Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/R-JLaiPWE1ytVCiWot6TEYwy4xQ.roa
File:                     R-JLaiPWE1ytVCiWot6TEYwy4xQ.roa (raw, json)
Hash identifier:          o/rmupZ5dD3qVMtux2SB8sx5GUYuJOvj3Wv+mOiJjPk=
Subject key identifier:   47:E2:4B:6A:23:D6:13:5C:AD:54:28:96:A2:DE:93:11:8C:32:E3:14
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       073C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/R-JLaiPWE1ytVCiWot6TEYwy4xQ.roa
Signing time:             Tue 30 Apr 2024 01:58:45 +0000
ROA not before:           Tue 30 Apr 2024 01:58:45 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.127.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 01:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:58:45 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=47E24B6A23D6135CAD542896A2DE93118C32E314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:c1:75:35:ef:f0:f0:4a:78:64:fd:e0:0e:
                    5b:bf:98:2e:a3:d6:dc:15:30:6f:c6:b8:a4:12:25:
                    c3:76:86:61:bb:ce:54:0d:5b:1f:70:cc:ee:2e:d0:
                    5d:af:31:fa:68:f9:f9:b5:2b:92:ff:78:07:4e:0e:
                    19:0e:f8:cd:75:5c:c3:4a:8c:dd:27:4c:7d:6c:8b:
                    9f:15:48:0c:65:65:94:21:a5:e1:ac:8f:d0:b3:a7:
                    89:b5:b5:3a:a9:67:02:76:34:41:31:14:30:f4:f9:
                    74:45:5b:f1:3b:c5:a5:c8:0d:f4:63:01:67:49:d5:
                    2f:07:cb:9f:36:80:53:d8:15:56:15:40:fe:c4:2b:
                    22:bb:23:f4:48:90:7c:97:6b:e2:f1:6a:28:6b:c8:
                    ea:94:10:f6:b1:f3:40:98:56:2a:1e:cd:67:e8:e4:
                    6d:11:3c:a9:55:3f:5b:19:0d:50:c5:bc:85:16:c2:
                    ba:ef:63:5a:69:c0:be:73:d2:4c:2e:23:aa:05:ab:
                    f5:13:4a:c8:f6:3a:8d:35:1c:a0:58:38:95:36:bc:
                    a8:0e:c8:0a:73:6d:fd:1f:14:bc:f8:b4:e4:e4:2a:
                    0b:8e:20:bc:71:44:3b:dc:56:26:ff:f0:62:72:41:
                    70:b2:fe:dd:0b:57:23:35:4d:3a:f7:86:22:05:c0:
                    e6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E2:4B:6A:23:D6:13:5C:AD:54:28:96:A2:DE:93:11:8C:32:E3:14
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/R-JLaiPWE1ytVCiWot6TEYwy4xQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:1a:d8:97:1a:0e:43:3c:c4:99:5b:91:72:d7:d2:1e:8d:0e:
         3d:15:61:a0:0a:ea:97:3b:66:4a:b2:bd:95:5c:b5:66:0e:03:
         4a:6f:bf:a6:d1:c2:57:2a:34:01:d3:8d:08:d4:af:21:f6:0b:
         84:98:e0:ec:ef:ef:f2:4d:c5:33:be:3e:85:ef:75:d1:e3:8e:
         4c:8a:c9:23:26:c9:97:5b:4e:36:e9:e9:5e:e6:83:24:68:9d:
         94:86:fd:cb:6a:a8:b0:ca:d1:dd:d9:02:77:da:c1:f4:68:f2:
         bd:ed:72:a0:62:a3:0e:2d:57:46:04:c6:d6:19:88:ad:f5:79:
         67:c1:07:7c:a8:3f:ee:56:71:6a:c9:4a:65:88:a8:8d:0b:c6:
         b4:e3:79:18:75:62:e0:03:d3:33:5d:6b:0f:43:53:6d:ed:68:
         bc:01:62:e2:6c:db:da:e6:37:48:e9:66:ad:a9:17:8f:5d:70:
         18:c6:74:71:2c:76:11:62:bc:48:5f:65:c2:e8:2e:f2:48:3b:
         b0:87:94:1a:fd:1c:fd:16:2d:c2:3a:49:d3:d1:75:97:86:60:
         56:40:c6:e3:5f:4e:14:70:65:07:56:61:dc:88:5d:e3:b1:22:
         a5:79:11:19:de:99:32:76:ee:71:98:cd:ef:e5:5c:54:42:5a:
         e6:e2:0a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:28 2025 by rpki-client