Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ODRYEiji3-qIR2yXBCBtegjM0HA.roa
File:                     ODRYEiji3-qIR2yXBCBtegjM0HA.roa (raw, json)
Hash identifier:          QCwEwFCDoY3gqlUFpgCXXR0qgNK84O2imiFWrAt73Cc=
Subject key identifier:   38:34:58:12:28:E2:DF:EA:88:47:6C:97:04:20:6D:7A:08:CC:D0:70
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0177
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ODRYEiji3-qIR2yXBCBtegjM0HA.roa
Signing time:             Fri 07 Jul 2023 04:10:41 +0000
ROA not before:           Fri 07 Jul 2023 04:10:41 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.205.48.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:41 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=3834581228E2DFEA88476C9704206D7A08CCD070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:a3:e7:93:0b:7a:6b:3d:6e:0c:ba:77:39:
                    4d:e5:23:12:81:2d:19:b2:d4:38:62:66:a9:19:18:
                    07:34:82:5f:fb:5e:79:7f:03:a1:82:df:c2:d5:1a:
                    2d:41:9c:19:57:b3:03:5a:c0:4f:2a:a3:6f:fe:88:
                    af:46:cf:ea:66:b7:02:c1:79:b1:c6:77:92:ff:d5:
                    a6:7e:9f:37:96:e3:fa:b0:9a:12:dc:49:3f:60:c7:
                    89:ea:89:8b:11:48:66:35:6c:0f:29:82:ba:0a:19:
                    3e:8c:b3:b3:8d:82:4f:cd:9a:0b:cf:8a:ea:83:bb:
                    ce:75:09:f3:1f:13:09:97:28:d3:a8:89:31:95:6a:
                    9a:5b:78:a6:5a:06:ad:88:4f:6d:4d:fc:97:92:07:
                    57:03:2a:e5:5b:b0:3f:bc:60:90:36:2b:ea:40:2b:
                    7d:fb:a0:45:bb:64:02:d7:4f:97:c7:27:7e:49:75:
                    d7:16:ee:84:0c:69:0d:84:af:77:dd:28:de:dc:88:
                    c8:5d:6a:fb:bb:33:09:76:a3:48:a6:af:e2:ab:6e:
                    c1:4b:71:18:55:e8:13:4b:2f:64:17:5f:bb:91:88:
                    4d:9b:fa:f3:a2:1c:a7:55:0e:46:f7:c9:14:4f:f9:
                    fa:8a:fd:53:88:0a:08:7e:77:b6:9e:69:02:e1:12:
                    54:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:34:58:12:28:E2:DF:EA:88:47:6C:97:04:20:6D:7A:08:CC:D0:70
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ODRYEiji3-qIR2yXBCBtegjM0HA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:b3:11:8b:d0:0f:61:26:41:26:69:11:24:c1:4a:57:58:09:
         60:07:ae:9b:8d:04:5c:d0:e5:c0:d1:3e:e7:b0:d8:49:6d:17:
         70:75:b2:c6:22:8f:c6:59:71:f0:dc:48:43:be:34:22:80:37:
         b6:0e:62:5c:12:8e:03:cb:b4:72:3f:ef:d4:16:e1:bd:89:66:
         08:af:9d:4d:cc:97:89:df:32:56:f7:bc:33:99:7c:e9:8a:74:
         6e:ff:b6:7d:48:d7:91:6c:25:80:99:12:35:a2:88:71:73:04:
         a7:cf:33:3f:9b:31:c0:14:8d:d6:56:74:03:70:a5:32:56:69:
         f4:b8:62:26:db:e7:31:5c:8b:32:66:33:ca:c5:2e:00:b9:5b:
         4b:6f:79:ca:10:ec:81:3a:bd:75:0b:48:0b:78:80:31:da:b6:
         c1:10:cb:6a:24:1b:d3:de:68:42:f7:b6:2b:c6:0d:84:9d:48:
         c9:34:49:3a:2e:04:dd:e4:91:2e:5c:89:3e:bb:0c:c8:b7:99:
         db:9a:e5:2e:b5:0e:eb:7d:d6:f0:bf:cb:a4:bf:09:10:4f:d2:
         28:a5:48:66:9f:8a:1d:8d:11:03:30:b0:45:2e:23:e7:e9:a1:
         63:46:49:a1:0f:99:53:12:ac:3d:59:16:16:48:b7:74:0a:4e:
         c1:f6:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org