Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2eHwFGeLHygVutURkVaYy5x1-Fw.roa
File:                     2eHwFGeLHygVutURkVaYy5x1-Fw.roa (raw, json)
Hash identifier:          PDe1R2ytmvAnBwXv0JY6oDMhGaacHF2w4YztXzMNagM=
Subject key identifier:   D9:E1:F0:14:67:8B:1F:28:15:BA:D5:11:91:56:98:CB:9C:75:F8:5C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0134
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2eHwFGeLHygVutURkVaYy5x1-Fw.roa
Signing time:             Fri 07 Jul 2023 04:08:15 +0000
ROA not before:           Fri 07 Jul 2023 04:08:15 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        36.52.128.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:15 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=D9E1F014678B1F2815BAD511915698CB9C75F85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:52:76:28:d3:22:57:75:b1:c4:1c:d4:22:d2:
                    c1:f1:ce:86:97:8a:ba:47:e9:9d:60:ad:f0:0f:d9:
                    aa:21:8a:17:4e:22:61:84:59:64:ba:e9:f2:1d:c8:
                    6c:73:0d:6c:a3:36:25:f0:a6:a3:88:9b:dd:36:1c:
                    a9:73:97:1a:86:d3:d8:3b:30:82:70:63:24:c3:db:
                    ec:82:09:73:cb:51:f5:e2:5d:09:23:9c:02:51:ff:
                    85:4e:12:72:9a:53:39:7f:c7:63:22:6f:7e:b7:73:
                    91:05:ac:b4:c9:74:c4:71:53:3f:56:fb:69:c8:ed:
                    36:b0:f0:fc:91:c3:f0:53:41:50:61:7c:30:ee:e6:
                    d5:e3:96:18:59:83:96:9a:1f:85:38:aa:02:d4:be:
                    64:57:b2:42:e9:9b:97:b6:de:64:ab:69:e2:c6:b0:
                    6c:81:7b:b7:9e:f1:7c:05:01:ba:8d:70:a4:fa:e2:
                    8f:c0:bb:d2:88:40:41:11:ac:f3:78:f9:8e:98:ac:
                    c4:b0:02:e9:a8:79:96:9c:df:62:07:06:53:b3:00:
                    51:d0:64:e1:02:50:70:26:ea:39:92:58:f0:30:0a:
                    21:f7:8b:1e:e0:9a:ee:ff:4f:aa:12:31:f5:70:d1:
                    f6:b6:60:7b:92:05:ab:bf:62:e2:40:8d:09:1a:17:
                    07:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E1:F0:14:67:8B:1F:28:15:BA:D5:11:91:56:98:CB:9C:75:F8:5C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2eHwFGeLHygVutURkVaYy5x1-Fw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:af:aa:63:2d:11:4d:d3:e8:00:04:6a:44:f8:c1:08:9e:ed:
         c3:ad:f0:2c:99:cf:dc:3a:a4:25:5f:fe:ad:d5:45:86:ae:d8:
         4b:24:12:e9:48:3f:b8:b1:d8:01:ba:7d:83:a6:22:f4:2a:b8:
         db:ff:4b:7a:ba:50:a9:6e:db:ba:e7:6b:96:a5:f5:6c:f2:3b:
         b7:78:2c:39:69:31:9b:49:ff:e8:3b:95:e3:77:c5:af:5f:a4:
         73:da:e5:f8:15:ef:4c:65:93:12:7d:a3:94:65:4c:87:23:4c:
         c8:13:d3:5a:cc:75:e5:42:59:d1:1f:97:fc:50:bb:4d:89:19:
         77:6d:5f:8e:19:b0:6d:62:be:8c:b5:cf:b9:ab:b2:cf:e9:ad:
         00:4a:a2:f5:7a:49:e6:dd:ff:5f:a1:fe:d5:5d:c3:d8:d4:61:
         d8:0f:d7:b2:21:74:7a:83:ec:73:05:91:06:05:bc:24:fc:17:
         ea:4d:77:93:53:e8:f4:9c:34:ce:58:83:c8:bf:8a:e5:0e:09:
         b8:2d:59:de:e3:0f:45:90:8c:44:90:d2:4c:ce:ef:9a:57:f5:
         c7:09:4b:69:28:1c:e7:e8:4e:a7:24:c5:e3:58:1d:c8:de:da:
         1e:8c:3a:a0:dc:f8:a7:20:9b:ca:ea:1b:30:7c:9b:15:da:1a:
         0e:4a:e0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org