Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/HnvWjmO6JyJdYOp_89ibDXl0DJA.roa
File:                     HnvWjmO6JyJdYOp_89ibDXl0DJA.roa (raw, json)
Hash identifier:          cG2kY6cFLLD3jziccrkZUYOnOw1n4GBD6y6a8+/ZIvI=
Subject key identifier:   1E:7B:D6:8E:63:BA:27:22:5D:60:EA:7F:F3:D8:9B:0D:79:74:0C:90
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0131
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HnvWjmO6JyJdYOp_89ibDXl0DJA.roa
Signing time:             Fri 07 Jul 2023 04:08:14 +0000
ROA not before:           Fri 07 Jul 2023 04:08:14 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        202.75.224.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:14 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=1E7BD68E63BA27225D60EA7FF3D89B0D79740C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:05:3f:80:e9:ac:dc:e8:c4:bc:44:d6:e4:
                    8b:47:0d:c7:00:31:48:a1:e1:2e:00:f3:47:5b:ac:
                    8d:b3:aa:1a:30:59:30:e1:c8:5d:7b:17:ed:21:30:
                    4b:67:42:8f:a0:e1:c3:ad:e4:39:c7:bf:72:bf:15:
                    95:28:58:c0:6e:44:cb:03:77:f3:ae:fd:67:c1:2d:
                    97:b4:71:93:1c:e0:24:21:56:60:5b:12:6d:5e:a2:
                    0a:22:f4:ea:28:68:3b:04:85:af:a8:bd:90:28:f1:
                    77:0e:15:65:04:51:0b:a7:49:e5:20:64:b4:05:0d:
                    7a:3a:9f:ee:ad:15:f5:93:a9:1c:3e:ed:cf:be:c6:
                    ff:cb:b6:12:8d:ec:44:ba:fd:df:69:e3:d5:a9:e7:
                    e2:6e:31:79:22:31:da:e4:61:63:6e:b1:e8:be:18:
                    ef:02:8a:8a:67:2d:66:00:98:b6:09:d3:11:5f:70:
                    89:7f:ec:f8:d0:5b:54:05:72:6a:71:63:e8:c5:98:
                    f2:fd:c5:73:85:cd:32:93:da:14:0b:18:87:a3:0d:
                    ab:cd:5a:f5:1e:fc:a0:65:a4:fa:16:91:ce:fb:37:
                    36:d0:a7:cc:cc:f1:90:81:ce:d2:fa:3d:75:f1:40:
                    22:e6:39:f9:17:6a:5a:c8:89:96:ec:e9:53:d6:bc:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7B:D6:8E:63:BA:27:22:5D:60:EA:7F:F3:D8:9B:0D:79:74:0C:90
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HnvWjmO6JyJdYOp_89ibDXl0DJA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:78:3c:00:69:97:5c:6c:f8:dc:7d:19:49:e7:39:01:03:
         94:8f:e4:83:87:b2:79:42:1d:a1:77:f9:37:02:be:8f:43:b3:
         fa:2e:30:d3:61:13:94:54:89:a8:b2:ac:4a:d5:70:27:9d:a2:
         81:b8:86:8c:56:24:e4:fa:5c:58:72:5a:49:52:27:53:32:b0:
         86:9c:36:71:2a:56:6d:22:d7:05:8b:73:de:01:34:f2:76:a9:
         69:a6:45:ad:9f:b9:d5:ba:37:26:46:1b:61:ee:57:e3:e5:f5:
         47:a3:6b:af:f6:c4:3c:0e:67:70:16:58:29:8e:06:41:de:53:
         05:2c:fd:10:8d:0b:8c:99:7d:3d:e7:6c:5c:67:3a:3b:66:0a:
         dd:11:d8:c9:0b:ee:7f:f1:93:c2:86:09:a1:60:3f:c0:ae:3f:
         37:b0:68:f1:d1:7f:2b:54:76:48:63:26:30:91:9d:8a:4d:b9:
         ad:f5:2f:fa:45:ed:9e:65:7a:a1:18:59:a3:1f:38:56:c2:eb:
         ea:c5:27:87:51:81:40:6f:de:96:d2:67:5b:97:ba:4f:ff:19:
         7a:8f:33:e6:e7:68:33:55:2f:10:1b:9a:7e:70:85:63:36:e4:
         af:b6:9b:b7:db:ac:e4:b9:9d:c1:b3:93:5b:3a:8e:e1:0d:5e:
         87:15:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org