Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/0DdDvu1n-jkT0lVvV0qeJ5JnWik.roa
File:                     0DdDvu1n-jkT0lVvV0qeJ5JnWik.roa (raw, json)
Hash identifier:          9FLW1uTuEZV7tYDGxWyiTIQ6Hkc4T1mLoHESPCUfs4Y=
Subject key identifier:   D0:37:43:BE:ED:67:FA:39:13:D2:55:6F:57:4A:9E:27:92:67:5A:29
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0190
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/0DdDvu1n-jkT0lVvV0qeJ5JnWik.roa
Signing time:             Sat 01 Jul 2023 01:30:58 +0000
ROA not before:           Sat 01 Jul 2023 01:30:58 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     7684
IP address blocks:        112.78.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jul  1 01:30:58 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=D03743BEED67FA3913D2556F574A9E2792675A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:36:9f:57:d3:5f:3a:3c:33:4e:8e:1f:1a:
                    49:7f:2c:44:44:1c:f5:fc:f3:12:ce:59:43:5b:06:
                    4e:29:84:5a:1c:85:a3:1b:1e:37:d2:19:c7:6a:f0:
                    c6:f9:32:78:97:87:63:fd:0d:af:f9:95:8b:76:8b:
                    69:42:d9:fb:c2:94:70:be:60:f3:a3:90:19:8a:a8:
                    54:82:e7:33:10:0a:7a:25:b1:5c:b4:2a:5e:b7:27:
                    3c:76:87:5e:7c:f1:89:9f:2b:91:3c:a1:e2:07:66:
                    36:28:59:2a:3b:f3:7b:7f:98:b6:c0:c2:31:61:b1:
                    09:0a:71:4c:49:d2:88:8f:48:17:a7:8a:0b:71:ea:
                    df:fb:52:d5:d8:c8:53:cb:bb:6b:32:f5:dd:2f:e2:
                    3c:9a:d3:69:27:fe:f2:58:9f:25:5c:eb:47:8b:5f:
                    5f:1c:89:c4:a1:ee:11:c0:62:26:a7:23:9e:f3:47:
                    e9:15:ae:90:db:d0:e8:d5:9d:de:5d:a8:a4:bb:11:
                    85:ed:aa:6e:c1:af:47:73:59:1b:c3:c3:2b:52:58:
                    2b:d6:47:7a:84:e0:4f:81:8c:e5:0f:f0:88:c4:84:
                    32:a2:3d:6b:1e:83:d9:ed:73:bd:1e:eb:6d:6d:b5:
                    15:b0:35:e0:85:8e:68:69:fd:5e:2c:e1:80:23:28:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:37:43:BE:ED:67:FA:39:13:D2:55:6F:57:4A:9E:27:92:67:5A:29
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/0DdDvu1n-jkT0lVvV0qeJ5JnWik.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:df:a7:5d:c2:75:24:3e:6d:cc:80:62:6e:60:72:89:ab:dc:
         e4:43:72:ee:c6:e4:d1:6b:cf:dd:75:51:72:e0:36:b3:bb:c2:
         22:6c:a2:86:ed:cf:74:4a:8e:a8:f8:ca:2f:03:56:cf:a2:82:
         58:0d:39:c5:d3:ee:cd:a9:eb:99:eb:84:03:1e:c6:2c:4d:8b:
         2e:43:56:f3:7c:55:c9:2d:40:68:e2:fa:d1:e3:f9:1b:c3:9a:
         7c:88:b5:86:01:34:67:8b:e2:c3:f8:39:07:55:50:eb:7f:3a:
         e8:f9:e5:ac:f6:f5:8c:69:e5:91:be:3c:6e:6d:9d:56:97:c9:
         02:3d:f5:d9:13:27:69:58:a5:1f:85:45:59:97:37:74:3d:ef:
         cb:7a:29:27:d5:20:84:05:03:4f:ba:f9:5c:9d:79:22:85:e3:
         24:02:96:27:d5:d1:23:ab:98:02:5b:48:48:c3:8c:c5:11:b1:
         04:8e:ff:ee:e2:b5:6d:14:05:0e:21:bc:e6:15:ba:4a:ef:0c:
         27:4a:7b:39:3d:5d:0a:04:d2:d8:d3:9a:2a:31:fa:31:14:18:
         76:e2:fa:c5:83:f7:db:70:ba:a8:80:b2:bb:c4:1b:6e:70:43:
         42:25:52:17:f4:f3:19:76:d0:ac:60:74:f6:88:d7:fb:93:ab:
         52:5b:35:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org