Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/1wk3lL3m2KgsTXizZn7GUechu80.roa
File:                     1wk3lL3m2KgsTXizZn7GUechu80.roa (raw, json)
Hash identifier:          9gd7BAq0PDnavs+qYhFjeo5QV+byWbPIQbp4edbRsmo=
Subject key identifier:   D7:09:37:94:BD:E6:D8:A8:2C:4D:78:B3:66:7E:C6:51:E7:21:BB:CD
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       07
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/1wk3lL3m2KgsTXizZn7GUechu80.roa
Signing time:             Mon 06 Nov 2023 07:22:58 +0000
ROA not before:           Mon 06 Nov 2023 07:22:58 +0000
ROA not after:            Fri 01 Nov 2024 08:11:41 +0000
asID:                     23783
IP address blocks:        61.11.192.0/20 maxlen: 21

Validation:               Failed, certificate revoked on Fri 18 Oct 2024 08:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Nov  6 07:22:58 2023 GMT
            Not After : Nov  1 08:11:41 2024 GMT
        Subject: CN=D7093794BDE6D8A82C4D78B3667EC651E721BBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:03:33:ac:63:cb:05:b3:8c:e0:d0:00:01:
                    d4:06:ec:54:c0:cd:00:24:42:33:76:0c:aa:84:52:
                    8c:99:ea:39:99:10:19:54:34:ec:32:97:c2:f6:06:
                    de:bd:4f:20:67:96:83:d4:ff:b7:3d:cc:02:54:27:
                    01:06:db:29:01:92:ed:69:d1:20:07:bf:3c:7e:fd:
                    fe:c2:23:33:f3:ca:ba:0d:3f:6f:18:1b:0c:18:07:
                    77:2d:46:1f:e7:47:88:02:56:b6:2f:aa:1c:82:ee:
                    74:8a:94:08:ff:eb:67:b8:5f:64:3c:dd:20:00:83:
                    05:aa:ba:55:9e:ad:cc:39:ed:89:61:67:00:f7:07:
                    01:b0:01:4c:0c:64:cf:a0:d6:6f:7d:26:dc:4d:df:
                    40:d8:7e:ec:06:02:f5:bb:01:5e:a5:fd:54:b8:26:
                    bd:0b:24:be:1a:94:e9:dd:1e:97:b4:eb:d5:7a:98:
                    0d:15:a7:53:21:54:b9:b4:85:44:90:d9:3b:4e:73:
                    b6:7d:b2:37:91:16:67:43:9e:98:fd:04:a1:c9:3f:
                    42:2e:6b:c9:63:ce:bd:59:48:b7:da:fd:35:82:a0:
                    42:1d:91:97:86:4b:1e:77:7d:6a:ac:f5:d3:93:50:
                    91:07:3e:90:81:4c:91:94:f8:ff:5c:af:64:96:46:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:09:37:94:BD:E6:D8:A8:2C:4D:78:B3:66:7E:C6:51:E7:21:BB:CD
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/1wk3lL3m2KgsTXizZn7GUechu80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.11.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:7e:f0:db:00:2c:99:12:a8:96:dd:6f:da:52:61:75:c8:1b:
         cd:a2:89:51:d4:d6:1f:7f:60:17:f7:14:cb:c8:6f:09:48:34:
         ea:97:e9:73:7d:9a:7c:59:0a:e7:ab:a1:f5:a2:ac:8d:66:3d:
         5e:99:fd:d0:ce:0f:58:6e:cb:2c:3c:15:b6:59:c5:91:db:23:
         69:5e:c9:7b:36:5b:8f:29:91:ca:17:f2:1c:1d:b9:7e:70:96:
         c9:4d:05:62:80:4a:fe:23:fd:0c:f7:4a:e3:58:eb:61:91:b4:
         68:76:87:7d:98:26:61:f9:17:bf:86:b6:0e:a7:be:97:30:5c:
         08:f7:6f:6a:23:42:27:7c:bc:94:44:cb:ec:b2:e9:3c:e8:27:
         c8:76:a0:2b:d1:80:7d:f6:13:97:d2:63:ed:f0:56:06:a4:75:
         d1:2b:e2:70:90:92:7d:cc:72:ed:5b:60:41:08:df:cd:2a:26:
         a5:33:ed:78:29:ee:2c:d1:25:c0:7d:ed:fb:37:cc:f3:6a:2c:
         b1:6f:c2:75:c6:56:74:bc:52:3d:91:83:f5:aa:a8:90:a2:65:
         a1:da:4a:89:96:9b:2a:3f:65:a2:fe:35:69:0b:93:4e:d3:07:
         e5:36:d8:3f:82:b2:6b:be:55:39:29:9f:e5:de:64:c4:c2:d3:
         79:60:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 10:57:33 2024 by rpki-client on console-ams.rpki-client.org