Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39067/sGWCH-wLmRUCk0lg-CQhzSQNXMc.roa
File:                     sGWCH-wLmRUCk0lg-CQhzSQNXMc.roa (raw, json)
Hash identifier:          WBlkPs3C15sbuC4n82XFzYFrIixtpPpzbRCn+6eS1/4=
Subject key identifier:   B0:65:82:1F:EC:0B:99:15:02:93:49:60:F8:24:21:CD:24:0D:5C:C7
Certificate issuer:       /CN=88EDBD88734B8DBB3586A6D059B8A657BFB3A218
Certificate serial:       02
Authority key identifier: 88:ED:BD:88:73:4B:8D:BB:35:86:A6:D0:59:B8:A6:57:BF:B3:A2:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/sGWCH-wLmRUCk0lg-CQhzSQNXMc.roa
Signing time:             Mon 13 Nov 2023 02:51:44 +0000
ROA not before:           Mon 13 Nov 2023 02:51:44 +0000
ROA not after:            Sat 09 Nov 2024 12:12:10 +0000
asID:                     63806
IP address blocks:        2001:df3:14c0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 12:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88EDBD88734B8DBB3586A6D059B8A657BFB3A218
        Validity
            Not Before: Nov 13 02:51:44 2023 GMT
            Not After : Nov  9 12:12:10 2024 GMT
        Subject: CN=B065821FEC0B991502934960F82421CD240D5CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:3e:84:24:e1:4d:eb:79:45:40:eb:53:8e:
                    31:52:b9:c8:f9:b4:84:f6:e1:64:a0:fe:3d:49:92:
                    08:c7:03:6c:e8:57:22:ee:e0:dd:b2:cf:47:ce:ad:
                    c3:d3:67:35:2a:44:c5:18:aa:f4:d4:b6:1d:52:37:
                    c0:a9:f2:25:8c:f9:6b:1a:3f:39:a2:58:8f:ee:23:
                    88:36:27:34:c2:0e:fa:ce:ea:b4:75:30:15:0b:e9:
                    ae:c8:45:d4:29:2d:29:f0:ba:64:99:6f:4e:38:64:
                    bb:71:d2:2b:79:29:f1:6d:0b:77:08:8f:0c:fa:b3:
                    e8:c0:08:63:a7:22:cc:ee:a0:e9:1f:c1:87:f4:6c:
                    30:43:1d:32:17:3c:df:14:fd:a8:30:12:2f:cc:4b:
                    0c:af:eb:93:b7:cc:05:87:3d:ec:1f:43:21:7c:85:
                    9c:c1:9d:e8:ae:ed:b5:15:32:67:7d:c2:e2:f9:5d:
                    21:6b:72:47:39:a3:5f:46:0b:c7:c1:ad:52:4b:f3:
                    59:f8:df:4d:ed:ac:e1:b0:65:f3:62:d8:14:bc:02:
                    1c:64:55:1e:3e:93:61:1a:5b:28:8b:5c:dd:4e:35:
                    a2:ef:b6:4c:c1:88:3f:1f:9b:eb:cc:c8:02:6d:63:
                    b6:08:27:d1:d7:b5:96:92:6f:67:b5:be:5b:64:7a:
                    80:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:65:82:1F:EC:0B:99:15:02:93:49:60:F8:24:21:CD:24:0D:5C:C7
            X509v3 Authority Key Identifier:
                keyid:88:ED:BD:88:73:4B:8D:BB:35:86:A6:D0:59:B8:A6:57:BF:B3:A2:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/sGWCH-wLmRUCk0lg-CQhzSQNXMc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:14c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:a4:1c:a3:1e:85:98:db:d6:cd:7f:9c:68:bc:0e:3a:c0:a8:
         a9:8d:6d:60:7a:61:49:6f:10:1f:ca:5e:64:e5:90:1d:35:c5:
         53:5d:00:fc:ae:75:ba:f3:42:fe:f2:3a:b9:06:63:e1:bc:89:
         3c:ff:e8:e3:44:fa:0d:03:35:05:5b:be:5d:db:1f:63:7a:4e:
         56:61:ca:97:12:c2:17:5b:77:2d:e3:24:60:43:b0:c7:5d:d8:
         90:ee:b6:9f:c9:ed:d6:bc:d3:ed:79:73:e1:4a:12:88:1b:2b:
         84:ed:d7:af:b9:94:16:3d:7e:5b:6d:8b:b4:33:93:47:1e:bb:
         68:7a:f4:e3:a4:64:d6:bd:3a:40:95:41:8d:dd:5a:03:2c:42:
         e8:d4:14:f4:a5:54:1d:41:fd:0c:95:d1:c4:b4:19:1a:39:2b:
         0e:70:e9:00:5d:76:a7:7d:62:d4:f6:cf:f7:64:23:41:b1:e8:
         55:ed:eb:50:c9:fa:d5:26:5c:96:b6:6f:fd:9e:c2:90:2a:ae:
         24:2c:1f:7e:39:95:2e:df:14:07:7d:e4:a7:39:8e:a2:3b:26:
         c8:20:d8:73:a2:0a:93:23:ba:62:89:c4:94:75:75:f5:61:c5:
         83:d8:7c:82:5a:db:8d:16:ad:8b:a8:05:bd:c3:c8:7d:a5:da:
         7b:4f:f8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 13:24:30 2024 by rpki-client on console-fra.rpki-client.org