Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2TlX-BHO7No2eRA1eZnIgv5RyOo.roa
File:                     2TlX-BHO7No2eRA1eZnIgv5RyOo.roa (raw, json)
Hash identifier:          QcCmB8xGyvzFI1jkvLkmLZrAd8f8dHtcPOXg6sxDlgg=
Subject key identifier:   D9:39:57:F8:11:CE:EC:DA:36:79:10:35:79:99:C8:82:FE:51:C8:EA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01BA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2TlX-BHO7No2eRA1eZnIgv5RyOo.roa
Signing time:             Fri 07 Jul 2023 04:14:39 +0000
ROA not before:           Fri 07 Jul 2023 04:14:39 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        122.145.120.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:39 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=D93957F811CEECDA367910357999C882FE51C8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:c3:44:bf:ba:24:88:17:1e:73:d7:08:eb:
                    9c:cf:cc:fe:c0:9a:91:c0:6d:02:9f:c4:46:ec:25:
                    97:7b:c3:7b:73:ae:9e:95:d9:a7:70:f3:ec:4f:0d:
                    0c:4e:99:a7:bc:e9:b5:06:eb:2a:d6:46:a5:a4:81:
                    6b:2c:a4:99:ad:28:2d:6f:be:0e:8d:c6:65:f7:e8:
                    07:80:fa:7d:d0:41:a3:07:d8:88:25:4f:6c:40:c3:
                    67:95:87:59:4d:08:65:ed:76:10:47:c6:83:6e:7b:
                    5d:08:34:da:6b:76:6e:a7:49:6d:08:2a:de:fc:cc:
                    ee:55:9e:58:c1:77:39:0d:1b:b0:40:e6:f0:71:de:
                    d7:47:e8:4e:8d:84:7d:21:53:31:cc:6d:08:33:fa:
                    ae:67:17:73:01:64:b9:49:73:69:23:a8:99:60:20:
                    6a:fe:fd:ab:bb:22:70:7b:48:0e:60:a6:ab:94:dc:
                    e8:79:e3:3e:96:fb:82:82:2c:03:e2:3d:f8:d2:f4:
                    9f:93:8a:37:95:87:54:68:8a:a1:ad:3e:50:61:22:
                    6b:47:a9:6d:cd:59:02:1b:47:b8:03:92:04:c9:9e:
                    72:ca:a2:49:78:a0:14:bd:5d:4d:4f:4b:2e:40:17:
                    af:a8:df:22:1a:f3:c4:ee:ce:27:29:f7:ad:ca:19:
                    a9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:39:57:F8:11:CE:EC:DA:36:79:10:35:79:99:C8:82:FE:51:C8:EA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2TlX-BHO7No2eRA1eZnIgv5RyOo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:b0:6e:15:ee:1a:59:79:9a:37:18:8d:b2:a1:ab:a1:a2:56:
         6a:44:2d:f5:9b:c6:3b:23:b2:51:35:2a:5b:fd:e8:86:1c:23:
         e6:c1:e5:b7:5d:e2:b6:32:bb:d1:88:67:1b:ff:eb:13:3f:89:
         ce:f1:b0:ef:0c:56:cb:e6:f2:8a:55:da:de:26:80:a1:ca:a7:
         dc:49:61:13:3c:8c:bc:fb:b1:95:cf:32:84:db:9c:7c:92:1e:
         e7:9e:2d:ad:fe:79:bf:41:47:7a:97:05:2f:5c:f1:1c:49:45:
         34:da:65:95:86:e5:9d:ab:23:71:55:fa:d6:40:de:21:de:36:
         00:7a:f8:05:48:21:f2:11:01:f7:a8:47:89:0f:d5:75:b3:5f:
         c9:cd:9d:53:95:86:74:6c:7c:99:e5:b1:ce:d3:83:9f:e2:2b:
         a6:5a:b3:6a:6c:d7:55:06:62:80:ab:64:dc:5d:7a:84:48:35:
         4a:af:39:1a:ef:f4:15:4b:6f:bf:ba:dc:91:5d:dd:a9:d4:83:
         e3:b4:3b:95:fd:fa:df:4d:97:16:f7:59:7f:56:2e:6d:18:11:
         1d:bf:8d:4d:79:88:fc:70:36:41:63:85:00:de:32:66:1a:b3:
         5d:7d:dc:60:1d:4d:dc:f0:fd:8c:62:44:90:3c:12:c2:07:d6:
         65:83:7d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org