Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/EHi3_IpEJhqh7SXN0O31F3l8hfY.roa
File:                     EHi3_IpEJhqh7SXN0O31F3l8hfY.roa (raw, json)
Hash identifier:          qKXpOHRHpDnt7y84wjhzO8wOdNpLR1UyZ7lLAZtnESI=
Subject key identifier:   10:78:B7:FC:8A:44:26:1A:A1:ED:25:CD:D0:ED:F5:17:79:7C:85:F6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       016F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EHi3_IpEJhqh7SXN0O31F3l8hfY.roa
Signing time:             Fri 07 Jul 2023 04:10:38 +0000
ROA not before:           Fri 07 Jul 2023 04:10:38 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        59.156.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:38 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=1078B7FC8A44261AA1ED25CDD0EDF517797C85F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:fb:cd:a0:45:b2:ca:5c:52:eb:73:aa:1f:
                    33:58:ee:c9:c1:ef:35:db:da:00:bc:37:5e:13:a7:
                    54:72:46:29:7b:11:f0:57:59:bb:c1:22:ae:57:16:
                    65:5b:d9:38:27:1c:4c:21:7d:43:d8:cd:56:2b:ba:
                    45:f5:51:fe:07:f9:d4:34:bd:39:75:78:4e:4f:db:
                    6a:46:cc:2b:e1:79:1d:24:65:47:c0:14:67:74:bb:
                    d9:ce:3e:2c:0f:91:fb:a4:ca:d4:24:70:68:a4:0a:
                    ac:8a:0f:59:ba:e1:70:9d:7b:a5:78:f7:cc:a9:9f:
                    47:cf:03:f8:72:68:70:e3:59:64:21:08:66:7b:27:
                    bd:c4:bf:35:b6:c2:24:1e:cc:43:33:4f:75:8a:92:
                    e2:18:63:68:3b:ba:6a:92:21:1b:1a:80:2c:ab:25:
                    2f:df:cd:04:0a:bb:06:1d:01:1b:f2:34:b4:8b:1b:
                    9c:a5:bf:ba:94:13:a2:15:f0:51:b8:e7:cc:89:4a:
                    19:c9:67:ef:85:8d:93:9b:0e:b4:33:7b:12:69:2c:
                    06:a6:e5:d2:89:cc:6b:f8:55:45:e8:99:ec:c0:e9:
                    bd:82:13:1d:67:84:fe:9b:4c:42:0f:b8:41:c9:f0:
                    3c:c5:cb:d9:61:f4:e9:66:bb:e6:97:0e:1c:91:60:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:78:B7:FC:8A:44:26:1A:A1:ED:25:CD:D0:ED:F5:17:79:7C:85:F6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EHi3_IpEJhqh7SXN0O31F3l8hfY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:56:5f:01:cf:a1:f2:dc:0f:47:7e:b0:c4:e4:88:0d:31:
         36:b4:60:be:6f:9a:2a:df:39:ee:c8:e9:aa:70:33:06:ef:67:
         1b:8a:5d:32:85:27:0b:e2:e0:fb:b4:0a:c2:fb:d6:ce:47:c0:
         f1:b1:05:9c:36:de:b2:5d:65:b8:fb:11:9a:79:f1:05:58:38:
         cc:79:19:62:a9:54:d0:82:03:0f:7f:3b:75:76:5a:ea:f0:5a:
         aa:80:73:80:f4:0c:51:d2:36:42:91:72:27:c0:05:8f:ed:a3:
         70:10:bf:2f:4e:f2:ef:75:8b:a6:13:82:38:00:db:de:f9:0f:
         4a:c1:f9:93:94:db:61:45:d2:f8:21:85:38:3a:49:0a:94:f7:
         56:e9:cf:4a:e6:b5:60:5c:e4:fa:55:f2:51:ab:8b:be:5f:19:
         b2:74:a5:6a:8e:55:48:6e:f0:60:37:cf:1a:30:d0:ae:78:42:
         d2:ec:dc:72:82:38:06:a6:d6:ea:91:83:f6:37:66:ab:ca:3d:
         fc:73:1b:a0:40:09:4c:06:aa:b3:99:b5:8d:11:9a:64:20:2c:
         b4:90:b3:e5:d6:46:f9:1e:50:60:96:7f:6c:dd:a6:f3:c0:e9:
         59:47:b9:0a:2f:0c:68:3b:ae:be:3a:dd:8e:fe:fe:46:ac:96:
         12:e0:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:04 2024 by rpki-client on console-ams.rpki-client.org