Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/21PEksOIs6uHISTbphx62FjUL20.roa
File:                     21PEksOIs6uHISTbphx62FjUL20.roa (raw, json)
Hash identifier:          3Efjy4BMnruzr/SVSgme0QiTK/XpqHGdWD3AwhNlVMg=
Subject key identifier:   DB:53:C4:92:C3:88:B3:AB:87:21:24:DB:A6:1C:7A:D8:58:D4:2F:6D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0181
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/21PEksOIs6uHISTbphx62FjUL20.roa
Signing time:             Fri 07 Jul 2023 04:12:30 +0000
ROA not before:           Fri 07 Jul 2023 04:12:30 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.44.72.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:30 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=DB53C492C388B3AB872124DBA61C7AD858D42F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:fc:aa:52:81:c7:5b:d3:6c:a7:89:81:f8:
                    03:7d:57:f6:f0:27:59:8b:8a:23:f7:9d:be:e1:31:
                    e3:3b:a7:86:20:6b:49:84:e4:16:2b:d0:d9:95:6e:
                    30:d4:d9:93:28:8d:42:94:6e:04:f8:d4:d0:1d:36:
                    4a:98:5c:36:92:5d:d1:44:d4:0d:99:70:a9:fd:36:
                    79:78:da:15:7a:4a:cd:72:a6:d3:14:72:8c:9d:d0:
                    18:c5:99:77:1c:88:78:70:ec:ac:1f:c9:04:9e:a9:
                    ab:5c:84:65:f7:67:4b:e7:b4:8f:44:a5:42:65:d0:
                    17:eb:0e:3f:2f:57:e6:28:c7:4c:f6:ac:48:8d:af:
                    8b:b8:84:82:5f:16:e0:65:76:8b:06:07:db:03:aa:
                    b9:7c:b2:8c:6d:1f:d8:49:4b:b3:b7:f7:94:6a:89:
                    d8:a4:31:53:08:9c:7e:a4:5e:29:54:be:ab:d7:f0:
                    96:e7:0f:5b:e7:e1:7e:9c:3e:a1:f1:99:31:ce:28:
                    7f:bb:c5:e8:6d:de:ed:04:06:36:9f:c2:07:65:70:
                    5e:26:fb:86:74:b7:32:25:e3:58:64:44:87:23:6e:
                    64:eb:c6:12:03:95:bc:16:05:c0:f4:61:9c:af:c9:
                    43:a5:ed:74:ec:db:dc:4a:67:8d:18:b4:97:18:eb:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:53:C4:92:C3:88:B3:AB:87:21:24:DB:A6:1C:7A:D8:58:D4:2F:6D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/21PEksOIs6uHISTbphx62FjUL20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:20:75:01:19:c6:80:5e:6c:50:22:d9:3b:d9:f6:ef:5d:f6:
         25:f0:4d:9b:40:98:59:9f:ea:32:d1:b5:98:e3:48:ed:a1:ff:
         a8:d8:eb:9e:fc:63:d5:71:49:0b:d2:57:45:2e:52:5b:51:f2:
         e5:5e:5a:11:1c:56:7d:65:3d:b5:d4:ad:cc:bb:68:1c:4b:4a:
         4c:cf:6e:98:b3:d7:ee:d8:cf:82:93:88:14:3f:7c:0d:3f:17:
         0f:f7:1c:d1:48:55:4b:53:33:39:89:c6:30:1f:85:23:15:0f:
         b3:93:d7:76:b6:bd:d1:43:b2:3f:0a:6b:a0:a1:61:04:d0:81:
         9f:41:f4:13:07:99:42:95:e8:6a:b1:4e:e9:ed:5d:ab:56:91:
         ca:2f:93:03:53:b4:1c:f3:48:d3:10:a1:aa:88:79:3b:24:6b:
         62:7f:2c:3b:e8:b4:fe:25:68:a4:87:8d:98:e6:a9:12:76:81:
         49:84:e0:04:9e:76:fb:38:22:3a:af:1c:ae:6c:b3:bd:dd:44:
         38:4b:2e:13:a5:d1:9d:a4:e3:58:82:e5:40:c5:03:67:c9:03:
         85:1e:d1:b0:6e:1f:2e:0d:ea:56:b9:6a:c9:3e:b5:45:64:0d:
         67:8f:75:b2:bf:c9:82:53:7f:13:45:3c:a4:f1:5b:17:8c:a0:
         e5:b6:43:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org