Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/e8pWEXM7wiOwTQk8zprltvePAEY.roa
File:                     e8pWEXM7wiOwTQk8zprltvePAEY.roa (raw, json)
Hash identifier:          nTIKZysNyetTrkVhbdMnNa3zXZc+A6CnO3c0fBDT0oc=
Subject key identifier:   7B:CA:56:11:73:3B:C2:23:B0:4D:09:3C:CE:9A:E5:B6:F7:8F:00:46
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       014D
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/e8pWEXM7wiOwTQk8zprltvePAEY.roa
Signing time:             Fri 05 Jul 2024 04:23:01 +0000
ROA not before:           Fri 05 Jul 2024 04:23:01 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     18071
IP address blocks:        202.224.189.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 16 Aug 2024 04:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  5 04:23:01 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=7BCA5611733BC223B04D093CCE9AE5B6F78F0046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:91:bd:a8:37:58:a3:0d:c6:4c:ea:93:a2:
                    14:c5:6b:1a:f0:14:a0:8a:cb:c5:e2:31:ba:3b:66:
                    da:9b:21:09:80:3d:c7:17:ee:88:58:d4:53:e8:35:
                    83:3a:fb:27:13:03:3f:2f:d5:7d:42:15:21:c4:44:
                    d4:69:4a:21:21:8c:b0:e0:7a:d0:86:c9:50:ef:45:
                    95:04:a6:6a:ba:a8:df:4c:72:a2:bf:7f:65:7a:a0:
                    f8:1c:53:ac:cb:90:c1:2b:68:cd:fc:9c:f9:c4:f2:
                    41:7c:c4:c9:06:f8:07:3a:14:1b:68:b2:04:61:c7:
                    46:5d:fe:71:f7:b9:09:40:cd:d3:12:bf:f0:a3:d8:
                    c0:0a:6d:1e:08:33:3e:f3:10:d6:af:6a:3c:0b:be:
                    6b:b5:06:29:37:3c:71:5c:fe:a3:1d:a2:ae:04:54:
                    e0:4f:51:c2:d1:8d:1a:df:ff:fc:7d:20:d1:f6:2c:
                    b2:3c:37:a2:5d:e5:ed:3a:8a:4d:c1:b0:3e:60:09:
                    9c:73:3f:f0:47:e1:b2:62:58:9e:81:12:38:bf:62:
                    a4:9d:18:bc:b0:bc:ee:0a:a0:31:9e:52:f1:cf:c5:
                    9f:42:8a:a1:ea:47:c4:45:70:63:e0:b0:a1:d9:63:
                    87:38:b7:46:a1:ca:0e:05:5f:2a:0b:ed:2f:e0:b5:
                    5b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CA:56:11:73:3B:C2:23:B0:4D:09:3C:CE:9A:E5:B6:F7:8F:00:46
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/e8pWEXM7wiOwTQk8zprltvePAEY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.224.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:3f:43:bf:da:0c:80:a3:ce:8c:eb:87:78:6e:42:ce:64:1f:
         cf:2b:31:6e:ee:0b:2b:92:10:46:62:7b:65:96:b0:eb:20:56:
         16:a9:fc:95:ea:b0:6c:c3:33:7b:60:15:11:6a:06:3e:00:3e:
         68:31:96:78:bf:3e:7a:f5:f3:27:6b:ee:ea:2f:70:0b:84:72:
         c3:3c:c3:ca:f5:1f:51:d2:b6:72:6a:1f:98:57:af:43:a6:0f:
         85:3f:1c:e9:74:27:d2:42:06:f5:87:f9:ef:2f:fe:77:04:d3:
         79:98:3e:45:90:05:a2:47:0f:38:bc:a5:d3:c8:ee:06:5d:31:
         76:b2:10:97:77:b6:32:62:e8:98:95:c8:ca:76:d0:75:4e:56:
         db:5b:4b:9a:94:47:f2:72:9c:86:ae:44:e4:a3:07:24:6f:ca:
         76:d3:7c:aa:91:0d:e4:89:0f:5b:59:76:04:40:51:22:c3:2b:
         05:a8:02:23:02:64:6f:92:48:42:23:b4:ae:1b:e2:0d:97:d1:
         93:a3:c3:9f:46:87:06:23:01:09:b3:b8:45:e9:76:26:ab:b0:
         f8:9b:29:84:fe:ea:08:43:07:c2:cd:77:7a:34:33:cb:29:ef:
         bd:ea:20:48:ea:f0:3f:48:83:c9:78:f2:df:5c:13:63:12:88:
         fa:6d:64:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:35 2025 by rpki-client