Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/NEys4LDSBIU6VySsm2raMZuljgI.roa
File:                     NEys4LDSBIU6VySsm2raMZuljgI.roa (raw, json)
Hash identifier:          sdJ9Ug3ygj+XfZ62mbIBTqDyx/iIDopJD2t7vOEybjk=
Subject key identifier:   34:4C:AC:E0:B0:D2:04:85:3A:57:24:AC:9B:6A:DA:31:9B:A5:8E:02
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0185
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NEys4LDSBIU6VySsm2raMZuljgI.roa
Signing time:             Fri 07 Jul 2023 04:12:31 +0000
ROA not before:           Fri 07 Jul 2023 04:12:31 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.5.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:31 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=344CACE0B0D204853A5724AC9B6ADA319BA58E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:07:4c:b1:6e:1a:91:2d:1d:08:8b:5b:ac:a8:
                    d8:b0:aa:88:a1:f8:75:9c:95:23:36:f0:fd:c3:f4:
                    01:a8:8d:b6:d2:9f:29:cc:38:59:97:c5:e3:86:00:
                    cc:94:11:e1:b4:3c:d0:5f:33:03:cc:ea:60:f8:6f:
                    29:07:d8:8d:68:b8:96:17:f6:26:b9:29:02:35:13:
                    28:bc:cc:2d:6c:92:d1:61:02:5a:82:94:72:fb:31:
                    b5:ad:87:7d:91:da:90:d0:74:d7:30:19:a6:eb:ec:
                    3d:0c:1e:dd:9d:2b:5d:7f:dd:22:71:0d:63:87:06:
                    f5:82:0a:0b:5c:ec:4d:7a:95:bc:08:a3:48:21:d4:
                    8e:dd:fd:08:3f:13:ed:ff:72:4b:08:f1:17:75:b8:
                    6d:54:79:d9:f8:f1:f4:27:a0:0e:22:5f:0f:27:35:
                    cd:e4:3b:2a:3c:45:45:02:48:8a:83:4a:de:e4:76:
                    64:8b:49:33:80:ce:ef:46:3c:30:a7:25:1e:bc:e2:
                    80:ae:50:b0:07:d0:49:ef:e5:e9:8c:fd:8c:72:2d:
                    a6:55:51:d2:fd:d0:b5:52:38:41:4d:c8:b1:1b:17:
                    2f:78:aa:71:2a:c2:17:5e:23:3c:fa:0a:16:91:ed:
                    9e:b9:07:dc:cb:eb:b2:2b:05:eb:54:ef:df:29:54:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4C:AC:E0:B0:D2:04:85:3A:57:24:AC:9B:6A:DA:31:9B:A5:8E:02
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NEys4LDSBIU6VySsm2raMZuljgI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.5.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:82:0b:11:c1:96:2c:d7:b9:94:c2:10:09:6b:6a:3e:f0:b1:
         a7:f3:ce:3e:75:4e:24:30:f8:15:36:7e:03:10:c7:51:0b:ae:
         ae:43:5a:6b:43:92:d9:10:01:7f:58:63:9c:02:0f:3b:d0:df:
         b2:48:fe:d6:89:6e:cd:c0:0e:0f:bf:db:de:47:c9:e3:6d:98:
         51:52:53:09:fd:05:89:81:e4:ec:ba:ea:23:6a:aa:d5:94:a9:
         d3:0c:67:60:b6:9e:40:74:d0:52:44:ac:0c:23:3a:00:5e:5b:
         17:19:02:96:57:46:68:6b:c2:0c:0a:0e:b6:16:4d:9a:54:cb:
         6e:0d:a7:00:ec:ce:a9:ec:33:5f:61:6f:31:cd:5b:31:1e:51:
         d8:1a:3b:83:a9:c4:83:6e:d3:7f:fa:de:8f:e1:b8:9d:e4:72:
         cf:b6:52:72:d5:24:73:e0:d4:c8:d7:83:97:ad:c9:5a:9f:57:
         db:23:23:87:64:9e:60:07:31:17:36:f5:94:6d:b6:52:9d:1e:
         e9:c7:69:e6:8a:b7:a8:ff:ec:cd:8c:c9:b9:4c:c4:af:fc:9f:
         35:d0:48:8d:f1:eb:6c:de:5a:f9:ea:e9:a2:6e:e8:c9:0a:9c:
         cb:1f:e0:29:d3:f3:39:37:b2:f6:a8:00:ad:0e:83:49:82:63:
         99:69:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org