Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/P1RL8OU3eMZOm_KDv64Zz4BUtzs.roa
File:                     P1RL8OU3eMZOm_KDv64Zz4BUtzs.roa (raw, json)
Hash identifier:          7PppCsQESiHGp99gsgoz+Zdronp/5hmXkORhj+7JNhQ=
Subject key identifier:   3F:54:4B:F0:E5:37:78:C6:4E:9B:F2:83:BF:AE:19:CF:80:54:B7:3B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       017B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/P1RL8OU3eMZOm_KDv64Zz4BUtzs.roa
Signing time:             Fri 07 Jul 2023 04:10:43 +0000
ROA not before:           Fri 07 Jul 2023 04:10:43 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.203.168.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:43 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=3F544BF0E53778C64E9BF283BFAE19CF8054B73B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:4c:a1:58:b8:2d:9c:e2:70:bb:e1:d4:3a:
                    12:2e:d0:ed:d3:50:fc:24:22:8f:ff:7b:5f:05:de:
                    b1:10:eb:fb:e2:b9:bb:12:5b:52:6d:68:81:89:0f:
                    af:81:67:c3:15:1f:1f:c1:c9:eb:c9:02:19:b3:07:
                    5c:4b:81:31:48:c2:c5:e1:fd:5a:9b:0e:b6:6e:87:
                    7e:37:87:ce:5a:78:66:ec:8c:01:5e:4f:5c:60:b2:
                    31:62:6b:14:c6:76:d3:89:40:c2:a6:97:01:43:b5:
                    98:9c:14:03:eb:fd:66:c4:9b:f3:e5:f3:be:9b:f0:
                    44:02:59:9e:5e:d2:55:a2:2c:bf:8c:e8:f1:3b:34:
                    13:54:74:60:7c:d8:cc:7d:8a:2b:b1:d9:14:95:a5:
                    4e:9d:14:47:7a:d2:31:1a:2a:9e:18:d2:b3:6c:9e:
                    24:d1:96:14:e8:a6:16:04:db:76:be:89:85:96:4b:
                    aa:5b:bf:1b:d1:81:4d:83:67:d3:80:b7:33:65:26:
                    02:cd:ab:16:ec:d6:c2:3b:4d:8d:f2:ae:87:de:74:
                    ac:ef:ef:5b:9b:fb:e3:38:b8:3c:a6:91:90:05:6f:
                    16:d3:6a:ac:4d:88:b5:3a:3e:bc:7d:00:cf:7a:2b:
                    65:a5:4b:e1:51:9d:da:aa:85:39:e0:04:0b:d1:d7:
                    d3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:54:4B:F0:E5:37:78:C6:4E:9B:F2:83:BF:AE:19:CF:80:54:B7:3B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/P1RL8OU3eMZOm_KDv64Zz4BUtzs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:26:ff:6d:ec:77:c3:6e:56:18:58:fb:ab:1d:95:5b:0a:90:
         43:dc:13:ab:96:4f:66:3e:4e:b2:1d:58:b4:2f:44:15:32:43:
         c0:c4:f2:7a:e6:d7:80:9b:74:1b:38:7f:36:35:83:a0:2a:8d:
         82:d6:c6:c2:49:24:91:42:13:ab:3b:54:b1:4d:72:fd:e5:34:
         cd:29:ee:c2:73:0d:d9:6d:f7:93:6e:6e:c5:16:e6:8b:79:b6:
         9e:67:c1:86:1b:3f:18:ca:2a:0c:2b:ab:83:38:a4:67:2d:b7:
         45:76:1d:da:24:4c:b9:d3:38:c1:50:3a:e4:98:fc:90:83:9e:
         7e:51:31:26:1f:e3:f2:2e:23:81:07:1b:82:f9:3a:4a:c9:a7:
         d3:ea:40:d1:32:e7:20:55:a2:d1:55:b6:44:30:e9:21:ea:06:
         66:69:08:9e:03:44:48:02:b7:f7:9e:31:8c:ee:bb:51:34:ce:
         4d:87:dd:82:84:53:7c:ed:5e:3b:39:04:eb:5f:17:e5:16:15:
         79:7b:44:41:ba:0c:72:98:b6:eb:87:80:ab:e9:57:c2:ad:9b:
         5a:13:50:2d:5f:a9:5e:8d:f4:80:e0:a3:67:96:29:0b:b7:23:
         71:4c:f5:87:18:9a:27:a1:b2:98:0e:06:6a:c2:6d:60:fe:14:
         50:29:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org