Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/Ji0TUiOSYomIizNfvOhCna6OZWo.roa
File:                     Ji0TUiOSYomIizNfvOhCna6OZWo.roa (raw, json)
Hash identifier:          yX6Eqs+VEsfV/XkU2yYY19M1rylPW+NQSv36zO70mR4=
Subject key identifier:   26:2D:13:52:23:92:62:89:88:8B:33:5F:BC:E8:42:9D:AE:8E:65:6A
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       58
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/Ji0TUiOSYomIizNfvOhCna6OZWo.roa
Signing time:             Mon 01 May 2023 01:31:12 +0000
ROA not before:           Mon 01 May 2023 01:31:12 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        2403:7800::/32 maxlen: 56

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: May  1 01:31:12 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=262D135223926289888B335FBCE8429DAE8E656A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:60:f3:fc:76:5a:5f:dd:c6:0c:13:43:55:
                    c8:09:6d:ba:d6:eb:f4:11:5c:64:ed:a2:68:94:4c:
                    8c:0d:a0:60:a4:4a:e8:8c:4f:c4:60:e2:d9:68:fd:
                    9c:8c:30:26:70:0a:f0:6a:87:ac:7d:4d:29:32:65:
                    a9:59:a1:2f:37:3c:7b:95:8d:0a:61:60:40:d2:5d:
                    c9:f3:f1:c3:53:16:72:87:be:ac:4c:ea:f9:04:f0:
                    dc:69:8b:17:74:70:b2:53:20:7c:58:04:ef:d0:e8:
                    66:74:d7:3a:77:ef:3d:d4:97:83:ed:db:ce:e6:27:
                    9f:9b:6c:90:30:0f:a2:47:7d:f6:1e:7c:37:d0:8f:
                    40:dc:58:44:45:11:84:d8:ac:1e:22:c1:11:f5:7a:
                    cb:7a:3b:db:4c:a0:c5:be:3e:fc:d6:f1:e6:20:f8:
                    7b:3e:f4:af:7b:da:dd:0b:ac:56:05:1f:00:d8:f3:
                    73:c6:c3:b9:71:5e:ea:1b:76:6c:83:e0:8f:ca:1d:
                    8a:3e:43:f3:9c:c5:1e:61:be:88:63:6e:6a:9b:43:
                    c7:e7:a9:2e:20:29:17:a4:63:b9:4e:b0:7c:d3:12:
                    18:92:38:6f:59:d7:81:22:37:14:60:6a:41:6c:8e:
                    09:1e:fd:28:9d:4b:c9:fe:0a:07:18:36:9d:8f:61:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2D:13:52:23:92:62:89:88:8B:33:5F:BC:E8:42:9D:AE:8E:65:6A
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/Ji0TUiOSYomIizNfvOhCna6OZWo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:68:ce:d1:20:ce:c7:f7:e9:53:0a:f4:68:0f:7b:e9:73:18:
         a7:e8:66:cc:87:27:3e:b9:c0:f4:8d:58:4d:ed:f7:39:c4:a5:
         4d:8f:76:1c:2a:ab:96:72:6a:ae:ad:ad:36:05:8a:4a:f7:fa:
         f1:11:71:20:f7:dd:06:e7:ec:82:9e:f4:85:3c:87:58:9a:1c:
         45:4f:79:6b:6b:db:78:80:c0:55:89:da:38:7c:ea:5d:aa:bd:
         e8:ed:4a:78:e6:be:00:b4:ff:7f:3b:be:70:7e:ed:8b:89:7d:
         58:af:6e:ab:3b:64:70:37:6b:04:04:cc:dd:8d:00:74:3e:3f:
         8f:d1:0d:4a:6c:85:92:9f:97:45:1c:6d:bb:ec:04:4a:9a:53:
         07:f5:1d:0a:d0:19:44:5e:85:8d:67:3b:73:e8:23:94:dc:8b:
         04:68:ce:fd:04:d9:6d:12:57:d6:bb:55:2f:a8:06:ee:49:0a:
         d8:f9:7f:b9:ca:6d:93:ba:d8:c3:e4:00:0e:96:be:49:7d:84:
         31:5c:97:a2:60:9f:ad:09:5e:61:39:04:14:30:0a:9f:ad:24:
         ff:0a:58:2b:af:07:0e:6a:fa:6f:14:68:f0:b2:a9:08:1c:a1:
         9c:ca:0d:ab:8a:0d:fd:c6:45:d9:64:58:7a:17:bd:9a:ad:8d:
         62:91:42:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org