4:61:7c:34:19:8c:d0:f0:fe:
         bf:58:3f:d3:9b:4d:93:78:06:c7:4f:55:67:0a:a1:13:c2:a9:
         23:06:1e:78:2d:0a:de:91:e2:e1:de:e9:56:59:7f:e0:08:c9:
         8f:f7:de:15:6d:95:b8:cf:06:25:5f:7b:e9:0a:ae:61:f7:f0:
         40:0c:88:11:55:a7:20:90:2a:c7:95:36:a7:3d:93:45:94:19:
         5f:e1:0b:2b:0a:ca:5e:b6:c2:bb:af:e6:2d:2e:41:71:fd:cc:
         91:0b:78:23:ff:a9:2f:be:d4:67:03:c7:8e:df:40:8f:a7:d9:
         37:45:ae:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:17:00 2025 by rpki-client