Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/7LFsuovX3EtUGXDbLIM6BDowoss.roa
File:                     7LFsuovX3EtUGXDbLIM6BDowoss.roa (raw, json)
Hash identifier:          rODOpKfPF84FBJtF+LmRHWQ0l/9aNvJIfp5ag52CtWk=
Subject key identifier:   EC:B1:6C:BA:8B:D7:DC:4B:54:19:70:DB:2C:83:3A:04:3A:30:A2:CB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0127
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7LFsuovX3EtUGXDbLIM6BDowoss.roa
Signing time:             Fri 07 Jul 2023 04:06:02 +0000
ROA not before:           Fri 07 Jul 2023 04:06:02 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        119.150.104.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:06:02 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=ECB16CBA8BD7DC4B541970DB2C833A043A30A2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:39:89:bb:a4:cf:74:97:db:87:7b:8e:00:0c:
                    e6:4c:c8:e8:db:d8:30:c5:7c:83:c3:a2:6b:25:4d:
                    c6:07:6a:87:93:ee:83:94:f6:b4:61:61:08:fe:c1:
                    6c:69:a9:bf:32:ab:e9:c3:85:d3:06:e0:3f:a4:e7:
                    72:89:82:47:5c:c0:39:48:00:bb:87:94:a7:c6:c8:
                    1e:38:ad:ce:0d:b1:f6:cb:ff:41:1e:bd:72:10:7c:
                    ff:b6:26:c0:72:fb:38:ea:1a:72:8a:7c:a1:5d:34:
                    bb:0d:b0:d5:47:1a:16:1e:51:46:db:49:2b:6d:27:
                    14:11:8d:0b:4a:02:f3:9a:f2:05:dd:23:21:49:cd:
                    15:68:6d:5e:a4:01:d1:85:79:ea:4f:de:9d:48:e1:
                    76:a6:c7:23:01:aa:c6:9d:ef:79:00:0d:b4:a7:7d:
                    51:9f:ad:7b:d2:35:ae:81:c9:60:ff:23:af:8f:9f:
                    d5:81:76:a8:a8:ac:39:0b:e9:2c:e0:da:fe:2b:a1:
                    76:4a:34:84:60:79:57:56:96:3b:c4:b9:00:13:a7:
                    d9:27:3f:ac:1d:ec:78:6c:de:c1:0d:91:f6:7b:2d:
                    f4:3e:06:54:5c:a0:9b:2c:17:e5:9c:bd:b0:ae:d2:
                    8e:d1:be:80:54:38:55:d1:30:e8:f2:22:54:a5:3e:
                    8e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B1:6C:BA:8B:D7:DC:4B:54:19:70:DB:2C:83:3A:04:3A:30:A2:CB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7LFsuovX3EtUGXDbLIM6BDowoss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:b6:94:89:19:5b:48:c6:de:6c:b3:1c:d8:00:b2:47:a1:6f:
         6b:ee:a3:69:e2:f0:7e:a5:0e:8a:71:73:de:a2:d4:86:d1:4e:
         bb:1e:5b:7f:a9:3d:2a:2d:cb:1d:44:10:e7:42:c5:f1:a9:8b:
         24:cf:10:1b:e2:ed:b7:01:da:32:c3:87:0c:c3:79:51:3a:ed:
         5c:0b:4a:f7:d6:a3:79:2c:25:03:ea:8c:23:81:95:dd:d0:ed:
         e2:fb:e7:2d:a4:af:1b:78:81:c8:c9:86:0b:bd:cc:4e:21:63:
         b8:f0:81:32:a2:60:78:e4:ed:e0:1d:86:4d:e9:21:c2:59:b8:
         55:0c:e2:4e:8f:0e:13:f1:f6:49:9a:99:1c:17:a8:b4:86:15:
         5f:bb:d6:1a:cb:f9:e8:a4:e5:b5:0c:da:7c:4f:b7:cc:ee:fc:
         fe:79:38:d4:6a:bf:6e:ae:87:f5:dc:fa:2b:25:7f:f3:e5:e4:
         98:ba:e7:13:5d:f2:ab:18:8d:30:74:ec:47:dd:9b:95:8a:31:
         80:69:c3:be:17:d1:b2:8b:fe:ed:52:18:a0:40:e2:66:f6:4f:
         d4:c5:58:58:50:37:1e:83:14:f0:10:a2:40:fe:4f:60:61:13:
         1e:c7:f8:5f:c7:d4:f8:6c:f8:dc:8e:c8:6b:35:79:e2:4c:fe:
         cb:6e:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org