Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/iGO70lt-nYTVTCRRq_0OLAdHUks.roa
File:                     iGO70lt-nYTVTCRRq_0OLAdHUks.roa (raw, json)
Hash identifier:          /xw2EQVVYz4QidGrnA4+OHq9/rAl0flvbiWoeyIdXnM=
Subject key identifier:   88:63:BB:D2:5B:7E:9D:84:D5:4C:24:51:AB:FD:0E:2C:07:47:52:4B
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       04
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/iGO70lt-nYTVTCRRq_0OLAdHUks.roa
Signing time:             Fri 17 Nov 2023 07:29:13 +0000
ROA not before:           Fri 17 Nov 2023 07:29:13 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     18278
IP address blocks:        118.82.48.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 01:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Nov 17 07:29:13 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=8863BBD25B7E9D84D54C2451ABFD0E2C0747524B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:fd:9b:c6:7c:e4:1b:d0:68:d9:44:53:79:
                    d7:9d:12:8e:4c:72:e5:92:72:48:58:29:53:af:3c:
                    d2:ec:01:ba:6e:20:eb:f1:af:13:73:70:48:b1:f1:
                    1c:68:22:31:27:dc:12:bd:06:a6:68:83:1c:b1:a3:
                    94:4b:7f:f9:84:f9:96:2b:91:78:d3:f6:bd:8f:ca:
                    93:b9:80:05:1f:75:dd:aa:d5:a5:fe:ad:2e:29:33:
                    d7:7d:95:16:33:89:40:c4:37:a7:e2:8f:a5:6c:b0:
                    8a:52:25:34:53:4f:7f:0a:d8:07:65:f4:18:31:4e:
                    49:c1:f2:c7:bf:2a:e2:16:a6:ed:91:9e:06:b0:3a:
                    b1:d5:70:0e:ce:c7:b2:82:43:4d:48:b1:f3:d4:70:
                    b5:b2:c3:cf:b0:a9:df:8a:e4:45:cd:84:7c:a1:ed:
                    74:d6:f6:51:0b:7f:29:fb:32:05:fb:e5:26:47:94:
                    65:d7:b6:d9:db:6a:72:a1:b8:63:14:a6:96:37:d6:
                    1e:d9:c4:3b:c1:37:f0:08:45:65:47:c1:54:17:73:
                    4b:7c:3b:1c:40:f5:68:89:fa:81:73:e0:93:5f:6c:
                    27:ba:13:d0:dc:6f:0b:cf:c5:9e:f4:e6:2c:ee:1f:
                    d5:68:bc:21:fb:11:e0:3d:e8:47:6d:6a:06:50:e6:
                    af:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:63:BB:D2:5B:7E:9D:84:D5:4C:24:51:AB:FD:0E:2C:07:47:52:4B
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/iGO70lt-nYTVTCRRq_0OLAdHUks.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.82.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:16:72:bd:03:62:36:8e:84:c9:ad:99:79:bd:4b:a3:2b:3f:
         e7:23:e4:11:40:41:1a:53:e5:b4:6d:8d:7f:32:1a:d0:f6:93:
         5b:f9:2e:98:51:84:3d:2e:21:28:d8:d9:27:d3:e0:ee:6a:65:
         5d:8a:5b:b9:a4:15:1a:2a:6f:96:41:cf:63:62:a5:d2:bd:f1:
         96:46:ca:01:80:05:76:cc:a5:2c:9a:04:d8:b6:5b:00:aa:a9:
         fe:2c:3f:be:6b:3c:d5:4c:37:f2:18:b4:ab:d3:d4:3a:5d:24:
         0b:7a:b3:ac:f9:73:d8:78:bb:d0:7e:42:db:df:0a:59:fe:0f:
         a8:50:1d:c3:01:be:b1:df:82:10:28:4c:16:b3:f6:6f:fa:4c:
         e3:68:49:64:81:a7:ce:1f:f8:c8:a8:b6:e0:50:30:19:ee:72:
         32:bc:7d:2a:b4:dd:50:8d:51:43:0f:03:e4:30:88:3d:3a:60:
         e0:78:b0:a5:98:46:29:74:56:b2:4b:9c:23:e5:e4:01:50:76:
         43:87:91:4f:18:07:23:17:bb:b7:44:46:f9:db:12:6d:dc:1a:
         a5:d3:f3:10:14:13:4f:a1:40:0e:54:79:31:eb:cb:41:04:f4:
         63:fd:e6:d8:46:81:23:6e:dd:61:55:c2:43:52:6f:c1:06:db:
         1b:5a:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 05:07:20 2024 by rpki-client on console-ams.rpki-client.org