Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/WyXYZQ77hFuXWVBuxLmQGJ92veM.roa
File:                     WyXYZQ77hFuXWVBuxLmQGJ92veM.roa (raw, json)
Hash identifier:          4BOeqSNPuYSoYWe6xJTm0y6MWUDjr/O5jVeXCjX5EWY=
Subject key identifier:   5B:25:D8:65:0E:FB:84:5B:97:59:50:6E:C4:B9:90:18:9F:76:BD:E3
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       017D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WyXYZQ77hFuXWVBuxLmQGJ92veM.roa
Signing time:             Fri 07 Jul 2023 04:10:44 +0000
ROA not before:           Fri 07 Jul 2023 04:10:44 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.44.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:44 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5B25D8650EFB845B9759506EC4B990189F76BDE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:4d:37:db:36:91:d5:66:5b:e4:b0:c3:ab:
                    51:29:e2:6b:2f:f8:f8:51:ff:28:9e:9f:b3:42:6f:
                    7a:98:02:ab:94:28:eb:fe:01:f2:61:43:27:8a:d0:
                    02:38:9d:1c:d5:19:76:16:b2:9f:49:9f:34:f9:88:
                    6d:32:00:4d:48:be:7e:40:1d:0e:99:23:b2:f2:ae:
                    ef:74:a9:1e:40:d0:b1:62:25:c4:34:75:5f:d1:7c:
                    4c:36:60:4a:ea:41:20:e6:89:2b:45:c2:ba:82:62:
                    63:0a:ad:fa:dd:69:2b:4b:39:f1:dc:41:45:33:f6:
                    37:23:05:1b:c1:d6:0a:11:04:a6:82:f8:a8:74:57:
                    2a:4b:1e:35:af:1b:01:90:7d:88:47:6c:b2:01:c5:
                    a3:6d:2c:79:ac:0d:bd:33:49:bb:29:b8:77:40:69:
                    3d:67:95:d8:3b:b9:fb:81:9e:2a:97:17:93:67:be:
                    1b:82:c7:56:20:dd:e2:aa:9a:d3:bd:9a:e1:62:f0:
                    4f:98:cb:6f:0b:1e:88:0d:9e:ce:c7:03:35:4b:62:
                    17:72:0c:0c:38:37:f0:5f:f3:87:fd:7e:45:bd:29:
                    1a:37:a0:fb:d1:ce:ac:54:68:46:e5:28:57:64:b8:
                    15:28:e8:53:35:04:b2:23:3a:00:f4:1b:4e:b2:aa:
                    10:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:25:D8:65:0E:FB:84:5B:97:59:50:6E:C4:B9:90:18:9F:76:BD:E3
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WyXYZQ77hFuXWVBuxLmQGJ92veM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:0e:58:92:a0:c9:13:84:76:00:84:30:77:6d:a7:48:5b:a9:
         74:78:2b:48:23:36:e6:35:cc:42:26:32:89:28:1c:0c:fd:d6:
         4e:59:a0:2d:72:b7:4c:a8:0b:8d:fa:52:f1:a4:fa:82:a2:20:
         a7:fb:e9:d4:ff:10:d1:df:80:b3:58:40:60:e9:54:65:20:ea:
         57:17:a5:a0:95:20:ad:96:e9:95:00:a4:5d:ab:d0:b5:37:1d:
         3f:9e:3e:df:07:ef:be:c3:36:1d:56:68:a8:9e:2e:7b:36:84:
         58:3f:fa:5b:06:87:bb:41:2e:f1:f0:fd:08:ee:c2:e9:2c:e2:
         40:af:52:ff:a4:52:60:41:c9:e8:c9:87:05:3d:5e:f8:47:5e:
         ea:d2:cb:e4:1d:1f:71:80:b4:ba:7e:e2:3e:d3:7e:50:a3:bd:
         7e:ab:68:9a:fb:9e:8b:0d:14:17:ba:d0:69:68:41:bd:c6:53:
         2f:a2:31:f9:d7:0e:b8:82:39:90:f7:0c:53:68:7d:68:7f:55:
         b5:81:3f:b6:19:11:65:76:85:a5:ae:dc:1c:7b:09:4c:1b:88:
         99:ec:83:9a:cd:68:84:17:e6:05:4b:03:dd:75:78:ba:a7:f4:
         94:cf:07:c0:34:8c:35:d1:9c:fe:9f:22:bf:96:28:a1:3c:be:
         8a:a5:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org