Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/YC4s8vQbMHtiYSsZmDjwxzmOOMs.roa
File:                     YC4s8vQbMHtiYSsZmDjwxzmOOMs.roa (raw, json)
Hash identifier:          rKRCvfEX7NqL3H4AnPFJBMxxbRB5J4Xh/OOC+4b7koM=
Subject key identifier:   60:2E:2C:F2:F4:1B:30:7B:62:61:2B:19:98:38:F0:C7:39:8E:38:CB
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       31
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/YC4s8vQbMHtiYSsZmDjwxzmOOMs.roa
Signing time:             Fri 15 Sep 2023 06:46:41 +0000
ROA not before:           Fri 15 Sep 2023 06:46:41 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18144
IP address blocks:        116.81.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Sep 15 06:46:41 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=602E2CF2F41B307B62612B199838F0C7398E38CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:f3:36:ed:f8:8c:a3:ca:24:65:5b:4f:95:
                    ec:88:12:99:8f:ab:9c:8f:f0:ed:21:cf:7d:64:a8:
                    a0:f7:e6:ac:19:b3:dd:1f:59:0c:62:ac:58:b4:fe:
                    ac:c4:41:dd:2a:c6:09:fb:49:e2:7b:0c:64:61:b1:
                    56:ad:0f:91:04:01:8d:85:39:c0:00:a4:42:37:ec:
                    3f:04:97:b7:bd:2d:04:0f:17:07:83:95:24:5b:9c:
                    50:09:f8:15:08:42:10:96:1e:5e:bf:50:1e:4e:23:
                    45:e5:26:b8:bf:c1:f7:30:1a:1e:f4:d4:01:49:34:
                    da:bc:4f:10:13:aa:f8:65:4f:66:8b:ec:cd:02:2e:
                    6a:1f:9c:35:88:e2:86:b1:58:01:9a:ce:b3:04:2f:
                    d6:d9:6c:70:19:2d:46:da:6d:99:f9:10:cc:ed:4a:
                    15:f8:88:0a:3b:94:e7:8e:73:c7:ee:fc:df:b1:62:
                    1a:0f:c7:d0:5a:38:8a:97:cb:c4:37:bd:22:39:3a:
                    c0:6b:00:c4:14:94:6a:e3:69:ed:05:f4:14:2c:4a:
                    e2:ca:8a:8e:03:06:36:61:ab:42:68:92:f0:92:9d:
                    7e:94:c3:2e:a3:3c:00:03:e7:9b:62:61:01:47:cc:
                    e5:98:0e:b7:a4:7c:69:68:4c:4b:68:68:fd:90:76:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2E:2C:F2:F4:1B:30:7B:62:61:2B:19:98:38:F0:C7:39:8E:38:CB
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/YC4s8vQbMHtiYSsZmDjwxzmOOMs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.81.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:20:5d:79:7d:ce:4d:5b:aa:39:03:d0:f8:ba:90:85:fe:bf:
         d5:3c:75:d3:1e:ea:13:b0:9f:29:8b:ff:fe:aa:b4:35:c2:74:
         3c:f6:b5:34:c1:aa:05:2f:f3:01:7b:2e:4b:f7:84:44:2d:1d:
         ac:c3:be:3a:a7:d1:cc:24:72:0f:bd:06:48:7e:37:25:44:75:
         02:4f:bb:8a:83:da:ee:c0:ae:b3:0c:ce:77:bb:2c:86:17:ab:
         5a:6e:ea:d1:86:a8:46:1b:54:40:35:65:86:ca:38:62:26:e0:
         c2:c1:de:03:3c:ce:55:b0:5e:8c:bf:f4:50:4a:8c:ab:df:28:
         da:7d:8c:3f:8b:a5:f9:60:d4:be:ca:38:44:15:80:e0:f4:46:
         7f:9c:48:89:fe:51:df:bd:c4:a4:57:d9:de:f8:c0:28:50:3f:
         cc:62:1f:df:3b:6a:6a:14:b5:9d:30:51:ba:fa:68:5c:5d:e3:
         cd:44:59:ff:8f:ba:df:53:59:4f:8a:0e:88:4d:ac:2f:c8:3f:
         d3:b3:62:60:79:e5:78:f2:19:77:40:f0:5b:41:cd:d6:c7:d6:
         5e:40:b6:9f:12:f4:a3:a7:60:38:09:03:21:35:20:dc:40:bc:
         0a:73:1a:0f:41:d4:ba:5a:12:66:70:e8:c4:9b:27:ec:a8:45:
         88:19:6b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:44 2024 by rpki-client on console-fra.rpki-client.org