Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30327/fmY3eKTT4QoO3Hxpe_7YrcUVt58.roa
File:                     fmY3eKTT4QoO3Hxpe_7YrcUVt58.roa (raw, json)
Hash identifier:          tV3OdS6yAPuwSmkwIyaQzaAC9S8/A0TYWWjE8EKSum0=
Subject key identifier:   7E:66:37:78:A4:D3:E1:0A:0E:DC:7C:69:7B:FE:D8:AD:C5:15:B7:9F
Certificate issuer:       /CN=62221DAD8F905C6293B90261FE5FECBC989F7FA7
Certificate serial:       2B
Authority key identifier: 62:22:1D:AD:8F:90:5C:62:93:B9:02:61:FE:5F:EC:BC:98:9F:7F:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/fmY3eKTT4QoO3Hxpe_7YrcUVt58.roa
Signing time:             Fri 17 Mar 2023 13:10:59 +0000
ROA not before:           Fri 17 Mar 2023 13:10:59 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     63786
IP address blocks:        2403:a640:200::/39 maxlen: 48

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62221DAD8F905C6293B90261FE5FECBC989F7FA7
        Validity
            Not Before: Mar 17 13:10:59 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=7E663778A4D3E10A0EDC7C697BFED8ADC515B79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:1e:54:80:cf:e0:b8:c0:46:19:2a:2c:7f:
                    c2:83:73:c7:19:93:15:9b:d6:cc:55:85:fc:70:75:
                    5f:98:71:9b:36:a7:ca:82:9b:3b:9f:f3:57:a7:e7:
                    ab:12:ec:34:f4:03:6e:19:7d:59:47:48:81:7b:76:
                    e8:8b:9c:93:6c:aa:6b:bc:c8:21:c1:09:72:ca:cb:
                    ed:ba:2e:96:a2:d2:e8:2e:7a:53:35:cb:da:b1:7c:
                    09:02:45:d8:7f:9b:6c:9f:83:39:3e:36:6d:a8:71:
                    76:16:a3:15:1f:cf:e7:05:f3:0d:32:0e:9a:07:06:
                    fa:51:3b:2e:5b:56:a6:3c:bf:b4:ae:74:4c:e7:d6:
                    c6:f1:13:96:00:28:9c:96:be:63:f9:3e:f4:9b:98:
                    d2:c3:bd:ac:83:03:9a:e6:ea:89:d3:fe:62:a2:62:
                    28:7a:7e:ab:64:79:c8:7a:80:2d:eb:d8:41:60:19:
                    ab:5f:c2:fd:f7:e6:3a:19:6e:e2:dd:db:5e:89:4e:
                    ee:11:2e:5e:12:b8:35:3f:07:a7:a7:57:2b:79:f0:
                    01:0a:f5:5f:24:fd:71:9f:15:86:7a:4b:b1:4e:ac:
                    57:14:36:4e:db:11:11:7f:d3:cf:dd:8f:4d:dc:a1:
                    e4:bc:3d:c8:c9:b4:20:fa:1c:65:bd:f4:60:ca:4b:
                    0e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:66:37:78:A4:D3:E1:0A:0E:DC:7C:69:7B:FE:D8:AD:C5:15:B7:9F
            X509v3 Authority Key Identifier:
                keyid:62:22:1D:AD:8F:90:5C:62:93:B9:02:61:FE:5F:EC:BC:98:9F:7F:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/YiIdrY-QXGKTuQJh_l_svJiff6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/fmY3eKTT4QoO3Hxpe_7YrcUVt58.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a640:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         e8:c6:d7:72:5a:d2:32:12:da:4e:24:ac:b8:d4:78:04:54:69:
         ca:6f:eb:7a:9b:9f:bd:dd:78:29:9f:0c:d8:44:39:50:81:eb:
         a0:a3:e4:f3:04:f2:43:d2:18:4a:38:90:1d:c7:77:b6:c3:08:
         c3:76:8b:36:41:4e:94:34:7a:f6:72:21:25:f4:c3:01:e9:7e:
         e1:5a:d6:e5:73:04:36:0d:bb:f7:dd:ad:23:47:ea:3b:39:8e:
         fa:5f:c0:2d:64:93:70:b0:f5:ff:22:71:f8:7b:c8:28:bf:ee:
         17:bf:ee:ee:09:bf:4e:d8:c6:c1:ec:f8:94:b9:11:72:ea:08:
         24:94:ce:2c:eb:60:a4:26:90:c3:23:d8:a1:fd:5a:a2:8e:c3:
         ae:d1:7e:8e:d5:0d:11:ac:bb:54:5f:99:a4:32:eb:58:24:0d:
         3a:4d:1d:1f:19:61:a3:9d:d8:4d:a0:92:50:3c:1f:0f:73:bb:
         f6:ec:c6:99:a2:56:e6:27:5e:54:08:17:79:a2:d5:ab:9c:83:
         fb:56:ea:1f:59:5b:59:e2:bf:52:24:81:78:94:c7:88:57:93:
         4e:13:e6:da:24:26:12:3a:30:0f:96:ff:34:63:2f:c9:f3:2b:
         d4:3b:11:df:a7:ad:63:34:52:ab:48:6d:54:c3:62:38:9b:ca:
         a5:aa:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:25 2024 by rpki-client on console-ams.rpki-client.org