Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/RrogqwhwIaVP1ZgOwfvHXv3i-vk.roa
File:                     RrogqwhwIaVP1ZgOwfvHXv3i-vk.roa (raw, json)
Hash identifier:          GGTv2LD6R8lI06P70eyAswYf2LpeZE7s54KUod8wxVI=
Subject key identifier:   46:BA:20:AB:08:70:21:A5:4F:D5:98:0E:C1:FB:C7:5E:FD:E2:FA:F9
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       4F
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/RrogqwhwIaVP1ZgOwfvHXv3i-vk.roa
Signing time:             Thu 22 Jun 2023 00:34:58 +0000
ROA not before:           Thu 22 Jun 2023 00:34:58 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:58 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=46BA20AB087021A54FD5980EC1FBC75EFDE2FAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6a:8e:7f:1c:f2:9b:45:55:9f:65:da:01:21:
                    03:a4:06:0e:96:01:3b:42:ed:48:66:e2:81:59:9e:
                    61:09:84:71:15:e1:4c:ea:1f:31:56:e5:da:6b:ee:
                    a5:a5:81:76:69:b7:04:4d:3e:05:77:71:74:4a:91:
                    6c:60:5f:85:35:4b:2b:78:49:e6:25:76:80:d5:8c:
                    61:99:d8:00:08:29:25:19:01:37:8e:c9:1e:90:a1:
                    8f:f0:64:1e:15:17:3c:5d:6b:5d:3c:81:34:5f:c9:
                    05:0a:c6:92:6c:1c:66:1d:25:2c:56:61:65:14:e4:
                    cf:54:f0:ed:30:5e:a1:41:c5:c0:ea:ec:31:87:1f:
                    9f:12:27:9a:f4:76:8d:1d:3e:ec:13:67:d5:e1:23:
                    92:6f:d3:76:de:9b:99:6a:6e:83:2c:77:4b:da:02:
                    a2:b7:f7:7b:b6:0d:5c:dc:e9:84:38:0e:ef:c3:58:
                    d3:8b:6d:9e:03:d1:f8:2a:33:73:73:70:8b:3e:25:
                    e7:70:69:88:8f:7b:32:25:4b:f3:bc:f7:e8:ee:1c:
                    a3:64:5b:4b:e7:69:6a:b0:ec:2b:18:79:ad:7a:e1:
                    c4:4a:b5:f5:fd:2c:a1:51:ad:af:f0:fd:ba:60:08:
                    71:b9:29:dc:64:b7:dc:47:74:46:bb:80:0e:7f:95:
                    a7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BA:20:AB:08:70:21:A5:4F:D5:98:0E:C1:FB:C7:5E:FD:E2:FA:F9
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/RrogqwhwIaVP1ZgOwfvHXv3i-vk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:5c:5a:97:dd:9d:22:7d:1e:cf:31:b6:1b:49:4b:96:81:df:
         fd:b5:53:44:6a:04:b2:90:16:0f:d8:9f:05:b7:86:a2:3c:f4:
         f3:b8:fb:03:c2:1a:c5:a6:31:31:fb:58:de:0d:f1:69:ec:15:
         4b:d6:83:fe:02:a3:0a:f3:fc:54:6c:c7:c3:a4:83:0e:d0:31:
         01:7e:e6:8f:38:d4:52:36:5c:be:cb:8e:a1:6c:a3:9f:bc:87:
         b5:31:c7:10:b8:df:74:09:e3:fb:39:4c:d2:5d:f9:93:c8:1a:
         43:d7:68:67:1a:86:69:45:51:c4:7b:7e:b0:27:75:d9:b1:48:
         82:b1:2d:e3:8b:28:b1:de:18:e5:32:a1:f3:60:04:ed:b7:1b:
         93:6c:52:eb:9c:8c:18:a2:c6:34:0f:34:4e:90:6d:13:26:c0:
         86:0a:68:fe:76:ec:d1:dd:b6:18:da:45:47:0c:97:af:5d:3b:
         2a:47:09:43:d2:7a:53:7f:5b:36:1d:b8:ad:d3:ac:e5:66:d1:
         8b:46:99:80:f4:4f:e8:14:17:2c:92:09:b5:36:f6:5e:e9:08:
         2a:66:05:2d:c9:76:ef:20:78:c6:d1:32:71:c4:a6:a7:3a:e8:
         6e:3a:50:8e:68:d0:12:fc:b0:8c:1f:08:84:a7:38:65:f8:ad:
         2b:60:ee:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org