Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/E0uY9v_ihu7vWB5rWCriuOmuYdI.roa
File:                     E0uY9v_ihu7vWB5rWCriuOmuYdI.roa (raw, json)
Hash identifier:          BgBf/gDpxQjSHgSqGKdGwS/yDIILJP4Nb2GSKsq1sw4=
Subject key identifier:   13:4B:98:F6:FF:E2:86:EE:EF:58:1E:6B:58:2A:E2:B8:E9:AE:61:D2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0182
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/E0uY9v_ihu7vWB5rWCriuOmuYdI.roa
Signing time:             Fri 07 Jul 2023 04:12:30 +0000
ROA not before:           Fri 07 Jul 2023 04:12:30 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.44.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:30 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=134B98F6FFE286EEEF581E6B582AE2B8E9AE61D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:64:29:f4:fd:40:b1:f2:a5:a8:6b:a7:39:
                    c9:4a:da:ee:f6:14:68:ab:f1:7c:82:fb:39:d4:17:
                    9b:eb:6a:da:f1:6a:47:14:1a:dd:07:b4:ca:57:66:
                    fd:b8:7f:43:e1:90:37:7e:24:e9:fe:7b:e3:8e:b5:
                    91:92:de:47:e2:57:d6:ae:e8:4d:16:a6:c0:5f:b7:
                    31:79:2c:5c:b1:98:59:9f:27:ad:20:c6:1d:45:50:
                    99:6e:4d:02:ca:60:c7:7f:5b:40:f6:b2:d2:77:44:
                    bb:03:6a:00:30:66:61:14:18:7b:a4:37:04:12:93:
                    24:f1:a2:c2:46:8c:e6:78:28:4e:63:18:12:f0:99:
                    a6:6a:31:ef:5a:3d:75:1b:f8:ce:47:a0:4a:63:18:
                    33:8b:9a:e0:df:27:41:2b:0e:c3:83:44:1b:02:df:
                    0d:74:10:1d:9a:c1:8e:b4:51:06:ae:58:09:c7:35:
                    59:93:14:2f:88:5e:7d:11:b2:01:41:65:2d:06:b8:
                    da:16:96:49:89:57:d6:1c:b3:d3:39:dd:95:da:c1:
                    f8:24:28:43:25:e7:a1:c6:e5:6a:4d:41:c5:d5:b5:
                    da:2f:87:3d:7f:de:ef:d1:9e:fc:60:a8:16:bd:6e:
                    82:48:0d:a4:7a:be:d7:ef:45:32:fb:12:e0:9c:57:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4B:98:F6:FF:E2:86:EE:EF:58:1E:6B:58:2A:E2:B8:E9:AE:61:D2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/E0uY9v_ihu7vWB5rWCriuOmuYdI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:2f:b4:be:5b:2e:12:00:84:58:71:8e:50:e0:4a:d0:4e:69:
         a1:38:8d:d6:3e:8d:3a:b3:5d:db:6c:09:1a:16:d7:d5:b1:99:
         d2:8b:b8:fd:4d:ac:f5:06:43:1d:67:08:cc:2b:49:df:c1:81:
         5e:fb:7e:8a:42:6b:97:d4:cd:f8:45:1e:5d:7d:1f:0e:5c:78:
         99:5c:8b:6a:74:e4:d8:a6:d0:9e:f0:d5:bd:e0:1c:d2:48:90:
         cd:8f:92:57:f6:e3:ab:30:b3:e8:bc:f8:78:3c:36:2a:93:1b:
         1c:81:61:d7:8a:f6:f3:bc:23:a2:d3:65:4a:9b:e5:bd:62:15:
         98:fe:e1:6b:88:f5:53:31:92:11:dc:d0:77:e9:3a:4a:96:42:
         18:50:fe:0c:43:23:b4:f3:18:e9:cc:c2:07:6e:e0:d1:8a:e6:
         b2:d5:43:ba:7d:a3:a5:4b:a0:cd:a2:40:cb:e0:be:7a:04:3d:
         ea:82:4e:08:f0:ea:b6:77:3d:32:ad:9b:a0:e9:11:c7:15:93:
         59:a8:64:f3:ef:d5:c5:43:f5:c2:b9:0d:da:1e:5b:02:06:34:
         bd:db:f5:c5:bb:f9:aa:12:d6:43:b5:44:c7:2c:34:6d:c9:52:
         78:6b:3f:bb:a7:03:f5:58:25:c1:ce:02:c1:d5:ab:31:ba:2b:
         90:0f:58:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:04 2024 by rpki-client on console-ams.rpki-client.org