Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9SaWa9zx27Q76NG6Qcuf25EYPEs.roa
File:                     9SaWa9zx27Q76NG6Qcuf25EYPEs.roa (raw, json)
Hash identifier:          eFOHm5mVSeRAOw3EMYocRIqmxUhWbvmuG80DeC5h2JI=
Subject key identifier:   F5:26:96:6B:DC:F1:DB:B4:3B:E8:D1:BA:41:CB:9F:DB:91:18:3C:4B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0130
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9SaWa9zx27Q76NG6Qcuf25EYPEs.roa
Signing time:             Fri 07 Jul 2023 04:08:14 +0000
ROA not before:           Fri 07 Jul 2023 04:08:14 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.72.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:14 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=F526966BDCF1DBB43BE8D1BA41CB9FDB91183C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:41:4f:0a:73:b1:54:69:0b:b5:da:c9:05:6c:
                    a4:0c:c0:c3:05:0c:ed:0f:d0:97:08:af:ff:bd:59:
                    7e:93:fe:04:fe:f5:6f:fe:c3:40:bc:f3:8b:74:88:
                    ad:29:b5:e5:d8:1c:7c:4d:ee:a4:86:e6:33:68:dc:
                    3d:80:7c:2b:f0:b2:4d:b1:d4:02:15:21:05:31:0d:
                    91:a0:d4:28:d8:9e:15:ff:8f:69:5b:97:0e:ff:c1:
                    99:b3:b7:ec:c8:8e:f5:9b:4a:e1:88:12:3a:4d:c9:
                    86:80:c7:c2:f4:10:91:63:55:40:49:96:c5:a6:0e:
                    8d:67:d0:7d:71:8f:a5:20:03:4c:40:89:88:b7:b6:
                    51:4c:c5:c5:8d:7e:50:55:db:c3:10:dc:90:55:3d:
                    6c:82:71:5f:d8:b5:8b:76:3e:29:59:b7:7b:da:e1:
                    f5:df:69:99:b1:43:b8:aa:20:45:c9:85:96:a8:fa:
                    75:a0:8f:24:d0:41:9f:95:98:63:67:e4:c5:d8:57:
                    e1:14:37:af:71:f8:b0:c1:79:f2:3f:a4:c9:5e:a9:
                    9c:05:b7:6e:52:50:9c:70:40:6f:7a:37:61:4d:b2:
                    f1:9f:da:e8:cc:12:7f:97:92:48:7a:15:42:34:8e:
                    6b:79:df:5c:83:a0:17:8e:88:ee:fc:a5:c7:cd:5c:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:26:96:6B:DC:F1:DB:B4:3B:E8:D1:BA:41:CB:9F:DB:91:18:3C:4B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9SaWa9zx27Q76NG6Qcuf25EYPEs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:a8:f5:1c:a6:3c:85:3b:ac:a2:e4:65:c0:e6:dc:a4:e3:be:
         bc:86:f4:ef:a0:80:2d:14:dc:87:ba:b8:5f:59:da:cd:01:31:
         bd:e9:b8:64:61:49:47:4c:77:12:fc:b6:88:03:cd:51:9f:b9:
         25:bd:31:a5:4f:41:24:7f:24:b8:fd:08:ad:f3:20:bf:48:52:
         16:ef:f1:3f:57:9c:9d:08:d4:2e:70:7e:43:62:df:2b:01:21:
         3c:52:5b:04:ca:93:fc:a9:6a:b4:88:07:53:37:5c:d5:db:c7:
         69:f1:3f:37:0c:92:2c:7d:39:45:75:13:10:8f:2e:7f:f3:87:
         0f:bc:73:9d:09:d6:c0:84:1a:55:e9:2d:28:86:d8:38:c9:16:
         62:b7:9d:e8:fa:28:ea:94:85:42:cf:1b:08:a7:85:a9:70:c9:
         fa:31:2c:30:34:83:28:ba:47:8a:74:18:e1:2a:ad:b5:b2:c0:
         dc:38:63:b1:25:9d:26:e9:d1:0d:16:d1:94:d2:32:22:51:e2:
         e2:02:98:43:df:e3:2c:74:37:85:e9:02:b0:9b:b5:8a:4a:42:
         66:1d:32:18:67:8b:53:e6:ab:3a:f0:50:df:0c:7a:58:ad:50:
         c3:d0:9f:13:74:20:3d:a0:49:a0:86:94:17:c7:2b:e9:2f:83:
         13:6d:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org