Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/elaIMOYrULgXvNodU3YkIbpU2Zc.roa
File:                     elaIMOYrULgXvNodU3YkIbpU2Zc.roa (raw, json)
Hash identifier:          dCB2GKnQR5WW4+Xf2qIZUPbnjlHXx6SZa3hxPEO0eUA=
Subject key identifier:   7A:56:88:30:E6:2B:50:B8:17:BC:DA:1D:53:76:24:21:BA:54:D9:97
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01F9
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/elaIMOYrULgXvNodU3YkIbpU2Zc.roa
Signing time:             Tue 14 May 2024 02:39:14 +0000
ROA not before:           Tue 14 May 2024 02:39:14 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     4686
IP address blocks:        219.112.0.0/18 maxlen: 18
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 01:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 14 02:39:14 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=7A568830E62B50B817BCDA1D53762421BA54D997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:98:39:02:39:ea:33:00:c6:8f:e0:c7:c8:
                    ee:19:65:26:f1:d5:32:e9:49:20:2a:ae:18:f9:ca:
                    40:90:30:89:7b:61:3d:b3:b1:7b:e8:e2:c0:1b:11:
                    a0:c4:7f:b4:74:43:e1:92:4c:7e:e3:fc:ed:1a:b8:
                    6d:1d:19:8a:54:06:58:0b:ea:3d:1c:35:8f:e6:84:
                    9d:60:cb:af:2f:5e:df:14:68:e1:a7:5d:26:c8:a4:
                    c0:10:b4:46:69:6b:07:19:ae:b7:a3:f5:eb:d6:46:
                    8d:fb:ef:b7:92:a7:fe:3c:b6:1b:68:87:86:21:48:
                    e1:b7:f4:d0:ce:34:48:f0:52:a5:30:00:c5:92:1b:
                    97:61:ce:2a:e7:93:97:9e:09:2d:90:36:78:63:ca:
                    8f:29:cc:ff:e9:73:17:62:69:45:2b:f5:a1:ed:14:
                    43:2e:3a:69:49:eb:58:99:89:cf:43:de:9f:4e:ec:
                    6c:40:75:f0:60:ec:e2:ae:0c:0b:89:7a:32:17:b5:
                    df:8c:2e:ce:dd:34:60:a0:20:f7:da:28:c5:30:b6:
                    11:ab:28:77:be:e6:ac:b5:3b:a4:78:f6:1e:f6:f2:
                    92:a9:33:a9:6b:61:46:bd:e8:76:20:c9:c6:65:f6:
                    b2:52:26:71:b6:7a:6e:7f:43:d5:ef:1a:2b:01:71:
                    1c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:56:88:30:E6:2B:50:B8:17:BC:DA:1D:53:76:24:21:BA:54:D9:97
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/elaIMOYrULgXvNodU3YkIbpU2Zc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5d:9b:d9:aa:bd:a9:81:b0:0b:ad:1c:a4:8e:d9:78:56:01:ba:
         0b:7a:22:58:7d:e7:98:aa:fd:98:20:03:38:c1:f9:88:a6:e1:
         b1:85:f4:10:29:c8:9b:b6:01:c7:36:ec:74:ae:26:9a:24:b2:
         57:88:b8:e5:28:bd:42:34:7b:6e:b1:9f:b8:ff:b1:9b:f5:2e:
         97:97:d8:d3:dd:b3:47:6a:e0:c0:f9:a3:5e:63:d1:38:a4:7d:
         3e:cc:a1:29:30:25:15:12:61:85:28:f2:5a:d6:4a:0c:a9:ce:
         68:67:74:0f:f7:c1:12:26:6e:f1:e8:97:24:27:54:fb:e1:99:
         6b:5d:25:ca:d0:93:64:d5:c9:05:29:df:46:46:d8:a6:a2:d6:
         3d:13:84:15:ac:19:d0:46:09:a2:34:d5:d6:fc:eb:81:aa:fa:
         f2:5e:0c:f4:1c:39:6d:ca:c2:60:44:c6:9f:2e:55:67:24:1a:
         8c:00:13:59:86:fe:45:44:af:63:5a:f0:a3:08:de:18:17:19:
         7b:c8:49:73:42:f7:f3:b2:4f:6f:0f:dd:d4:29:f4:ba:53:a4:
         26:7d:b0:86:95:7f:de:17:d2:64:59:b3:1c:49:ed:67:fb:f1:
         a5:e9:f5:04:47:df:90:c4:3e:0d:02:cf:67:5e:1e:a9:45:45:
         1f:6f:5d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:29 2025 by rpki-client