Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/1MvANMt-c18p5-NV0D7qOvcAWz8.roa
File:                     1MvANMt-c18p5-NV0D7qOvcAWz8.roa (raw, json)
Hash identifier:          uYEg+Pkp++DfiN7VEgNi8fAsyZ8r82AYJyqm7czpYLU=
Subject key identifier:   D4:CB:C0:34:CB:7E:73:5F:29:E7:E3:55:D0:3E:EA:3A:F7:00:5B:3F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0155
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1MvANMt-c18p5-NV0D7qOvcAWz8.roa
Signing time:             Fri 07 Jul 2023 04:10:29 +0000
ROA not before:           Fri 07 Jul 2023 04:10:29 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        59.157.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:29 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=D4CBC034CB7E735F29E7E355D03EEA3AF7005B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:d7:43:3c:86:9d:56:0a:90:cb:23:3a:00:
                    fa:1b:0d:ad:5e:24:54:3f:c6:c3:b5:1b:75:b6:32:
                    1d:f4:bb:15:83:bc:c0:29:54:f2:cb:2b:d2:d7:75:
                    98:33:be:ed:10:bd:ae:db:0d:e6:22:cf:93:eb:d9:
                    f7:1a:4b:b7:fc:37:94:8d:fe:60:84:87:6f:88:89:
                    03:33:25:f2:ed:d4:0e:d3:11:af:0a:00:25:51:64:
                    89:61:4b:f8:f7:04:d7:09:2c:6b:0c:27:84:e7:62:
                    56:66:bd:e3:f1:b0:aa:b2:62:3c:ba:f3:54:08:e6:
                    ab:59:ca:84:c6:04:0d:14:a9:10:d6:59:04:2b:be:
                    e0:7a:26:13:d0:25:ed:24:94:90:47:da:09:10:4f:
                    6a:19:04:db:97:89:82:2e:26:a0:93:41:75:0e:ec:
                    66:f6:0f:21:d1:b3:8b:9b:7c:f8:bc:ef:6b:ca:3e:
                    8d:9b:51:a2:dd:af:7d:42:a9:67:2b:2f:6c:03:76:
                    19:ce:0a:41:45:10:52:39:92:8b:f5:55:fa:bd:11:
                    d1:3f:87:fa:66:0b:bb:04:30:f2:23:7e:ff:de:c9:
                    6a:65:5c:78:20:e4:67:89:2f:f9:e3:b3:28:48:13:
                    41:d2:19:81:6e:31:a4:11:92:60:39:7b:0d:a5:2a:
                    20:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CB:C0:34:CB:7E:73:5F:29:E7:E3:55:D0:3E:EA:3A:F7:00:5B:3F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1MvANMt-c18p5-NV0D7qOvcAWz8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.157.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:6b:e7:e5:b3:4d:01:4b:d6:c4:62:6c:7b:82:2f:89:e8:6e:
         ba:5e:4c:e3:42:49:af:dd:d9:42:2c:5f:fc:1d:d3:ab:62:4b:
         cc:43:1a:ad:94:99:c8:a9:24:89:c7:e7:4e:a8:be:aa:da:01:
         a5:ec:af:2c:a6:fd:0d:18:7f:7b:c4:46:b3:48:3e:93:f0:29:
         0f:e3:79:fa:c1:c2:c2:7b:01:c0:2d:29:21:b5:26:84:48:08:
         74:32:71:98:f0:e9:1e:33:93:b9:54:2b:94:39:88:2e:c7:09:
         3c:df:89:0d:d9:7a:40:66:fd:c3:73:b0:55:22:9f:ad:d6:71:
         c2:fa:d4:fd:95:f2:77:11:96:db:85:f4:8e:14:be:2e:30:20:
         71:82:28:4d:c9:87:5a:ca:03:f9:d3:86:55:87:f6:81:42:12:
         e4:08:ef:c8:3c:d8:9b:89:2a:80:21:a2:4f:55:b5:28:4b:b4:
         ba:e7:80:bd:04:fe:3c:d3:71:c7:39:85:8d:bc:9a:39:1c:66:
         68:f8:4f:f0:c7:0c:57:f6:ed:d6:1e:67:79:58:18:09:ac:a8:
         ac:01:be:94:d3:5d:ce:81:95:5b:33:35:28:b7:43:fc:2b:96:
         be:c8:e9:dd:f3:a7:cd:e7:eb:c5:60:b8:04:2b:4e:0b:ca:43:
         71:e1:07:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org