Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/0Bw-msBxSni0WivWjRuN6sj-pmM.roa
File:                     0Bw-msBxSni0WivWjRuN6sj-pmM.roa (raw, json)
Hash identifier:          ASYsBcIEXGveMb4DYk1mG1fsqGN+XOIdnrFmacslY+o=
Subject key identifier:   D0:1C:3E:9A:C0:71:4A:78:B4:5A:2B:D6:8D:1B:8D:EA:C8:FE:A6:63
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01BE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0Bw-msBxSni0WivWjRuN6sj-pmM.roa
Signing time:             Fri 07 Jul 2023 04:14:40 +0000
ROA not before:           Fri 07 Jul 2023 04:14:40 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        122.145.136.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:40 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=D01C3E9AC0714A78B45A2BD68D1B8DEAC8FEA663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:db:c9:56:6a:a2:81:71:fd:c2:4c:4b:a2:bb:
                    35:0c:6e:cf:9c:04:d6:a6:d2:80:98:55:5b:ab:f3:
                    a7:03:7f:7a:7a:94:a1:92:2a:a4:04:1e:0a:8d:c2:
                    c7:2c:37:4f:de:81:89:0d:2c:ff:e5:1d:e5:ec:a3:
                    b6:28:c0:2a:a8:1e:08:4f:70:62:b8:53:21:56:11:
                    57:c0:50:14:af:03:7a:a4:f0:6a:a9:08:c2:b2:17:
                    50:4f:ec:2e:45:05:d5:56:ec:cf:42:5e:94:71:b2:
                    33:73:7e:44:7d:52:96:16:1b:43:25:b9:c8:96:14:
                    21:cd:03:67:b1:f7:80:e1:5d:88:2a:37:67:29:62:
                    26:60:d7:31:d1:4c:c1:60:90:de:fc:7a:ec:83:f1:
                    72:c9:ba:e2:33:d3:3a:31:bb:70:56:ab:f8:f3:01:
                    f2:dc:da:aa:66:41:b4:8c:9b:ea:29:ac:05:47:a5:
                    70:6c:25:30:65:0e:83:65:08:51:71:32:6f:44:f6:
                    70:cb:1c:b0:32:21:d3:e8:01:23:6e:a1:56:89:80:
                    9f:fd:52:e3:e1:69:c2:d2:70:19:97:9b:32:72:4a:
                    4c:e3:08:54:39:d2:c7:c2:82:24:48:e3:69:0c:d1:
                    2e:d6:3e:0c:90:04:b4:d8:0f:84:3d:ae:c4:7f:1f:
                    c0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1C:3E:9A:C0:71:4A:78:B4:5A:2B:D6:8D:1B:8D:EA:C8:FE:A6:63
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0Bw-msBxSni0WivWjRuN6sj-pmM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:01:04:47:6c:20:b4:3b:05:ab:fe:a7:2f:d5:97:54:9b:aa:
         24:2e:82:07:f5:4a:39:47:e8:b4:a9:95:2f:f3:72:e0:61:46:
         fc:dc:07:ad:ca:f0:c8:e3:14:b8:de:a7:9e:fb:ce:3c:bb:4f:
         18:e5:95:ea:da:1d:24:87:d6:95:f9:01:5c:b2:52:ee:ea:b5:
         9c:82:b0:a9:73:80:42:41:11:3b:7d:df:38:ce:1d:ba:04:5b:
         96:da:63:a8:10:a6:64:65:d4:16:54:01:f5:6a:37:d8:08:2a:
         25:a8:cb:be:0c:47:ff:55:bc:6b:89:f9:e2:1f:bb:42:19:b5:
         7b:f3:e0:f0:20:46:e2:ae:a2:41:0b:e6:b8:44:33:19:09:8d:
         86:b7:53:f9:4f:86:d7:ca:8d:12:54:41:3a:ab:54:f3:3e:5e:
         53:ea:90:27:99:fb:69:71:d2:db:dd:34:c0:34:72:26:6e:53:
         b3:26:ad:ad:37:52:6a:d2:e4:04:0e:39:b8:ef:c7:4f:e0:dc:
         08:1c:ff:d6:0c:7d:8e:c3:98:42:da:db:ca:3a:6d:a8:7d:77:
         5d:ee:4e:d7:85:e5:5f:ce:54:ec:3c:03:40:55:20:76:01:a6:
         bf:46:a8:c3:0e:d4:d9:4d:f7:4d:12:97:9b:f7:01:56:1c:8e:
         34:b4:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org