Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30303/wddU59bnsK_reziRcBkH5czXRx4.roa
File:                     wddU59bnsK_reziRcBkH5czXRx4.roa (raw, json)
Hash identifier:          1DJDzRWwMV5AxMg4Pdt/6mA+rYQ38Aq8XYB5+0qtUSs=
Subject key identifier:   C1:D7:54:E7:D6:E7:B0:AF:EB:7B:38:91:70:19:07:E5:CC:D7:47:1E
Certificate issuer:       /CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
Certificate serial:       02
Authority key identifier: 66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/wddU59bnsK_reziRcBkH5czXRx4.roa
Signing time:             Sat 22 Jul 2023 09:11:41 +0000
ROA not before:           Sat 22 Jul 2023 09:11:41 +0000
ROA not after:            Sun 21 Jul 2024 08:56:38 +0000
asID:                     63778
IP address blocks:        2401:7641::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 08:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
        Validity
            Not Before: Jul 22 09:11:41 2023 GMT
            Not After : Jul 21 08:56:38 2024 GMT
        Subject: CN=C1D754E7D6E7B0AFEB7B3891701907E5CCD7471E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:42:c5:0a:53:9c:60:e8:01:f3:27:94:0b:
                    88:7d:45:a1:e5:50:63:e8:4c:26:04:0e:af:2b:ba:
                    06:8b:3b:65:b2:27:58:e6:c3:ff:fd:f6:b2:c4:19:
                    52:43:51:ef:30:d1:b7:17:91:15:6f:01:5d:a9:4e:
                    0b:ef:5f:a1:ab:c4:e9:14:dc:2a:d6:3a:07:6a:22:
                    85:52:d2:c5:01:4e:67:2c:54:fa:8a:90:85:0c:7a:
                    12:34:ad:58:ae:6a:f9:6f:62:ba:c5:80:77:e0:10:
                    bf:8a:bf:b7:ac:3b:18:a2:84:79:48:9d:fe:56:9d:
                    59:01:c8:91:2b:9f:1a:7a:ff:fc:a5:1a:68:97:44:
                    45:fa:3d:4e:27:c6:2e:f1:98:2f:9c:7e:5e:35:8a:
                    03:cd:e0:1f:c1:f4:f5:0b:25:4c:8e:61:b7:b5:56:
                    8a:63:c2:c4:f7:31:b0:66:1d:fa:c9:00:90:f6:9a:
                    b0:e4:02:1f:28:64:e0:79:d3:73:4f:1e:10:b7:97:
                    f4:cb:ad:a8:38:a3:92:e8:14:90:2f:81:49:5c:24:
                    a8:69:ae:a6:d2:15:bc:58:92:16:5a:47:8f:91:ef:
                    97:15:cc:fe:48:2c:50:0c:4c:94:67:53:a8:7a:b8:
                    34:05:81:5d:90:20:37:da:3c:85:c8:e2:c7:c2:a0:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D7:54:E7:D6:E7:B0:AF:EB:7B:38:91:70:19:07:E5:CC:D7:47:1E
            X509v3 Authority Key Identifier:
                keyid:66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/wddU59bnsK_reziRcBkH5czXRx4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7641::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:69:c7:75:0c:ba:1d:05:b2:50:ef:6b:77:ba:67:18:9e:c3:
         ae:c0:64:e9:07:db:6b:d1:f5:33:05:44:bd:ae:1d:af:5d:18:
         7c:a3:43:c3:3c:e9:80:41:29:9d:dc:2c:d2:4d:5d:55:4c:e6:
         15:d9:c4:09:4e:e5:0c:dd:47:61:3c:7e:e7:41:0b:b3:98:7e:
         d0:c0:d7:eb:dc:e6:06:59:3d:0b:a9:71:03:8f:c3:19:31:17:
         33:b4:f5:32:96:cb:ae:38:8c:cf:71:a2:81:11:ad:ef:bf:6d:
         16:95:99:6e:21:5c:f4:97:f4:26:33:33:e7:f9:fe:46:ed:07:
         79:b1:fc:fc:5a:0f:5b:55:0f:ea:3d:23:75:9b:8e:24:aa:e6:
         5f:b2:48:d6:1a:09:e1:57:d0:08:03:3a:26:c7:32:18:e2:8d:
         97:8b:05:cd:59:d2:80:66:02:7a:6b:e6:6d:18:a3:d9:d2:70:
         ae:a2:66:47:4f:9e:9c:6c:47:1c:96:5f:15:82:17:07:a3:53:
         3b:e4:9f:a2:63:dc:75:48:72:41:4d:f0:60:31:c1:75:e9:9d:
         37:dc:1f:68:56:8b:25:94:71:2f:d4:9f:45:05:24:5c:58:74:
         f0:af:7b:da:22:b7:6d:d3:eb:0e:d4:f0:d8:4d:16:5c:9c:f3:
         a7:9b:8f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 10:20:16 2024 by rpki-client on console-fra.rpki-client.org