Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/L2Nt9oYiSXC9t9iDhTYZkvTga8s.roa
File:                     L2Nt9oYiSXC9t9iDhTYZkvTga8s.roa (raw, json)
Hash identifier:          hNHI52tXTzMEmKXFZsverbh/m8cTG1hUhf44vPuuOMs=
Subject key identifier:   2F:63:6D:F6:86:22:49:70:BD:B7:D8:83:85:36:19:92:F4:E0:6B:CB
Certificate issuer:       /CN=F27064FFE42936CDBF59E51465E023FAE4B5AFAA
Certificate serial:       37
Authority key identifier: F2:70:64:FF:E4:29:36:CD:BF:59:E5:14:65:E0:23:FA:E4:B5:AF:AA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/L2Nt9oYiSXC9t9iDhTYZkvTga8s.roa
Signing time:             Thu 27 Jun 2024 02:39:52 +0000
ROA not before:           Thu 27 Jun 2024 02:39:52 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     146979
IP address blocks:        2001:cd0::/32 maxlen: 48
Validation:               Failed, certificate revoked on Fri 02 Aug 2024 05:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27064FFE42936CDBF59E51465E023FAE4B5AFAA
        Validity
            Not Before: Jun 27 02:39:52 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=2F636DF686224970BDB7D88385361992F4E06BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:90:3d:9c:27:9e:f0:1d:14:d4:03:c6:f4:
                    31:f2:8d:17:3e:9b:58:21:d0:9f:63:06:16:5a:2d:
                    5b:72:b4:1b:b4:b9:9a:4d:eb:d9:15:9c:9b:e7:97:
                    03:57:7c:6b:27:44:b8:f1:04:84:28:42:57:b1:fb:
                    97:cd:d6:a8:de:40:1a:23:75:86:21:6e:b8:d3:c8:
                    71:6f:16:1b:92:79:82:a4:11:ce:21:db:60:15:b2:
                    99:99:8f:69:6c:35:b4:ff:f7:b4:e7:d7:f2:29:03:
                    21:60:d3:ec:6d:c3:ac:f1:12:30:9b:cc:e7:fb:ef:
                    52:cd:ae:7c:81:6c:3d:3b:cc:cd:2b:78:7d:63:a7:
                    87:9b:12:9d:17:ee:2c:28:37:b1:f7:37:d8:c7:47:
                    f4:1a:d7:4f:35:49:82:73:27:f1:2a:1a:a0:59:c0:
                    09:07:6f:83:18:70:06:29:02:d2:52:78:2f:a3:9f:
                    42:a3:b7:d8:20:48:3e:c2:8a:3f:6c:7b:2a:e5:a4:
                    e6:0f:1c:50:3b:5e:a1:3a:6e:11:a9:ea:b1:6b:a5:
                    a2:b9:21:f5:b0:48:38:db:37:a1:ff:a4:d6:1a:21:
                    93:c4:ba:e6:54:75:ff:ce:53:b4:b7:2f:61:51:d9:
                    7f:fe:5c:8f:4d:9e:2d:2b:80:e2:c7:bd:7c:f2:c4:
                    f9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:63:6D:F6:86:22:49:70:BD:B7:D8:83:85:36:19:92:F4:E0:6B:CB
            X509v3 Authority Key Identifier:
                keyid:F2:70:64:FF:E4:29:36:CD:BF:59:E5:14:65:E0:23:FA:E4:B5:AF:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/L2Nt9oYiSXC9t9iDhTYZkvTga8s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:4c:af:db:5e:81:8f:73:a4:d7:15:08:46:2b:9d:49:78:54:
         1d:ef:4b:2a:a3:31:c8:37:26:1c:03:01:15:be:12:41:35:e7:
         2e:1b:98:9d:72:10:76:2e:50:f0:a2:e4:d4:ed:40:6c:8a:05:
         90:3d:1a:67:7a:51:18:5d:07:9a:02:b9:ed:69:f8:f6:14:91:
         42:31:44:a5:22:9f:c6:6c:c9:d7:ff:6b:7a:77:5c:81:f3:a3:
         d8:cb:d9:e6:fe:10:3f:b6:cf:da:36:f8:9e:c1:c9:17:f3:df:
         7e:f2:67:ce:c9:a0:47:6e:98:1f:ac:6d:69:ea:ad:0a:46:03:
         5a:e8:a2:c6:1d:cd:ef:8a:c4:8c:ba:ae:88:fd:8f:c9:fd:d8:
         44:6c:04:23:5b:68:7f:66:42:04:51:6a:a0:0f:03:e9:fa:e2:
         77:da:29:38:07:da:d7:8a:9b:48:bd:62:e7:7e:82:43:57:27:
         cf:76:5a:09:ab:d8:ec:60:14:af:d4:ac:17:b0:7d:0e:03:5a:
         30:64:21:e8:92:60:7b:da:e2:db:33:7c:17:40:a0:fa:2a:44:
         bb:2b:8e:1e:a7:fc:fa:0f:67:60:de:09:06:37:08:c8:94:5c:
         34:53:df:19:1b:3c:fb:90:65:17:4b:34:f6:fb:65:a6:57:52:
         4e:62:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:44 2025 by rpki-client