Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/HwEmQOMJiuU5lnReEI6jOTvuJYM.roa
File:                     HwEmQOMJiuU5lnReEI6jOTvuJYM.roa (raw, json)
Hash identifier:          G/i9Dz3UIlwBGV/G8xbN1Fl7Td7MzcJzgJG0AxxTfbs=
Subject key identifier:   1F:01:26:40:E3:09:8A:E5:39:96:74:5E:10:8E:A3:39:3B:EE:25:83
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       018C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HwEmQOMJiuU5lnReEI6jOTvuJYM.roa
Signing time:             Fri 07 Jul 2023 04:12:35 +0000
ROA not before:           Fri 07 Jul 2023 04:12:35 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        110.3.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:35 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=1F012640E3098AE53996745E108EA3393BEE2583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:22:61:25:33:24:f0:b3:dd:c3:8b:62:b5:fd:
                    3c:bb:9d:e3:60:1f:17:a8:cb:98:99:1f:bc:6a:77:
                    97:91:15:9f:cf:c2:99:6e:52:1e:bf:2c:14:e0:98:
                    f4:64:09:39:34:da:f0:ff:6a:3a:6c:bb:f4:f3:d7:
                    02:95:8e:fd:22:79:21:54:e4:a5:36:4f:24:f4:c0:
                    73:d1:79:8c:06:3c:c5:cc:8d:56:03:e8:85:9a:bd:
                    ce:2f:33:96:af:53:3b:fc:88:ae:2f:8d:ed:20:85:
                    4a:71:09:89:0a:0c:64:03:8c:41:46:c5:27:aa:58:
                    00:c7:fe:07:41:3f:2b:bc:f6:d0:31:31:e5:a4:28:
                    ba:d9:20:d2:d8:f8:a9:81:44:a2:23:68:4f:80:09:
                    0f:ca:ba:c0:fd:d2:ca:19:b2:e9:7e:39:df:4e:18:
                    06:f2:47:95:48:3a:60:a8:3f:77:cf:e5:18:ae:d5:
                    8f:9b:0a:3b:14:5c:fd:c4:e9:ad:4c:e0:c1:08:11:
                    0f:ce:cd:c0:3a:41:b7:f6:5b:bd:c6:3e:3a:a4:84:
                    41:80:7c:f9:b6:99:8e:4e:ce:b7:97:df:89:20:5c:
                    04:95:b0:e0:2e:c6:67:54:a7:c6:74:60:d1:cd:31:
                    3e:d1:75:f5:12:07:df:ff:94:72:86:9b:df:f1:97:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:01:26:40:E3:09:8A:E5:39:96:74:5E:10:8E:A3:39:3B:EE:25:83
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HwEmQOMJiuU5lnReEI6jOTvuJYM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         84:84:33:47:1a:7b:a1:75:d6:55:02:6b:e2:a0:d4:a4:85:f2:
         83:dd:d0:89:2d:ec:71:7e:52:0a:69:c4:0a:6c:ff:7c:2f:44:
         7d:e2:ca:2c:39:ed:a4:ff:da:fe:c2:59:a6:c2:5c:01:60:2a:
         35:75:fb:5f:63:2a:dc:ac:0b:33:af:ee:d2:74:92:2c:2e:66:
         2c:f7:41:0a:21:24:7c:7c:88:0e:41:00:9b:8c:8c:1c:89:47:
         66:c5:00:bb:fe:f2:ed:a9:02:b0:88:4e:9d:1a:aa:78:ff:7a:
         13:af:c2:f6:7c:38:e8:ed:dd:70:1a:20:a4:d7:e7:32:7e:e0:
         40:4b:20:27:0f:bf:ea:6f:80:45:07:90:b4:7d:1a:bc:ca:48:
         d4:88:7a:7e:bd:65:16:83:15:77:5a:9c:85:1a:1d:49:c2:fa:
         42:1e:80:75:5d:da:5f:e6:93:d9:9f:7b:15:d0:16:78:ce:3f:
         8c:86:8a:6e:a9:98:19:dc:6f:d8:b3:74:7f:8f:9a:86:e5:90:
         82:6b:4c:ba:14:54:8f:7b:62:2d:e6:09:98:c5:d7:3b:f4:c8:
         0b:5c:eb:30:6b:6d:81:4b:a5:48:46:b9:79:9e:f4:0a:10:ac:
         80:06:c1:1f:bb:14:77:fe:45:49:c6:41:f8:a1:f5:09:70:d8:
         67:6c:26:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:08 2024 by rpki-client on console-ams.rpki-client.org