Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ip3ten9d6obIciLQVi4OEKDXPa0.roa
File:                     Ip3ten9d6obIciLQVi4OEKDXPa0.roa (raw, json)
Hash identifier:          irhHAJ3Tg/fEhSBOCu4KD6d3YUYB/b0EgjoEyIK1aMQ=
Subject key identifier:   22:9D:ED:7A:7F:5D:EA:86:C8:72:22:D0:56:2E:0E:10:A0:D7:3D:AD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       014A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ip3ten9d6obIciLQVi4OEKDXPa0.roa
Signing time:             Fri 07 Jul 2023 04:08:25 +0000
ROA not before:           Fri 07 Jul 2023 04:08:25 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:25 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=229DED7A7F5DEA86C87222D0562E0E10A0D73DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9d:9a:a3:71:ed:15:74:8a:dc:14:91:74:9f:
                    16:29:2c:a1:53:9f:c6:76:7a:55:dd:78:14:08:05:
                    7c:61:ee:12:d6:ae:af:68:e9:8e:79:b7:3e:63:43:
                    17:0d:9e:18:aa:5c:c9:c6:04:58:7d:7f:66:22:86:
                    39:48:20:b2:cd:b9:d2:b1:c2:3e:77:5c:49:3e:b7:
                    a1:dc:8f:1e:0e:f8:b5:de:42:6e:78:40:9a:44:d9:
                    e0:e7:1c:ef:cd:00:f7:6d:10:86:6c:f8:70:b8:96:
                    2f:cc:b0:46:fd:33:e9:fe:53:00:be:a3:d6:5f:6d:
                    55:85:60:7a:0c:de:ab:7a:2e:91:86:dd:f8:f4:52:
                    22:0d:1d:cc:5c:6e:10:39:69:de:60:d5:d7:d8:d4:
                    e3:56:a9:ef:28:d1:b7:01:65:cb:65:a7:14:0a:04:
                    e3:91:4d:75:36:e8:5c:24:0c:56:b6:0c:af:81:ec:
                    52:bd:f7:6e:50:91:a3:53:fb:31:cf:fa:af:64:1f:
                    b3:36:ea:8f:cb:77:43:96:49:3b:a6:0c:61:e4:e3:
                    7f:39:d9:64:63:70:2b:fd:05:a2:05:0f:0e:ca:e1:
                    86:db:a6:0f:6e:0f:53:a8:b4:23:51:c8:4f:2e:6e:
                    ab:5d:f1:8b:5f:3a:29:a5:67:76:3e:d3:bb:75:63:
                    1f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9D:ED:7A:7F:5D:EA:86:C8:72:22:D0:56:2E:0E:10:A0:D7:3D:AD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ip3ten9d6obIciLQVi4OEKDXPa0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:67:ec:e9:7e:64:54:9d:89:de:e1:d9:e0:93:fa:d8:1b:b7:
         bf:1a:46:e8:d8:c0:0c:ba:49:fa:fa:d7:82:26:e0:37:08:66:
         a5:1b:e7:ba:60:9b:b2:af:43:c6:3d:39:c5:da:7b:1f:20:d3:
         7b:a2:81:f1:df:bb:a5:53:7a:ab:c1:28:8f:4b:b6:71:be:48:
         f4:17:e4:87:5a:4d:b5:62:d1:7a:2c:19:0b:f9:df:ac:9f:58:
         43:66:f6:1d:de:67:f7:55:b5:16:54:5a:29:65:95:6c:83:66:
         9c:e5:8b:43:90:20:fd:7a:96:c8:cf:fb:b3:b7:7a:03:fb:f3:
         9a:2a:08:96:b5:fb:37:10:6c:64:02:74:2a:4e:86:15:e6:22:
         58:b8:11:c3:0a:8e:93:fb:4d:90:61:ff:0b:c1:d8:b4:cf:71:
         8e:48:37:c6:7b:2e:84:3a:ff:c2:60:0d:d3:d0:cb:7a:c9:e3:
         57:47:6a:34:43:3e:51:b2:1a:b5:0d:8a:5f:d7:0a:24:20:7e:
         c8:b4:e1:0e:0f:c1:09:bd:a5:ba:7e:20:9b:c3:5c:17:ef:35:
         60:62:f2:01:ed:f5:cb:cb:90:cb:67:a5:3b:4e:5b:cc:09:e1:
         af:da:73:70:e0:9e:28:72:d1:5f:e7:51:64:1e:90:49:c4:77:
         2e:23:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:08 2024 by rpki-client on console-ams.rpki-client.org