Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/p013ebHqKdguFPUOFPpcMFuQoIY.roa
File:                     p013ebHqKdguFPUOFPpcMFuQoIY.roa (raw, json)
Hash identifier:          Kf7G0SUwFIqq/A7mv7WJsxIKd8lZguJruKtRK/d4fuM=
Subject key identifier:   A7:4D:77:79:B1:EA:29:D8:2E:14:F5:0E:14:FA:5C:30:5B:90:A0:86
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01CD
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/p013ebHqKdguFPUOFPpcMFuQoIY.roa
Signing time:             Sun 01 Oct 2023 01:38:22 +0000
ROA not before:           Sun 01 Oct 2023 01:38:22 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        122.102.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:22 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A74D7779B1EA29D82E14F50E14FA5C305B90A086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:78:4a:59:27:a7:69:20:59:05:39:fb:ee:
                    de:57:2a:2e:9d:7a:c7:04:4a:8f:1a:d0:38:6d:0e:
                    34:96:a0:cd:d8:10:a2:74:5c:8b:4b:f8:c3:4d:b3:
                    19:2d:13:4b:d3:50:03:25:96:db:bd:f4:ee:03:25:
                    e4:90:8f:f5:ae:84:45:9c:96:db:59:b2:35:dc:af:
                    3f:c4:5a:9f:45:22:66:fd:8f:90:f2:d9:5c:77:97:
                    9c:0e:e5:7d:c0:9c:65:2e:c7:d7:a6:61:66:14:26:
                    82:4f:11:17:5a:ed:32:8b:07:ad:fb:6d:ee:e6:4a:
                    e1:d0:18:ac:07:ec:14:c3:32:87:b4:7d:5c:70:74:
                    0e:2f:1b:ef:db:07:e4:6f:ab:a3:36:37:dc:0d:1c:
                    1e:55:d1:b8:00:72:db:86:54:6b:c4:84:eb:9e:fb:
                    bd:cb:d1:37:c7:62:6b:21:e0:6a:a1:76:c7:97:e1:
                    6b:db:a7:1d:b0:d7:8d:36:a5:c8:e4:48:b6:a2:de:
                    5a:d1:3a:9a:77:5a:d2:a7:ab:24:51:1a:08:18:cc:
                    87:ee:17:03:06:c7:a3:26:04:21:37:8f:5e:8d:47:
                    eb:54:c8:5d:85:36:16:18:36:3e:c4:85:87:3d:c2:
                    e9:7a:83:11:c8:1d:1e:6e:99:90:ed:24:df:4b:77:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4D:77:79:B1:EA:29:D8:2E:14:F5:0E:14:FA:5C:30:5B:90:A0:86
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/p013ebHqKdguFPUOFPpcMFuQoIY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.102.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:fd:88:07:c8:58:ff:73:11:b6:80:b9:d5:5d:11:8c:a4:
         6b:25:db:35:48:db:6e:82:4f:e1:70:d5:51:b1:37:15:d4:a3:
         0d:6b:3e:b0:f2:c3:4a:6a:81:c3:02:63:8c:f2:0e:76:ac:30:
         83:9e:d8:d4:d9:49:80:a0:59:dd:1a:5f:ef:43:9c:50:18:4a:
         15:fc:65:9d:3e:e8:b2:9c:64:fa:09:88:25:e8:09:8b:cc:8a:
         f9:f3:9d:76:d0:bd:39:42:0b:70:78:39:e9:c8:a2:93:07:5d:
         96:f8:99:e6:d5:74:36:fa:ef:25:6f:bf:a6:87:65:e4:e3:ed:
         ec:31:1a:95:3a:27:ad:07:62:da:01:77:3f:7b:ac:0d:cd:c2:
         36:2f:30:ac:15:25:6b:4f:e1:cc:05:fb:87:96:a0:be:cc:4f:
         0e:60:00:e7:ce:2b:a8:99:96:de:e7:2f:c0:9f:a4:a1:67:5c:
         d5:0e:27:09:4a:93:99:d4:43:a4:a2:f6:7d:88:d5:24:e3:a5:
         76:c5:dd:fd:53:e7:c1:d7:7f:4c:f8:4e:60:61:d5:8d:f1:a8:
         cc:45:ee:84:77:6e:06:47:99:9d:2d:6a:a8:27:aa:93:aa:51:
         77:34:06:b0:57:cd:96:ee:45:87:5a:1f:c5:cc:85:e4:d1:d5:
         34:4f:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:44 2024 by rpki-client on console-fra.rpki-client.org