Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Hhyf50DjOdBEfLNCQCOhl1Z5o-g.roa
File:                     Hhyf50DjOdBEfLNCQCOhl1Z5o-g.roa (raw, json)
Hash identifier:          o+ZoRU0Bto4ZrRhqXH/aae+fZC8KC2y/ww33nc9WmzA=
Subject key identifier:   1E:1C:9F:E7:40:E3:39:D0:44:7C:B3:42:40:23:A1:97:56:79:A3:E8
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       2B
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Hhyf50DjOdBEfLNCQCOhl1Z5o-g.roa
Signing time:             Thu 22 Jun 2023 00:33:52 +0000
ROA not before:           Thu 22 Jun 2023 00:33:52 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:33:52 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=1E1C9FE740E339D0447CB3424023A1975679A3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:1b:e6:7c:f6:ec:e6:16:b4:b9:68:f8:da:
                    12:fd:12:f6:b3:0e:bc:ce:1d:1b:5c:27:1b:75:2b:
                    b8:d7:61:22:b8:86:25:e8:52:91:51:5a:c4:42:80:
                    7b:45:4f:f5:86:a0:cd:63:eb:be:67:8f:56:88:a1:
                    e3:15:e8:bf:87:09:0a:2b:40:41:c7:65:20:a8:0c:
                    d8:c1:2c:dc:45:b8:af:ec:37:39:17:8c:ac:69:76:
                    6a:5d:61:f3:86:05:76:08:95:4d:65:8f:c3:88:67:
                    f4:be:af:3d:cd:71:02:d3:61:73:7e:51:4e:cb:4d:
                    10:27:a4:db:53:85:ca:29:ae:d5:13:46:74:d5:34:
                    d4:e2:98:43:43:ba:b0:56:21:5a:bf:da:58:b7:7e:
                    55:90:2f:b8:87:6f:82:c6:5c:0a:0d:94:61:52:6d:
                    f0:49:1c:d4:f4:76:c9:45:18:d3:c3:38:a7:8f:8f:
                    f9:e8:c0:0a:5f:4c:43:85:8e:12:c8:44:ed:fa:97:
                    d8:b5:e3:06:1e:57:b7:22:42:8a:14:79:25:bc:a3:
                    7d:c0:60:75:f2:7a:c9:ed:50:5f:91:eb:16:09:34:
                    35:a6:3c:45:d4:e5:55:be:80:f4:9f:aa:ad:a1:e3:
                    9b:ab:74:8c:32:19:2a:80:7f:bd:78:25:de:5f:d8:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1C:9F:E7:40:E3:39:D0:44:7C:B3:42:40:23:A1:97:56:79:A3:E8
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Hhyf50DjOdBEfLNCQCOhl1Z5o-g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:02:c1:0c:6f:63:6c:4c:c8:fc:d8:46:39:4f:40:97:ef:74:
         a3:21:72:bb:2f:82:6b:22:26:a5:8a:5f:30:aa:de:de:ba:6e:
         95:ec:50:de:f3:90:c8:17:04:17:3f:6b:40:7e:58:cd:00:82:
         63:82:de:be:bc:08:b7:17:e4:46:d0:c3:1b:44:76:d1:ee:58:
         4c:be:4c:17:96:c4:1e:41:4e:e7:d5:c7:96:de:8d:ea:f5:eb:
         54:98:4d:7f:eb:ad:f3:51:43:ef:08:30:59:7b:7e:4c:54:6c:
         b1:3b:2e:a9:fd:cf:46:48:22:68:c0:6a:1f:ba:72:25:13:11:
         81:91:5b:fe:25:0d:d8:16:10:b2:ec:c1:42:c7:1b:cd:56:a4:
         97:a5:83:70:b6:53:80:cf:4e:3d:c2:91:33:ac:54:e3:3c:ee:
         12:5d:77:b9:40:18:89:18:75:93:6d:6e:07:fe:5a:3a:f6:ac:
         86:a0:3b:35:e6:40:f6:c7:59:64:7e:60:ff:18:7d:80:3c:42:
         97:f0:12:46:9c:43:f2:b1:a0:a6:bb:38:8f:28:63:85:c4:a1:
         bc:c8:13:c7:08:87:3e:ff:07:b0:6a:3f:5d:e1:9c:bc:1a:dc:
         f2:4f:11:fb:b1:ca:79:22:de:d6:5c:06:15:71:1b:2d:de:2b:
         7e:a8:0c:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org