Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/MDvg0yIqRUFOH5BW7wHedT1hW5E.roa
File:                     MDvg0yIqRUFOH5BW7wHedT1hW5E.roa (raw, json)
Hash identifier:          oOUgDCaKABIEDY+SxRFznhngSEH+27/Kra2ga87jAP8=
Subject key identifier:   30:3B:E0:D3:22:2A:45:41:4E:1F:90:56:EF:01:DE:75:3D:61:5B:91
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0122
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MDvg0yIqRUFOH5BW7wHedT1hW5E.roa
Signing time:             Fri 07 Jul 2023 04:06:00 +0000
ROA not before:           Fri 07 Jul 2023 04:06:00 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        36.52.176.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:06:00 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=303BE0D3222A45414E1F9056EF01DE753D615B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:46:29:75:e3:f5:30:8e:be:13:bb:6e:0c:ed:
                    35:10:2e:b7:11:69:37:a5:ee:0f:18:ba:04:24:5f:
                    c3:45:9c:59:ac:36:de:e3:bc:b5:8a:84:d3:f8:ac:
                    41:bd:94:5b:49:03:bf:91:f0:e3:8a:9a:96:18:8f:
                    4d:12:33:21:04:c5:de:1f:ff:87:d2:17:01:b2:5b:
                    5a:4f:ec:1a:8d:b5:9e:d4:79:45:da:60:ea:5b:a9:
                    4b:86:cf:64:6b:24:2d:6b:31:88:a1:68:48:64:6d:
                    b5:b1:07:30:ec:d5:20:69:98:57:b9:5c:4c:f7:00:
                    46:ad:ec:71:4f:a3:14:00:8f:96:aa:99:0b:8c:76:
                    45:4e:0d:02:de:c8:e6:f8:fd:61:fb:0b:a4:63:a0:
                    4d:fa:63:49:d8:51:3b:40:5f:d4:c6:41:38:18:b1:
                    83:c7:a4:11:e3:b8:a2:8e:32:e7:51:b7:bc:83:85:
                    ee:dd:36:2e:31:df:54:ad:f5:a5:68:e0:27:ad:52:
                    9f:e8:6b:a9:5b:35:0f:0b:d6:76:02:22:16:72:1b:
                    82:d2:e1:f7:d4:a5:1c:6c:7d:9a:e6:c6:08:dc:da:
                    97:b1:8b:bf:93:bc:30:d9:2d:ef:61:01:cb:c3:d5:
                    d7:0c:93:db:55:8d:8e:fa:62:2a:95:94:7b:60:61:
                    37:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3B:E0:D3:22:2A:45:41:4E:1F:90:56:EF:01:DE:75:3D:61:5B:91
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MDvg0yIqRUFOH5BW7wHedT1hW5E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:0b:16:b2:83:80:2f:59:02:8b:10:88:e0:41:7f:b5:50:8e:
         63:a3:bc:52:e9:51:30:43:3e:17:ee:b9:62:14:1a:92:49:6f:
         56:37:37:eb:f1:c0:4a:08:e1:a2:b8:56:76:cd:98:cd:01:fb:
         14:0d:cc:6e:50:00:3f:76:04:3f:b0:0f:fe:14:96:9b:3d:cf:
         f3:76:1d:e2:25:6b:79:57:fa:93:29:7c:ac:13:4a:5a:16:8a:
         f8:c7:6d:c6:a0:fd:bb:9b:29:fb:e4:e6:3a:38:91:ab:af:b4:
         7a:e4:da:2c:bc:ae:12:8e:28:28:8b:4a:4a:74:41:46:15:60:
         78:c2:37:bf:a6:98:4b:02:b3:a2:42:a6:0e:f0:1a:7e:e5:53:
         8d:9e:e8:31:7b:82:3f:d3:63:17:42:37:e8:8e:a3:76:b4:1b:
         7d:ea:8b:90:92:8b:5c:13:f4:37:d2:04:d7:b5:5e:65:fe:e4:
         f5:f9:05:70:44:51:d5:7a:6c:0b:cd:dc:80:7c:05:e3:9d:fb:
         31:cf:53:04:80:3b:e2:70:a9:aa:07:a3:1b:09:7b:bd:1f:cb:
         db:58:30:96:bc:e4:5a:7f:dc:61:67:ff:cd:b0:8d:98:25:08:
         6e:8c:59:40:0e:3f:06:b4:61:36:05:18:e9:96:eb:84:52:4a:
         7c:d3:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org