Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/PLP6ygfv4lBryEbIbWpKGcRj6NY.roa
File:                     PLP6ygfv4lBryEbIbWpKGcRj6NY.roa (raw, json)
Hash identifier:          RVODnKMksLFONixEKhizzMItuXLbGC22I5zhGKhM90o=
Subject key identifier:   3C:B3:FA:CA:07:EF:E2:50:6B:C8:46:C8:6D:6A:4A:19:C4:63:E8:D6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01DD
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PLP6ygfv4lBryEbIbWpKGcRj6NY.roa
Signing time:             Tue 01 Aug 2023 01:31:26 +0000
ROA not before:           Tue 01 Aug 2023 01:31:26 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     4686
IP address blocks:        124.255.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Aug  1 01:31:26 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=3CB3FACA07EFE2506BC846C86D6A4A19C463E8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:17:74:75:a2:64:63:c0:f3:00:3f:16:a0:
                    10:98:fa:86:ad:36:54:94:41:a2:27:7d:8e:db:6f:
                    6f:fd:23:b1:75:39:71:1c:d1:94:61:09:2c:5a:13:
                    d4:b1:51:6d:0e:52:5b:1e:f7:26:1a:20:3c:4c:c8:
                    75:4b:da:bf:ac:98:f5:02:e0:0f:5e:35:97:d3:15:
                    e3:9e:09:f1:6d:a9:e7:67:23:b2:05:8d:85:67:f3:
                    fc:90:2c:b0:d6:65:4b:47:85:00:29:ea:5a:33:c3:
                    4b:ad:65:d7:5e:98:79:02:70:32:e5:b2:48:4e:73:
                    d6:01:c7:5b:c2:e5:10:ff:14:21:0d:d3:5f:66:ff:
                    59:9f:6e:f5:f6:ed:6f:36:95:d2:0e:8d:c9:0d:3a:
                    1a:88:ab:5c:66:62:bd:fb:bc:c8:f2:6c:1f:55:f4:
                    07:46:b1:ac:f9:0f:47:12:03:02:59:bd:55:19:28:
                    8d:d7:85:f4:28:a1:45:f9:96:8c:cd:81:fd:30:67:
                    2d:c9:73:0e:48:a7:92:76:5d:94:5e:05:2d:30:8c:
                    13:5d:0b:e1:4d:f0:68:0b:fb:20:37:2f:84:3b:be:
                    5a:a6:fb:ae:ec:01:17:53:5d:2c:1d:a8:0b:d3:a3:
                    1f:7a:e1:7a:52:07:0e:8c:65:d9:81:21:a2:85:8d:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B3:FA:CA:07:EF:E2:50:6B:C8:46:C8:6D:6A:4A:19:C4:63:E8:D6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PLP6ygfv4lBryEbIbWpKGcRj6NY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:1d:c8:2a:f5:8f:16:81:df:ef:b4:3e:7e:85:9d:1c:ed:fd:
         6e:ca:c7:3c:cc:da:4a:ad:06:66:2c:2b:b8:61:75:9e:f4:91:
         f8:0b:60:b2:9b:ea:d4:ba:f2:62:ff:0e:96:8a:52:3d:7b:0c:
         0b:56:3c:dc:16:04:0e:2b:5a:46:77:00:78:c6:55:b0:c9:43:
         91:66:3d:a1:a6:1a:7c:79:61:83:ba:09:ab:6a:db:49:ef:17:
         c4:33:46:9c:67:74:70:ab:52:d2:ac:f7:7b:a3:93:ed:91:41:
         d7:d3:7f:65:e5:7b:71:38:b3:aa:4e:c9:6d:78:fe:2e:63:0a:
         80:fb:bc:30:29:da:88:d4:17:58:77:af:31:5d:bb:ce:3b:1c:
         83:97:9a:6c:58:ef:ea:94:ca:51:cb:cf:a7:37:b6:99:13:0b:
         7c:24:91:ac:fb:a5:e9:6c:1a:b8:7c:33:ef:6f:1d:2d:06:b5:
         25:5a:9f:f7:05:7a:51:80:a3:ae:8e:ae:62:ee:e5:f3:19:fb:
         a3:1d:4f:7f:c4:60:92:1a:3e:ad:a5:77:53:6e:f6:41:ec:42:
         2c:b9:87:fc:a5:5c:c4:1c:4a:9f:28:07:ae:a8:94:23:d4:9e:
         61:8c:1d:75:4d:28:fa:99:9f:5c:03:ea:5a:c2:9a:9d:0c:be:
         2b:78:b8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:42 2024 by rpki-client on console-ams.rpki-client.org