Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/WkkhnuHfl005qvIse_Gi1lbD0lk.roa
File:                     WkkhnuHfl005qvIse_Gi1lbD0lk.roa (raw, json)
Hash identifier:          M59qa3a82+whqYhP3h866lKXV0t9Dath4ShnWdWiUf0=
Subject key identifier:   5A:49:21:9E:E1:DF:97:4D:39:AA:F2:2C:7B:F1:A2:D6:56:C3:D2:59
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       016D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WkkhnuHfl005qvIse_Gi1lbD0lk.roa
Signing time:             Fri 07 Jul 2023 04:10:38 +0000
ROA not before:           Fri 07 Jul 2023 04:10:38 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        59.156.16.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:38 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5A49219EE1DF974D39AAF22C7BF1A2D656C3D259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1c:05:dd:3b:fd:4c:0b:9d:8f:f5:83:f9:28:
                    b1:db:7b:51:f3:97:98:7d:73:bd:09:f6:70:c8:a9:
                    4d:c8:92:01:f7:6a:31:cd:00:f3:2f:69:a2:5d:33:
                    3f:83:7f:bb:96:89:59:95:62:ae:7b:d1:25:4e:bd:
                    cf:e1:e6:bc:cd:f2:2a:a8:88:69:d3:a5:3a:98:fa:
                    4e:97:fd:28:fc:4f:87:2b:dd:29:db:4f:16:63:18:
                    6e:38:1a:a9:3e:93:0e:a2:26:b2:05:a8:1d:2c:63:
                    d7:61:19:49:f1:b3:14:7b:a4:a5:0f:ce:52:50:76:
                    94:91:16:2a:dc:af:63:a1:cf:17:1a:29:87:28:a3:
                    d9:9f:2a:02:75:ef:a0:4f:30:6b:8a:80:a0:cb:07:
                    e5:53:aa:85:4d:65:de:c2:e9:49:d1:cb:87:36:48:
                    7a:7e:44:f1:c3:20:87:bb:a6:65:98:8c:ff:4f:d7:
                    5c:7a:1e:e2:c8:27:ae:fd:e1:d0:79:12:51:af:ce:
                    87:8e:9b:0b:ba:b4:47:c2:64:73:a1:35:51:4b:27:
                    62:7b:5e:6a:da:8d:c3:e7:76:07:e9:cf:91:92:07:
                    98:73:f2:8d:65:10:86:03:3a:92:72:c8:b6:1a:0d:
                    b8:e8:1b:95:5e:f5:fb:69:ae:9f:94:39:18:e3:3e:
                    ad:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:49:21:9E:E1:DF:97:4D:39:AA:F2:2C:7B:F1:A2:D6:56:C3:D2:59
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WkkhnuHfl005qvIse_Gi1lbD0lk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:b2:a1:98:3d:a9:c1:7e:3d:4f:4e:fb:1e:e4:94:1f:68:32:
         09:fb:b9:1b:a0:fa:00:9c:02:a6:b4:22:83:b3:bf:86:0c:bd:
         42:08:fe:e2:95:c0:a8:30:e4:71:5b:3b:ce:e6:a7:f6:68:51:
         7a:72:a0:c8:77:f4:a5:ed:ad:7d:ee:04:f9:e1:4a:dc:4c:b1:
         1d:ab:74:3a:1d:fb:02:1f:64:b4:7f:60:ca:dd:7e:a5:be:c8:
         af:71:cb:d8:3b:5b:79:19:7d:9e:f9:f3:74:4b:56:7e:08:21:
         63:ab:98:98:66:b9:4c:c1:2b:e5:70:6f:62:a3:e2:5b:cf:db:
         12:1b:06:80:f5:1f:2f:79:5c:2a:57:0d:a2:a2:67:a5:04:7c:
         fe:8d:fd:e6:a0:89:82:43:82:eb:4a:4c:20:58:6c:55:5f:8e:
         79:bb:d9:b4:d1:8a:a1:5f:57:a4:8a:75:17:c4:9c:c1:54:b4:
         42:38:18:0b:65:36:c1:32:c7:37:d0:ac:5f:bc:6a:68:23:35:
         ca:19:c3:de:4d:5b:ca:94:51:da:4f:71:3f:9f:cd:7f:c7:6f:
         f7:10:a5:cb:c0:fd:87:38:84:82:46:6b:c4:bd:0a:c1:8a:4f:
         40:ce:d2:bc:dd:4f:9f:03:bb:45:62:28:82:6c:5f:90:04:51:
         27:8d:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org