Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/a67JsrKDMSD_HG_k_WITrtWsqAg.roa
File:                     a67JsrKDMSD_HG_k_WITrtWsqAg.roa (raw, json)
Hash identifier:          0iC4mjh+lIRPHPSHxDTMNjk5lhONch6C47AnbRzRPq0=
Subject key identifier:   6B:AE:C9:B2:B2:83:31:20:FF:1C:6F:E4:FD:62:13:AE:D5:AC:A8:08
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0472
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/a67JsrKDMSD_HG_k_WITrtWsqAg.roa
Signing time:             Thu 13 Apr 2023 09:59:48 +0000
ROA not before:           Thu 13 Apr 2023 09:59:48 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        116.254.64.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:48 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=6BAEC9B2B2833120FF1C6FE4FD6213AED5ACA808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:cb:fe:dd:21:12:77:05:66:c6:5e:58:6c:
                    a0:4b:19:cc:38:a3:db:e1:19:8e:cc:82:a3:31:db:
                    05:d2:53:56:54:8e:96:a2:dd:81:71:2b:6c:b8:4d:
                    af:bc:bb:fd:27:4a:0b:0f:fd:06:a9:59:ad:58:05:
                    57:b2:7f:44:98:6c:fc:38:26:54:06:c3:92:60:c6:
                    98:10:08:a9:9c:b2:a4:2b:de:ea:97:5e:cf:28:dc:
                    c8:d8:01:0b:33:18:ef:80:ec:85:e4:a7:23:75:42:
                    08:76:a6:eb:df:ef:03:7a:5e:a5:c6:26:ac:a5:29:
                    dc:74:94:bc:0a:71:f6:ed:15:20:15:2b:b1:ee:95:
                    e1:e2:d2:35:b7:b2:f0:ae:2c:4b:36:c9:5a:42:e8:
                    e5:0e:12:a7:f0:e1:0c:dd:09:b6:83:57:0c:be:94:
                    1f:a8:c0:56:c7:dd:8a:99:c4:c7:d7:46:ef:0e:33:
                    8a:07:05:57:0b:c3:cd:a4:88:48:f5:d2:b5:92:0a:
                    f6:fa:ec:c8:31:14:1c:a3:b2:dd:7d:d2:75:1a:5f:
                    9c:31:86:96:53:c0:8f:2f:c3:ed:c7:af:e4:62:be:
                    44:7d:e3:d1:4d:5a:f3:7d:3e:b7:ed:6c:ce:a2:7a:
                    89:a0:9b:07:de:4f:69:6d:db:ca:b1:0b:02:6e:12:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AE:C9:B2:B2:83:31:20:FF:1C:6F:E4:FD:62:13:AE:D5:AC:A8:08
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/a67JsrKDMSD_HG_k_WITrtWsqAg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.254.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:2e:a2:e4:52:36:cb:e4:9c:04:c2:7d:3a:c2:c5:f5:7d:4b:
         43:1d:d6:56:c7:f3:f5:f8:7f:41:ba:0e:9d:92:20:a6:c6:1a:
         cf:23:94:e5:74:96:07:6d:59:af:b5:7f:59:40:5b:e4:d7:e2:
         81:99:84:96:33:a4:a9:bd:70:df:30:7e:ab:3f:9c:e4:53:2b:
         fb:c7:cb:74:e1:9c:6d:b5:5f:ea:94:93:1f:f5:5c:73:a2:07:
         9c:51:a3:c2:cb:35:98:57:01:aa:48:2b:fc:bc:73:c2:c9:aa:
         13:c2:e6:61:84:53:43:39:1a:94:a6:0a:ef:40:df:bc:0f:b1:
         5b:6e:0c:e8:f1:50:45:68:2e:83:c7:76:f8:77:5a:c1:70:0a:
         f3:14:9a:4d:e7:37:b1:b7:2b:45:69:ee:7e:dc:f5:92:25:ae:
         cc:d9:0b:17:dd:ba:25:b2:a8:30:aa:5f:7f:b2:15:ac:d8:9a:
         32:3e:05:33:a0:26:d9:41:03:08:47:26:7b:f8:85:88:e3:6f:
         94:b2:60:47:7f:46:82:47:1e:10:66:4f:0f:09:0e:d4:2a:3e:
         94:61:de:ad:70:90:05:86:19:e0:be:48:3d:3c:81:ac:d3:08:
         85:ee:b4:29:08:4b:e1:6e:37:cb:a8:3b:15:ae:0b:ce:2f:c1:
         ac:98:3d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org