Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/aFhGkO3o3GgzScwgzZnaGTa78Gg.roa
File:                     aFhGkO3o3GgzScwgzZnaGTa78Gg.roa (raw, json)
Hash identifier:          ODn2Fhdu17PtSF4YGBpOEXuIB9zXDMuY0eB3Y9lKjak=
Subject key identifier:   68:58:46:90:ED:E8:DC:68:33:49:CC:20:CD:99:DA:19:36:BB:F0:68
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       0B
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/aFhGkO3o3GgzScwgzZnaGTa78Gg.roa
Signing time:             Wed 13 Dec 2023 04:47:49 +0000
ROA not before:           Wed 13 Dec 2023 04:47:49 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     63800
IP address blocks:        2401:d20:1000::/44 maxlen: 48

Validation:               Failed, certificate revoked on Sat 19 Oct 2024 05:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Dec 13 04:47:49 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=68584690EDE8DC683349CC20CD99DA1936BBF068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:8a:3b:6a:cf:ea:a0:7d:40:a0:2e:44:f3:
                    07:3a:19:4a:3e:9f:9f:69:59:df:e1:d0:c1:d0:38:
                    ed:63:6a:07:fe:12:8d:3a:5f:60:2c:56:e8:31:0b:
                    c6:60:8f:32:50:c0:f0:c2:d8:73:80:b4:ae:ef:79:
                    ef:9d:24:32:9a:16:3e:c5:1b:73:8f:5d:2c:35:fa:
                    76:a7:df:60:80:30:f9:2d:fe:56:45:4f:ef:ac:64:
                    64:fd:8a:20:bd:4a:d0:d6:a9:d4:ba:f7:35:86:2f:
                    13:f0:55:ec:f1:ec:c5:cb:22:fa:87:5c:53:9c:b7:
                    0d:62:db:f6:4d:ef:22:19:f1:9b:3b:69:13:d4:83:
                    e2:45:69:4a:c3:eb:2b:4b:ed:1f:1c:e8:0e:a6:2d:
                    ac:ad:2b:b9:46:6e:61:40:18:7f:1c:1f:4c:4a:93:
                    7a:6e:e5:e1:53:f4:1f:9e:3f:e4:e3:51:6f:90:de:
                    99:cc:58:39:97:3c:f9:eb:07:2d:77:e2:f6:f8:f5:
                    a8:e7:f8:c3:e3:e0:b5:c7:1e:c2:43:52:39:c2:9b:
                    4e:dd:03:2c:49:44:4f:15:14:c8:98:eb:da:63:35:
                    6c:3d:fc:95:6b:57:41:57:1f:04:e1:d7:bb:fb:51:
                    8f:d7:1a:95:46:89:51:e2:3b:d8:3a:c8:c7:89:92:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:58:46:90:ED:E8:DC:68:33:49:CC:20:CD:99:DA:19:36:BB:F0:68
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/aFhGkO3o3GgzScwgzZnaGTa78Gg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:1000::/44

    Signature Algorithm: sha256WithRSAEncryption
         0d:b9:74:2b:80:08:6d:03:d5:2e:c9:cc:a5:36:0e:8d:41:51:
         af:d9:fd:20:8c:77:68:3a:12:2e:2c:29:97:fb:a0:b3:83:0c:
         0e:23:2c:f9:e3:c1:2d:f9:9c:8b:de:3b:36:57:d9:e7:15:80:
         32:99:86:23:08:5e:31:22:18:5c:98:47:e6:5f:ce:c4:7a:06:
         1d:7e:60:cf:71:13:3f:1a:67:73:28:e9:68:47:2f:e1:67:cd:
         ec:d6:53:ff:77:c6:2d:4c:c9:8a:06:14:11:74:82:20:d8:3e:
         15:cc:dd:f2:cd:8a:ca:f2:82:20:2c:0f:4a:bb:db:0b:e6:6a:
         38:5a:59:35:0f:ec:3a:b8:ec:d3:8c:1c:e7:76:03:e0:8c:11:
         e0:fa:dd:f7:ce:3e:78:4f:ad:01:2a:52:8a:ea:0d:b4:41:e4:
         ef:da:7a:b3:20:25:3d:b0:a7:0c:f2:85:ac:d7:9a:5d:1f:ed:
         a0:f5:35:3b:ad:1d:08:21:8c:e1:3b:f7:d2:f2:54:ef:7f:87:
         c6:b8:36:74:a1:6b:d3:ee:4b:c9:62:bd:ca:86:c1:f4:c2:de:
         36:49:86:b4:f7:e2:44:cc:c1:20:2b:9b:ac:43:d8:2d:8c:0e:
         20:db:13:66:63:d1:e0:7e:53:8d:f4:00:3b:e1:f2:6b:66:c1:
         1e:9b:01:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 08:48:32 2024 by rpki-client on console-ams.rpki-client.org