Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uvpbk2NTHkAKFIE9PsHyEv6YTSs.roa
File:                     uvpbk2NTHkAKFIE9PsHyEv6YTSs.roa (raw, json)
Hash identifier:          yJcs2WivTLRVitISr7dZH7MV8Ko5mfk2RF2v9JbMHfc=
Subject key identifier:   BA:FA:5B:93:63:53:1E:40:0A:14:81:3D:3E:C1:F2:12:FE:98:4D:2B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0864
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uvpbk2NTHkAKFIE9PsHyEv6YTSs.roa
Signing time:             Tue 30 Apr 2024 02:18:24 +0000
ROA not before:           Tue 30 Apr 2024 02:18:24 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.180.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 02:19:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148 (0x864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:18:24 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=BAFA5B9363531E400A14813D3EC1F212FE984D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:a6:ea:78:11:fa:04:de:3e:1a:03:84:a7:
                    e8:f9:81:43:37:7f:53:8d:b1:35:9b:95:10:72:5a:
                    bb:10:5b:00:14:85:b9:9d:c8:6d:07:8f:67:2f:a9:
                    b7:b4:f8:75:98:d5:f4:02:5d:55:b4:34:4a:bd:87:
                    83:29:00:61:61:bf:85:74:de:93:2b:ea:31:b0:68:
                    a1:3a:9a:3d:53:cc:86:76:bd:e3:dd:f7:90:8b:fe:
                    cb:c0:e6:97:a5:8a:5f:08:a1:73:0a:20:38:cb:7a:
                    61:3d:d7:99:db:a5:0d:ff:46:69:ae:be:6f:ce:ce:
                    26:2a:55:03:06:78:10:48:f4:78:fd:ba:07:ca:ff:
                    5e:83:37:46:33:00:9e:ea:a9:22:2b:5e:06:53:a5:
                    f8:86:55:25:98:79:b1:e6:94:2e:1c:8d:37:b2:56:
                    f4:19:52:a0:12:ad:61:ce:e4:eb:4d:0c:04:2c:0a:
                    16:83:46:ce:d8:b4:79:41:2b:0d:11:b8:f3:e7:e3:
                    a3:9c:13:fa:76:52:a4:fd:44:6a:d4:29:f4:80:09:
                    a0:a9:43:9e:09:bb:fa:72:5c:b5:89:23:7c:71:bb:
                    86:02:ec:11:f6:5e:a0:a6:48:24:05:df:89:9c:ee:
                    37:30:eb:d1:34:4a:54:94:0a:2b:8f:7a:29:fe:42:
                    67:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FA:5B:93:63:53:1E:40:0A:14:81:3D:3E:C1:F2:12:FE:98:4D:2B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uvpbk2NTHkAKFIE9PsHyEv6YTSs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:4f:ca:59:0e:5c:d2:f1:04:61:26:12:ee:dc:b1:da:c9:49:
         aa:d3:0f:db:9a:c6:01:0b:fd:b2:d3:d8:96:cc:f5:c7:b7:e7:
         48:a4:47:dc:e4:13:29:4b:02:72:78:f5:f5:de:db:6e:1a:b3:
         41:c1:54:76:84:ed:8d:e7:0a:56:fc:38:97:54:d6:0f:73:a1:
         c6:11:ab:57:86:a8:80:a2:40:59:1b:ea:93:3e:24:44:0b:74:
         26:76:be:11:d9:cc:87:a5:c5:fc:ce:1d:b8:a5:a4:6f:23:df:
         85:01:cc:2f:76:f5:ba:3e:08:cb:1e:fa:ac:f4:77:e6:cd:bf:
         f9:07:9b:69:9b:b5:5d:e7:b0:41:23:b7:39:fc:85:65:b6:bf:
         32:51:19:91:44:2e:f3:5d:22:2d:e1:12:19:9b:80:4a:67:24:
         da:7b:b3:dd:e0:14:42:cc:8d:92:32:e3:05:ec:8c:81:bd:84:
         2d:e4:5b:2a:07:07:81:70:2f:7c:1c:2a:ab:79:8e:d6:09:24:
         16:d6:e7:fb:84:00:78:c8:28:0a:60:9d:34:59:b0:9d:11:9a:
         3e:63:28:8c:28:9b:d4:eb:27:d7:f8:31:f4:fa:0c:f4:a0:c9:
         ac:79:68:f7:b7:e5:9a:f0:73:8f:16:2d:c9:f4:27:11:f7:d4:
         ef:27:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:31 2025 by rpki-client