Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/WbOk3omZb9IVZ-temoPnBv2RcUY.roa
File:                     WbOk3omZb9IVZ-temoPnBv2RcUY.roa (raw, json)
Hash identifier:          cu5M63yxgiTFwBJ2NeRa2ACLcwzMvsImDbId5wi/eJ4=
Subject key identifier:   59:B3:A4:DE:89:99:6F:D2:15:67:EB:5E:9A:83:E7:06:FD:91:71:46
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       040D
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/WbOk3omZb9IVZ-temoPnBv2RcUY.roa
Signing time:             Thu 13 Apr 2023 09:52:19 +0000
ROA not before:           Thu 13 Apr 2023 09:52:19 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        61.200.96.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1037 (0x40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:19 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=59B3A4DE89996FD21567EB5E9A83E706FD917146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:03:b1:2d:66:25:63:d6:63:20:2f:0e:d8:
                    69:ce:b7:0f:30:ce:f2:72:24:0e:3c:46:80:b8:07:
                    e5:95:13:14:02:bf:0e:34:6e:90:c6:26:88:d1:0f:
                    17:e1:39:d3:04:c2:ce:fa:4f:85:18:85:72:00:e1:
                    f8:ba:a8:f1:a7:8f:06:8c:e6:ba:91:38:05:12:b3:
                    1b:0d:66:a1:bf:b6:a1:7d:6b:52:37:89:bf:01:2f:
                    65:5b:4d:f2:be:2e:25:db:e0:f7:f4:65:ae:aa:f3:
                    e4:34:cc:28:62:1f:ba:85:73:53:79:e7:80:c7:63:
                    d1:5a:9f:d5:9c:3c:d5:5c:07:9a:fb:2c:2e:71:0c:
                    c7:fd:06:8f:d7:2c:2a:37:6e:29:cf:e6:15:06:f5:
                    39:1e:b5:3a:95:5c:1b:c4:3a:27:a2:8a:e4:5c:30:
                    c7:eb:67:2c:cb:a3:9e:7f:ca:18:a7:21:2e:df:90:
                    1f:bd:84:9a:50:78:51:70:1f:ad:4e:93:e1:7d:5a:
                    e2:f0:4d:69:e4:06:99:a0:b8:57:e8:bc:b2:f7:a0:
                    e3:96:01:e8:25:58:09:17:4b:8f:d8:23:ee:2f:ef:
                    c9:61:71:91:c2:42:e9:90:49:71:95:d1:21:8a:92:
                    35:be:66:80:ac:1f:a9:cd:26:d4:b8:f5:1b:92:45:
                    d3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B3:A4:DE:89:99:6F:D2:15:67:EB:5E:9A:83:E7:06:FD:91:71:46
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/WbOk3omZb9IVZ-temoPnBv2RcUY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:ff:ae:27:5c:e2:c6:ad:7a:4f:df:91:b6:5f:c9:07:13:fe:
         da:70:b5:6d:8c:e3:b5:c9:27:63:9a:16:07:4d:c8:2a:9c:53:
         b8:bb:05:0d:96:11:6a:05:11:bf:0a:21:8a:fb:23:cd:a0:74:
         29:ff:df:18:b8:91:a2:f0:e0:1c:2f:b4:c4:2a:38:b5:ae:32:
         e9:59:41:b0:58:d5:bc:ef:fa:83:32:b7:38:3c:86:f2:f8:02:
         bf:65:fe:c7:c2:de:af:2a:db:13:b9:81:84:c9:4e:21:63:09:
         55:ec:99:58:22:3a:36:e6:e0:49:d9:fa:cd:60:41:5b:44:4b:
         18:41:2b:79:89:02:96:30:29:07:da:0f:45:98:3e:67:4d:f2:
         b5:e2:53:46:13:b2:32:e5:ac:b4:24:a8:a4:cd:8b:fa:c9:4a:
         1c:19:69:e0:18:37:b2:a7:b9:bf:45:93:0c:72:38:f0:62:cd:
         ec:6b:62:91:c1:98:9a:86:2e:e2:6a:76:25:f9:39:fe:a6:ef:
         a0:07:ce:ba:06:c4:6a:5d:8c:d9:c1:22:bd:ec:88:29:f1:a1:
         93:1a:34:66:49:50:b0:93:11:e0:27:7b:92:db:f6:29:c2:4b:
         05:6e:35:46:40:0e:d8:cc:aa:b0:4b:08:33:87:e2:cd:b9:52:
         f5:8d:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org