Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6V_PpREqZPgfjrayLztpwu2WT1g.roa
File:                     6V_PpREqZPgfjrayLztpwu2WT1g.roa (raw, json)
Hash identifier:          lE2ztH/hR7qGsYbRP34GuFsp34K90d/heqFvu/KY7Js=
Subject key identifier:   E9:5F:CF:A5:11:2A:64:F8:1F:8E:B6:B2:2F:3B:69:C2:ED:96:4F:58
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06FA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6V_PpREqZPgfjrayLztpwu2WT1g.roa
Signing time:             Tue 30 Apr 2024 01:52:48 +0000
ROA not before:           Tue 30 Apr 2024 01:52:48 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.18.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 01:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1786 (0x6fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:52:48 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E95FCFA5112A64F81F8EB6B22F3B69C2ED964F58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:c0:16:1c:87:f5:dd:80:5a:20:72:d8:a7:
                    0b:82:62:64:b5:9f:ec:27:f7:9f:a6:83:25:d2:6c:
                    a8:07:10:aa:2d:81:b1:9b:d1:8e:12:c7:07:95:67:
                    11:be:06:f0:a8:e4:76:1a:29:4a:fd:4e:ad:72:37:
                    74:ef:bb:ec:09:fb:ed:ca:b4:cd:c0:ee:4a:1d:0c:
                    f8:aa:df:29:d1:2a:68:89:43:4a:96:67:d4:02:3d:
                    8f:5e:50:50:66:d8:6e:6b:2f:66:b1:e9:b4:8e:a1:
                    b4:55:da:d7:f2:07:7c:f0:a0:2c:82:8f:0a:d5:e5:
                    8b:3f:fe:c1:71:18:cf:ae:8a:21:7d:6c:a6:55:93:
                    61:8f:31:73:b2:9f:12:15:0e:8f:5a:25:c1:8a:0b:
                    e0:17:12:3d:e8:9d:ac:db:64:9b:93:e8:de:7c:f2:
                    28:0e:72:dc:1f:b7:f0:3b:58:3a:fd:0f:40:cf:90:
                    b4:98:18:c5:0a:f3:f6:ae:49:86:e8:2c:a8:71:bb:
                    a5:00:4b:26:05:42:82:cf:a3:12:53:0e:fe:e1:ee:
                    66:77:46:8d:3d:c2:32:f5:d0:81:7d:a2:3b:7b:71:
                    4e:5e:6e:c1:ac:ed:8d:56:2e:bc:32:d9:c8:1c:8e:
                    9e:b8:6f:ff:37:cf:87:4a:1f:a9:d3:4e:ad:7d:78:
                    59:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5F:CF:A5:11:2A:64:F8:1F:8E:B6:B2:2F:3B:69:C2:ED:96:4F:58
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6V_PpREqZPgfjrayLztpwu2WT1g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:46:29:6d:c2:2f:53:10:da:2e:58:69:99:51:a8:cc:0b:a9:
         3e:ea:c4:06:78:f8:63:74:aa:cc:f2:94:35:1f:85:02:4b:a7:
         d1:a3:d3:30:68:30:01:41:a1:d4:4d:10:6b:6e:7e:59:0a:63:
         53:67:c9:90:47:09:98:b8:94:6a:03:f3:10:88:63:11:f4:e4:
         fa:26:c8:60:fe:94:ee:d2:e6:69:24:84:3e:cf:ed:64:57:45:
         e3:0b:26:cb:91:bb:a1:e0:60:f7:28:6f:4e:b8:04:89:fd:21:
         91:a4:ee:b8:a4:2d:24:6f:5f:06:0b:7f:ef:f8:ed:9d:b1:e2:
         9c:35:7a:3a:bc:01:e4:5b:52:9e:74:cf:b1:03:ca:ac:c2:00:
         c1:cb:7b:c0:02:ab:eb:43:99:be:b1:91:9d:c6:1d:13:91:43:
         22:07:e4:eb:08:d0:96:a2:00:c6:f2:68:f3:72:94:c3:cf:bc:
         d2:f7:d0:c8:a7:da:56:4a:65:e0:10:a8:fa:e8:6a:e3:fd:d2:
         f7:83:07:0e:3c:f4:a6:f6:6b:d5:37:44:32:72:b2:36:b5:a7:
         ee:f1:28:55:42:6f:fb:57:42:81:66:64:33:1b:fa:be:80:e4:
         71:af:b1:34:23:db:71:69:b0:5f:d9:bf:c9:c4:12:8d:3a:9d:
         05:ac:22:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:40 2025 by rpki-client