Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/8CAhjBxXe5O2nG4n9CGVwsVsjhg.roa
File:                     8CAhjBxXe5O2nG4n9CGVwsVsjhg.roa (raw, json)
Hash identifier:          42UE8D1ADrhRL+gtKWcyFBb+QHkcUnlZTm1RXtKtIZw=
Subject key identifier:   F0:20:21:8C:1C:57:7B:93:B6:9C:6E:27:F4:21:95:C2:C5:6C:8E:18
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0165
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8CAhjBxXe5O2nG4n9CGVwsVsjhg.roa
Signing time:             Fri 07 Jul 2023 04:10:34 +0000
ROA not before:           Fri 07 Jul 2023 04:10:34 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        36.53.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:34 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=F020218C1C577B93B69C6E27F42195C2C56C8E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:2a:48:a4:24:e6:95:c2:3e:0a:e1:2b:41:
                    7e:45:5c:a1:ae:ce:f8:b1:b1:5e:1f:2b:ed:71:39:
                    90:6a:8f:03:f5:54:20:8d:c3:8d:f6:3b:26:da:e3:
                    74:fd:dc:6e:f9:87:44:a6:78:b8:d2:5c:38:3a:4c:
                    30:1f:1f:48:c6:52:fb:51:7a:b3:ee:48:75:69:3f:
                    5b:95:28:72:52:9f:2f:d9:c6:d1:76:78:fb:d0:d5:
                    67:6e:b0:3b:3c:fd:b8:07:d1:a0:e2:8b:a3:59:eb:
                    ad:90:3d:21:26:2a:0a:b4:9f:b0:80:70:de:1e:ef:
                    c4:ff:9e:ac:f5:e3:c1:e0:48:dd:5d:5c:eb:95:97:
                    10:ba:66:95:b2:88:33:9d:39:1c:57:e5:87:1a:b2:
                    23:2a:70:e0:3f:bc:d0:fe:fe:ae:01:6a:c8:37:83:
                    67:aa:91:6f:e4:b2:51:c2:9d:ce:7a:33:c3:d6:7b:
                    b4:dd:89:34:d2:c0:5a:4e:42:6c:e3:a7:c0:5d:d1:
                    89:8a:33:33:0a:5e:ef:88:87:68:34:28:da:a0:4c:
                    96:75:c7:5a:92:9e:33:8a:63:ca:30:68:fd:7c:e8:
                    fb:cb:b7:c2:37:90:53:0b:eb:32:9f:ea:25:44:c6:
                    76:5c:a5:de:e9:2c:71:21:4f:d6:db:8c:5d:a4:0d:
                    ac:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:20:21:8C:1C:57:7B:93:B6:9C:6E:27:F4:21:95:C2:C5:6C:8E:18
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8CAhjBxXe5O2nG4n9CGVwsVsjhg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.53.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:a1:03:fe:05:a5:4d:db:eb:61:ad:7c:a2:ce:c2:0f:31:75:
         fd:bb:4f:bd:45:a3:49:9a:2d:4e:9d:b3:ba:b2:e8:a5:58:c5:
         34:67:3e:0e:51:e6:3b:bf:11:bd:9e:f3:5d:14:4b:7c:c8:be:
         2f:19:94:1d:65:b6:8e:7d:fe:f5:33:c9:7f:29:3e:b0:3a:21:
         97:ce:78:0f:0c:1a:ec:98:92:da:68:b4:81:53:f9:4f:b5:ed:
         6c:96:56:81:2e:fb:38:d4:d3:68:a2:41:ea:b8:13:48:21:fd:
         e6:30:49:1c:7e:79:03:91:cc:85:3e:2f:ac:84:08:3d:a3:e1:
         fb:4c:c8:e3:6c:e8:73:ea:40:b7:ec:13:31:d0:a0:98:93:20:
         1b:99:dd:bf:d0:4e:56:26:53:5a:57:b1:d8:83:d8:c9:69:c4:
         ee:ed:33:c9:07:bd:33:e8:db:67:f4:e1:d1:48:c8:8a:37:40:
         0e:b1:d8:7e:26:0d:c6:de:bd:db:b5:e2:72:c6:37:35:f4:30:
         07:41:0b:cd:ca:32:28:29:60:26:1d:d9:60:cb:fb:b0:9e:56:
         35:6d:96:09:fb:61:4d:14:17:0d:02:ef:dc:b8:de:c4:0e:64:
         e1:63:e3:15:49:cc:52:fe:4b:3f:0d:42:94:b2:12:3d:d5:ca:
         15:42:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org