Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/TyV1h7ewVWuGkz1YIQPLRCsayEU.roa
File:                     TyV1h7ewVWuGkz1YIQPLRCsayEU.roa (raw, json)
Hash identifier:          +SBgIBKGHsdG0XZpYDaFrxehUESqrh4KojOoMajR2tg=
Subject key identifier:   4F:25:75:87:B7:B0:55:6B:86:93:3D:58:21:03:CB:44:2B:1A:C8:45
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0184
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TyV1h7ewVWuGkz1YIQPLRCsayEU.roa
Signing time:             Fri 07 Jul 2023 04:12:31 +0000
ROA not before:           Fri 07 Jul 2023 04:12:31 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.5.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:31 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=4F257587B7B0556B86933D582103CB442B1AC845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:b9:3b:00:15:7c:25:49:db:34:2f:19:87:
                    c5:8d:a5:c0:b7:0b:4a:52:d1:c4:42:3b:63:44:e1:
                    40:55:d2:0b:a6:49:0b:e5:5c:78:d9:eb:9d:13:f2:
                    dc:cd:c7:20:6a:c3:e1:30:e5:80:51:7b:ff:89:68:
                    fb:4c:0a:af:c6:69:11:27:18:34:ea:d5:ea:05:9c:
                    10:12:d7:aa:2f:0a:01:69:03:d6:ff:f9:75:d1:32:
                    52:48:9b:ea:3a:81:4e:37:97:d3:aa:9d:28:ef:de:
                    79:a7:2c:bb:67:5a:8e:3f:39:0b:fd:c6:6c:f4:16:
                    11:05:e3:8b:11:5d:47:57:9f:00:26:07:00:8b:a0:
                    c3:b7:76:1e:fa:ac:0d:c5:bd:31:f7:6e:f7:cc:27:
                    2a:c1:68:41:90:fd:75:96:6c:c8:87:b8:2a:33:aa:
                    81:e9:49:0e:dd:47:d5:ab:b3:2f:bf:e6:cf:96:ae:
                    f6:5b:5b:6a:d0:e2:0b:2e:9b:a3:79:cc:97:c9:72:
                    ed:ad:43:0a:72:cc:d1:a8:32:ac:84:b4:d0:84:2d:
                    e5:e7:7e:12:0b:55:96:0a:be:6e:55:70:75:49:64:
                    84:be:71:b9:30:3e:87:e0:4d:f1:3d:58:5e:67:f6:
                    27:ec:b2:19:37:04:7c:e6:90:0a:51:d3:d5:d2:3d:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:25:75:87:B7:B0:55:6B:86:93:3D:58:21:03:CB:44:2B:1A:C8:45
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TyV1h7ewVWuGkz1YIQPLRCsayEU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.5.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:a4:b1:09:4d:80:bc:0b:d6:61:21:66:f1:23:08:04:fe:22:
         00:77:1b:53:e3:a3:29:29:27:ae:9d:4f:22:82:24:15:e0:e3:
         5e:71:08:ed:ce:35:14:c7:07:c9:f2:22:43:82:c6:63:66:64:
         52:99:37:f2:ef:71:0a:9c:fb:b2:8f:12:fb:4b:57:7e:84:72:
         2d:80:e5:2c:5b:2b:cf:63:b6:9e:2a:95:ca:b3:52:49:b7:a9:
         f0:c9:10:75:23:4a:a3:97:b2:40:65:14:1d:fe:5e:ae:fc:12:
         66:8d:f1:eb:8b:d8:56:2e:fc:5a:4c:1e:04:31:5b:3c:0d:69:
         29:6d:1a:e0:f3:5a:ba:5c:a6:63:8d:41:97:81:73:f6:2d:05:
         b4:07:39:11:f4:f8:f1:74:01:76:93:22:70:9a:f3:65:82:2c:
         89:08:dd:0b:a6:5e:af:41:b3:10:af:63:b7:82:ac:ab:10:9a:
         52:90:96:82:1a:cf:32:b8:3b:2f:87:84:4f:7b:6e:6e:cc:de:
         75:e5:cd:02:f6:2b:a5:cd:30:8f:6f:c7:5d:7f:89:cb:6f:b1:
         a3:d6:b8:1a:d6:a6:c6:6a:22:10:62:6c:ca:02:47:e7:6b:64:
         e1:86:e3:5b:5b:03:1d:9c:9f:37:35:5e:1e:26:1a:45:c8:0b:
         be:89:7f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org