Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/JOl7-0_dBCrJiOPDHeYdwFbHlnQ.roa
File:                     JOl7-0_dBCrJiOPDHeYdwFbHlnQ.roa (raw, json)
Hash identifier:          JGYTKWD/coyYpU3BjnbjShNuF4a5Y0rmG+g6NTxycyc=
Subject key identifier:   24:E9:7B:FB:4F:DD:04:2A:C9:88:E3:C3:1D:E6:1D:C0:56:C7:96:74
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01CE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JOl7-0_dBCrJiOPDHeYdwFbHlnQ.roa
Signing time:             Fri 07 Jul 2023 04:16:40 +0000
ROA not before:           Fri 07 Jul 2023 04:16:40 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.64.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:16:40 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=24E97BFB4FDD042AC988E3C31DE61DC056C79674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:9d:6b:63:67:e4:dd:93:87:fc:13:22:6c:
                    a6:d7:28:e9:e9:9d:b7:14:0a:b2:2a:ca:17:a1:ec:
                    4d:b7:c9:2b:6a:20:4b:c3:15:5b:32:60:cf:be:87:
                    b1:30:74:c0:04:38:11:72:80:f9:01:50:c7:0d:f2:
                    59:77:8f:b3:62:ad:0b:58:1f:31:e7:ad:a1:f5:8f:
                    3e:85:2c:24:5d:09:4d:eb:f7:86:8a:bf:39:88:d5:
                    10:58:db:68:79:96:8c:82:4c:d3:71:dc:c9:11:c3:
                    90:86:b0:40:66:71:a6:bd:88:50:34:bd:42:7e:c0:
                    c9:5f:82:eb:01:46:75:1b:c8:04:2d:a8:02:35:4c:
                    85:b7:8c:e4:c5:f5:bc:a7:9b:85:de:ee:1f:67:ae:
                    30:12:ea:7a:be:00:6f:ba:35:8e:d2:de:6d:d6:7b:
                    16:a9:fe:cf:a9:98:6e:f1:b4:fa:3a:de:f3:43:0f:
                    b3:bb:92:e2:4e:49:df:e5:9b:22:e6:7e:cf:03:ec:
                    57:a3:37:3b:c9:01:6d:d9:69:06:83:0d:8a:9a:c0:
                    2a:07:18:ef:20:ed:8a:93:cb:cd:1a:34:74:cf:03:
                    33:60:63:fd:4f:20:16:fb:1e:6d:ca:42:27:07:f1:
                    1f:76:02:b2:9a:1c:d2:4d:66:87:b5:1f:f9:1a:5e:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E9:7B:FB:4F:DD:04:2A:C9:88:E3:C3:1D:E6:1D:C0:56:C7:96:74
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JOl7-0_dBCrJiOPDHeYdwFbHlnQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:97:0a:03:7a:58:70:9b:06:fd:70:e7:cf:2b:62:06:f1:1a:
         a1:3a:62:3b:86:94:38:72:67:42:60:6c:8a:43:2c:2e:fe:3c:
         03:aa:76:a1:57:9e:cb:ad:12:d5:e2:ce:38:67:4d:96:56:dc:
         d1:ad:28:1d:8b:64:b6:15:92:1d:b2:e2:a3:9a:46:4b:f0:04:
         4f:fc:05:ce:c0:f7:b6:57:55:54:d3:88:fe:87:e4:fc:48:b2:
         25:78:3d:d9:13:34:68:7a:02:3b:fb:71:9e:93:37:17:4e:1e:
         c8:8e:3d:c5:6f:ba:8e:5d:36:2d:7e:72:33:cd:5e:30:32:4c:
         e1:4a:62:e5:02:05:37:6d:4c:98:01:00:71:97:f4:97:e9:49:
         f3:51:ce:2e:93:ed:3b:b1:5f:ed:5a:2b:be:c7:be:cb:dc:93:
         53:9f:29:68:72:29:72:ee:a0:87:e8:a2:d7:30:33:4b:7a:3b:
         74:61:46:66:2f:51:54:ef:33:66:3e:ec:1d:63:64:67:7c:81:
         63:8b:ac:28:50:6c:61:da:c8:cf:f0:cc:4d:39:de:c3:d2:a3:
         da:71:24:44:2c:aa:79:11:fd:1a:22:c0:45:cc:db:77:e1:15:
         eb:a8:ea:e2:9e:2d:4b:f5:7f:65:d6:85:ee:3e:d5:48:54:62:
         67:69:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org