Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/Fo_w_cE0dEYmS0p0zt2d0mYEilA.roa
File:                     Fo_w_cE0dEYmS0p0zt2d0mYEilA.roa (raw, json)
Hash identifier:          6gdoo6K4/bfGsY+tMX2P4ALjAOcTSW882xTo9j5S/CM=
Subject key identifier:   16:8F:F0:FD:C1:34:74:46:26:4B:4A:74:CE:DD:9D:D2:66:04:8A:50
Certificate issuer:       /CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10
Certificate serial:       10
Authority key identifier: 49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/Fo_w_cE0dEYmS0p0zt2d0mYEilA.roa
Signing time:             Sun 01 Oct 2023 01:29:50 +0000
ROA not before:           Sun 01 Oct 2023 01:29:50 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     19905
IP address blocks:        133.250.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10
        Validity
            Not Before: Oct  1 01:29:50 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=168FF0FDC1347446264B4A74CEDD9DD266048A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:2a:02:b3:0a:d5:d6:0b:5b:b6:23:dc:e9:
                    8d:b6:b7:9a:f8:65:2d:0f:25:36:e7:5e:1a:b7:d7:
                    26:4e:27:a1:c8:77:33:21:34:4d:54:19:a3:3c:8e:
                    ef:a1:bf:52:eb:60:59:5c:67:48:f2:95:33:95:8c:
                    e7:b7:88:8f:ba:1b:e2:f4:ee:a7:86:0b:39:36:a4:
                    b9:21:53:31:6d:56:af:6a:a7:db:6a:55:52:20:7e:
                    92:5b:7a:70:83:55:4d:58:cd:28:0f:74:27:7f:c4:
                    76:dc:69:8c:c7:91:18:f4:43:af:51:e9:ea:36:46:
                    76:1a:26:3c:a1:4b:3e:dc:35:a3:a0:85:64:c8:1e:
                    f4:e1:38:c4:e6:30:af:a9:c4:1b:0d:12:63:b7:10:
                    91:33:ba:54:22:1f:4d:62:5d:41:a4:4b:ec:1d:5f:
                    53:65:ab:0e:78:4e:f4:aa:4e:7a:a8:39:98:87:a6:
                    ef:4d:cc:c5:32:7f:af:6c:3e:2a:01:26:d6:88:8c:
                    c2:ae:6b:6c:76:93:ad:db:94:4b:0f:c9:e9:c7:76:
                    05:ae:9b:f1:2c:46:ad:88:c7:0e:40:08:da:e0:8d:
                    7d:85:cf:29:4c:14:60:98:64:38:8c:5d:8b:38:e2:
                    02:68:a8:ba:34:1f:33:97:ef:a7:ce:c9:67:e1:8d:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8F:F0:FD:C1:34:74:46:26:4B:4A:74:CE:DD:9D:D2:66:04:8A:50
            X509v3 Authority Key Identifier:
                keyid:49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/Fo_w_cE0dEYmS0p0zt2d0mYEilA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.250.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4e:66:f0:da:65:6d:dd:69:cd:08:2c:4f:0a:d4:df:b5:36:37:
         a2:52:04:08:72:c5:41:32:19:c9:04:d1:70:7e:1e:19:fb:84:
         80:a1:47:98:3e:fb:61:e0:a9:ba:4e:21:ae:81:d7:f8:80:c3:
         88:45:e6:1a:0b:b8:72:88:76:d2:de:a3:f7:78:2b:ce:df:e3:
         2c:1e:fc:dc:17:25:5a:f2:2e:67:ec:55:bb:64:e4:c7:d6:1f:
         c3:30:ed:dc:a5:01:dd:43:f4:9f:b2:be:e0:b3:8b:b3:fb:f7:
         3e:60:4b:58:51:57:1e:ca:79:bd:d0:f0:c8:cc:bc:d6:10:32:
         ca:d4:e8:8a:c0:68:0e:f1:7e:64:96:e0:ad:4e:35:da:89:88:
         95:c0:44:1b:8d:06:ae:86:9f:93:19:44:c9:99:bf:44:73:6c:
         39:ad:93:d1:55:f0:9e:a9:36:06:bc:85:a2:26:63:6d:ef:06:
         b5:a0:71:de:24:f0:b9:04:f9:b5:78:bf:16:6f:17:64:c5:06:
         34:c4:42:05:a3:71:92:8a:b3:7a:ed:a1:f4:56:86:8a:ec:32:
         ad:5b:9f:52:5b:2d:a2:6d:bd:9f:6f:1f:7b:34:33:08:b9:fb:
         33:8f:97:46:c9:55:85:79:09:bf:a1:e5:86:74:e4:39:cf:f5:
         26:bb:29:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org