Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/6z7PKMhB_CogPSQoVclRqCGeQUs.roa
File:                     6z7PKMhB_CogPSQoVclRqCGeQUs.roa (raw, json)
Hash identifier:          5P6lJHrCzxoZDkjZoGLSdO5OsEIP+nZjypkcLgtZOcc=
Subject key identifier:   EB:3E:CF:28:C8:41:FC:2A:20:3D:24:28:55:C9:51:A8:21:9E:41:4B
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       4B
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/6z7PKMhB_CogPSQoVclRqCGeQUs.roa
Signing time:             Sat 31 Aug 2024 01:31:02 +0000
ROA not before:           Sat 31 Aug 2024 01:31:02 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     23637
IP address blocks:        112.137.184.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Tue 01 Oct 2024 06:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug 31 01:31:02 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=EB3ECF28C841FC2A203D242855C951A8219E414B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:7a:71:e2:70:84:fa:33:32:9d:48:17:be:
                    f2:96:61:b0:b6:d8:88:35:a7:dc:23:7d:02:01:08:
                    0d:f8:73:89:e3:43:0d:ed:9d:7d:38:d0:bf:45:2a:
                    bc:6d:0f:42:49:68:6c:9d:37:e7:a1:45:d8:6f:6e:
                    9d:ea:b9:77:45:81:f5:f9:6a:73:3b:bd:43:9b:dd:
                    cb:6b:51:74:6e:88:da:2d:5b:15:a2:17:d6:d4:0d:
                    d8:d9:c5:44:a7:93:68:74:46:41:c5:18:4b:fa:a2:
                    22:1d:73:25:cb:d6:52:6b:12:83:de:56:1c:59:a3:
                    59:18:8e:e3:62:ec:88:bc:a1:9b:20:cf:ae:af:35:
                    c7:47:f8:4f:ac:7a:5a:b1:4b:f4:ed:bc:4c:bb:ff:
                    eb:33:0f:04:0a:09:be:05:d2:5e:0b:cb:b8:50:0a:
                    02:71:2d:e1:f8:94:3f:1f:34:c0:bc:da:90:32:5e:
                    1e:27:49:51:33:c4:95:88:da:0d:11:5f:aa:21:19:
                    c2:2f:5d:bb:6f:82:eb:35:66:3f:4e:61:9c:1b:10:
                    71:85:94:3f:2c:c1:ef:5e:40:20:8c:23:2f:4e:62:
                    b8:06:81:76:0f:7f:87:bb:4f:f3:7b:d0:4f:04:ea:
                    0b:d6:e5:ea:7a:f6:8f:32:88:29:77:5d:b8:6e:c0:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3E:CF:28:C8:41:FC:2A:20:3D:24:28:55:C9:51:A8:21:9E:41:4B
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/6z7PKMhB_CogPSQoVclRqCGeQUs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:72:32:e1:44:7a:81:41:a8:f1:8d:02:4a:a9:45:81:2a:a9:
         59:57:5a:99:5d:7e:b3:71:1f:8e:b7:41:7a:29:ce:19:9c:f0:
         af:91:a6:ec:b8:14:e1:10:15:55:7d:cf:a9:b2:1f:2e:5b:55:
         7f:65:68:71:1c:49:0b:a1:64:38:7f:02:2e:59:e9:06:a5:0a:
         50:c5:5c:c0:32:41:3c:00:cb:ae:34:7c:6f:07:39:fb:bf:ac:
         b8:d2:1d:9b:0b:e0:cf:0d:86:51:f5:c4:e0:38:22:cc:4b:6a:
         13:bc:4d:b5:d0:fb:98:59:dd:ca:98:6a:33:29:ad:08:07:63:
         10:3d:88:07:85:15:e3:f1:da:5e:92:7f:1b:4d:9f:c4:97:3c:
         29:4b:df:79:ee:17:a8:32:d0:0e:62:f5:6f:65:a7:83:a6:5a:
         a7:6e:f6:7d:3f:36:84:3f:b1:60:1b:24:98:99:88:9e:aa:2b:
         e5:61:ba:84:e3:c7:e6:fd:92:3f:a0:3d:de:97:26:fc:c4:af:
         fd:c1:09:ac:85:e3:01:e7:ca:29:72:c0:2a:95:91:aa:84:e6:
         5d:2d:d1:31:b1:f4:ce:38:80:ff:52:c0:3a:3d:3f:e8:58:b4:
         8d:32:2f:21:9f:51:6a:09:2d:df:f9:cf:39:6d:80:c0:90:fa:
         ea:fb:de:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:13 2025 by rpki-client