Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/EeoPGrrQLeXdUgUXuTmtnqZtdbc.roa
File:                     EeoPGrrQLeXdUgUXuTmtnqZtdbc.roa (raw, json)
Hash identifier:          OwKvZFDiX7XNkKDsCEsO2VJslMrIADxxwiP26Fw7Z14=
Subject key identifier:   11:EA:0F:1A:BA:D0:2D:E5:DD:52:05:17:B9:39:AD:9E:A6:6D:75:B7
Certificate issuer:       /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial:       39
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/EeoPGrrQLeXdUgUXuTmtnqZtdbc.roa
Signing time:             Sat 01 Jul 2023 01:28:16 +0000
ROA not before:           Sat 01 Jul 2023 01:28:16 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24295
IP address blocks:        122.255.76.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
        Validity
            Not Before: Jul  1 01:28:16 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=11EA0F1ABAD02DE5DD520517B939AD9EA66D75B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:72:04:59:cc:3a:bd:ad:a5:13:56:6c:0a:9a:
                    cc:dc:bc:63:7c:8d:ad:20:e6:89:c0:25:0f:08:60:
                    ff:36:c2:d0:8d:20:16:31:41:b6:d2:76:ce:0a:72:
                    fd:c9:8e:a3:4e:08:b8:21:4d:d4:7c:86:a2:2f:53:
                    d6:21:8e:e6:c1:b1:3f:a2:97:22:79:99:1d:00:c8:
                    00:0e:30:38:65:e9:d7:54:de:7e:fb:64:8d:b6:05:
                    2a:76:49:78:2e:5f:63:00:de:53:6a:d8:46:21:9c:
                    59:02:f9:d0:78:d5:4a:7f:e0:fd:c4:3c:79:73:8c:
                    1b:bf:19:1f:42:04:3e:77:81:5b:a7:93:4d:57:08:
                    e5:04:6b:37:f6:8e:56:f7:1d:86:0e:27:90:9c:a8:
                    c5:10:26:b5:52:85:f6:ba:72:6b:30:9e:b0:11:be:
                    ad:11:12:c9:85:9b:4b:b0:4c:e6:7f:18:b9:ea:55:
                    7a:1f:57:08:32:f1:a6:a0:a7:bf:11:13:b1:5a:5e:
                    6c:6c:ab:5f:c6:b6:1f:2a:83:c8:47:9d:e3:ff:85:
                    e6:8c:82:f1:b4:08:8f:20:11:af:8c:3b:15:6a:da:
                    eb:30:ae:68:7d:03:39:29:0b:7a:ce:56:44:69:6b:
                    7c:4f:98:7b:38:1f:2e:93:83:6c:56:cf:f6:57:89:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EA:0F:1A:BA:D0:2D:E5:DD:52:05:17:B9:39:AD:9E:A6:6D:75:B7
            X509v3 Authority Key Identifier:
                keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/EeoPGrrQLeXdUgUXuTmtnqZtdbc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.255.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:ca:12:d1:c0:4f:db:43:c6:03:b3:85:7c:e7:60:eb:e3:54:
         75:30:97:2a:26:ed:70:02:84:84:0e:cb:f0:68:65:78:7e:9a:
         32:e8:b4:c5:ac:5d:3e:41:98:b9:72:b4:02:a6:9c:40:6f:a6:
         1a:50:3d:f7:d4:71:7b:88:29:fb:f7:83:15:45:6d:ef:bb:aa:
         50:e5:4b:5e:49:d3:a2:4b:b6:fc:19:dd:5e:91:74:46:84:7a:
         39:d0:40:a2:a7:a6:b6:75:e6:81:32:3b:13:35:48:5e:92:72:
         67:81:82:6e:89:7f:9b:bc:de:c5:0b:73:35:3d:d7:ed:5d:a2:
         6c:78:13:5d:7d:08:e8:b4:7e:f8:dc:f8:41:24:ab:8d:5e:59:
         4c:a7:56:81:35:20:75:31:f3:e3:b0:db:5e:6b:f4:67:a0:68:
         7b:37:99:cf:ab:76:91:bc:8f:5c:e2:38:83:86:b7:00:3a:cb:
         d5:19:30:3e:c9:98:2d:b8:11:c1:cf:39:03:77:f1:e0:fd:e7:
         5c:07:9f:ae:32:9f:be:11:e5:7d:25:1d:83:fe:72:e2:ae:03:
         ec:49:b1:15:dd:c1:ed:de:4e:ae:68:aa:d4:6c:1c:73:78:a2:
         8f:e5:a0:c6:2f:3f:4b:dd:ec:e9:72:2f:e5:88:37:4a:40:d2:
         9b:d8:f5:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org