Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/MJEBVX2umzPU2OzODWBPtfwZMZA.roa
File:                     MJEBVX2umzPU2OzODWBPtfwZMZA.roa (raw, json)
Hash identifier:          JlGwtD2lPmJMf9/X/PFpWEW8ZYUwu7Stdd3JKq8WJJE=
Subject key identifier:   30:91:01:55:7D:AE:9B:33:D4:D8:EC:CE:0D:60:4F:B5:FC:19:31:90
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01C6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MJEBVX2umzPU2OzODWBPtfwZMZA.roa
Signing time:             Fri 07 Jul 2023 04:16:37 +0000
ROA not before:           Fri 07 Jul 2023 04:16:37 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        180.131.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:16:37 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=309101557DAE9B33D4D8ECCE0D604FB5FC193190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:f0:61:92:c4:1b:1c:a1:b2:d4:b2:bf:a7:
                    b3:79:4a:4e:b5:a5:8e:7c:37:80:8f:f3:23:c3:0f:
                    8b:2f:23:fa:2d:b0:9d:b3:76:dd:0a:79:e6:79:c8:
                    7c:85:9a:58:a8:31:ea:a9:bf:72:bc:a9:db:19:46:
                    d1:4e:5b:1e:b5:2c:1d:08:56:1a:24:bd:5c:31:f9:
                    e9:ae:15:e1:cf:a0:09:4e:9e:ef:66:4d:35:cd:d6:
                    7c:ce:3a:c1:6f:f0:08:80:b3:ea:cc:a3:17:b2:8b:
                    3d:15:9a:a0:b3:ac:cf:a4:3f:1d:d5:1e:8d:cf:fc:
                    ac:c7:67:bf:ef:de:52:a1:e5:80:7d:15:46:cf:ac:
                    49:56:38:89:e9:1b:1b:c8:19:08:df:84:c0:f1:c6:
                    ea:d1:e8:18:39:59:72:73:e3:99:7b:f6:36:35:0f:
                    b3:79:88:94:64:fa:64:ed:8a:17:24:51:fe:a0:7c:
                    b2:7c:d5:f5:81:66:59:35:81:45:dd:68:66:dd:b6:
                    1b:98:e1:f9:9b:5e:ba:f1:f9:96:06:5d:0b:76:e7:
                    38:39:c3:e5:d4:13:29:6f:b4:52:8a:aa:78:b4:d0:
                    5e:cf:aa:bf:30:0c:01:55:a8:4e:00:53:be:fd:c1:
                    7e:8b:6d:59:51:bd:14:79:5a:85:4e:85:2f:09:c0:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:91:01:55:7D:AE:9B:33:D4:D8:EC:CE:0D:60:4F:B5:FC:19:31:90
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MJEBVX2umzPU2OzODWBPtfwZMZA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:b1:fb:ba:8c:f3:7c:f4:fb:a7:ce:a7:bf:6b:a4:e5:27:81:
         44:2c:67:47:63:c6:0a:11:1f:d7:63:15:3f:db:1a:b7:8d:23:
         3c:0c:16:2f:ed:08:f3:e8:6d:4b:26:b7:4a:a1:e5:95:70:c3:
         60:4f:8c:86:c3:28:31:98:2d:be:9e:b7:cc:c6:5a:f3:09:ee:
         64:34:c9:f0:c6:41:10:c6:9c:53:f2:3f:27:6e:2d:88:9f:95:
         a4:dc:fa:f0:da:2a:e8:05:d0:33:4b:81:51:34:89:93:7c:76:
         37:78:86:86:89:d7:82:59:d4:98:91:1b:d9:7b:67:6a:c2:59:
         9c:2b:e1:59:a7:1b:a0:66:99:65:e6:1f:43:da:5c:22:f9:68:
         eb:5c:9a:18:e1:f7:bd:a1:bd:3e:1f:a4:bd:ec:64:a2:ed:1c:
         8c:23:8d:3e:34:1a:76:35:6b:16:2a:94:19:65:26:16:1f:50:
         4b:eb:a8:9e:50:6a:8d:c7:8d:09:72:17:d0:54:5d:56:98:b1:
         55:39:42:25:bc:40:56:4c:90:fe:4d:7f:b8:ca:7a:19:06:04:
         b1:09:ba:cd:e2:42:52:aa:bc:e6:b7:c6:d1:df:6d:91:67:0a:
         76:3e:92:d2:2a:a0:72:10:66:ea:34:60:dd:26:39:2d:ac:f4:
         e5:bd:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org