Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30420/hOPlhfMwwr0Wb35IzerRq2TN79M.roa
File:                     hOPlhfMwwr0Wb35IzerRq2TN79M.roa (raw, json)
Hash identifier:          /EGEb1Cu2k9b57zw8nYREVrbVao4fuNzlLEk8CX8ba8=
Subject key identifier:   84:E3:E5:85:F3:30:C2:BD:16:6F:7E:48:CD:EA:D1:AB:64:CD:EF:D3
Certificate issuer:       /CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
Certificate serial:       06
Authority key identifier: A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/hOPlhfMwwr0Wb35IzerRq2TN79M.roa
Signing time:             Wed 10 Jan 2024 16:39:35 +0000
ROA not before:           Wed 10 Jan 2024 16:39:35 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     150362
IP address blocks:        2400:f7a0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sun 17 Mar 2024 13:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
        Validity
            Not Before: Jan 10 16:39:35 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=84E3E585F330C2BD166F7E48CDEAD1AB64CDEFD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9c:80:31:d3:71:8c:26:36:5b:7b:ea:6d:40:
                    23:14:ab:eb:9b:c1:39:ce:6b:b8:03:36:16:5e:ab:
                    5b:36:94:f7:3c:9c:e2:7e:3b:eb:d8:a2:1a:bb:cc:
                    f5:d7:c6:d7:97:34:fc:20:1e:08:0a:32:ae:09:fa:
                    fb:1d:3a:4f:e7:b6:16:a0:56:0e:e8:fd:a8:2f:4e:
                    6a:eb:46:03:68:06:b6:8b:a3:f8:9a:14:6f:d0:7a:
                    3c:52:c0:6d:e8:bb:5b:01:db:b6:a0:cc:5f:85:ca:
                    5b:6d:31:e3:ca:37:89:c0:19:7e:55:8d:f9:68:9a:
                    c9:1b:87:9c:13:77:b8:5b:c5:47:cf:5a:56:dc:04:
                    60:bb:dd:51:a1:7f:48:43:9f:08:9d:47:37:4d:25:
                    9f:b2:94:29:2b:2d:38:b8:c5:c9:b9:e4:c8:d5:1e:
                    e5:ec:0d:a9:9f:a6:64:8b:40:10:61:1e:bb:15:04:
                    3f:5e:c6:40:2d:fc:43:38:50:a7:c7:03:0a:df:47:
                    c7:c9:63:e3:26:41:0b:b3:b7:d7:e9:41:3e:1d:cb:
                    b7:2b:32:e8:e6:5e:04:0c:87:b9:3e:c9:21:f8:1d:
                    ed:17:90:76:1b:89:e1:0e:7b:20:93:4c:f6:8a:53:
                    46:dc:0d:89:88:7f:c8:cc:b8:b8:34:17:fa:54:ea:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:E5:85:F3:30:C2:BD:16:6F:7E:48:CD:EA:D1:AB:64:CD:EF:D3
            X509v3 Authority Key Identifier:
                keyid:A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/hOPlhfMwwr0Wb35IzerRq2TN79M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:cf:15:6b:69:8c:35:eb:cd:4b:85:e3:0e:77:da:f2:b0:5f:
         7e:f6:00:d3:02:f0:8e:92:68:47:5a:c3:aa:62:86:35:d5:0c:
         14:b3:2c:9c:6b:29:8a:ce:9e:76:1a:ee:31:66:a6:b7:4a:8d:
         34:15:45:27:48:26:08:e2:6d:63:b0:24:34:40:d8:32:72:04:
         29:61:ed:bf:27:c3:99:31:f2:f6:7d:8d:25:c4:4f:e1:0e:79:
         6e:b1:6d:e3:25:40:f6:b9:12:8f:1d:1c:a8:ca:98:d6:cd:f2:
         59:c6:79:7a:7d:8b:71:e8:a1:2b:58:b6:57:5e:f9:c3:c8:d8:
         46:ba:cc:b4:0b:ef:f3:01:bb:a5:5e:88:75:1a:b4:85:8b:35:
         4f:eb:53:65:a4:19:e6:18:64:3b:d1:81:34:9f:80:db:6d:e9:
         90:5b:83:cd:39:77:e8:56:d0:96:bf:f2:f1:e3:a6:87:5f:2b:
         50:b5:a6:21:8f:b5:b0:63:07:9b:ac:ce:e7:c7:02:ad:3b:fe:
         61:fd:0c:54:58:f6:3f:cf:cc:3d:ec:a1:9c:51:4e:5b:c3:10:
         a9:82:aa:7b:8c:7e:69:4a:10:4e:2d:c1:7e:ee:d5:9d:70:e8:
         f8:d2:08:18:c4:10:e2:33:bd:66:f3:8f:ba:1f:22:57:53:b4:
         6a:ce:83:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 14:37:37 2024 by rpki-client on console-fra.rpki-client.org