Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/X3wpN19H0_XK3MqIn-djrxQeHPs.roa
File:                     X3wpN19H0_XK3MqIn-djrxQeHPs.roa (raw, json)
Hash identifier:          8466VFxAy1oxNW3Vi6A5TYPFsxit0WNUEuz8urvPKxk=
Subject key identifier:   5F:7C:29:37:5F:47:D3:F5:CA:DC:CA:88:9F:E7:63:AF:14:1E:1C:FB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0128
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/X3wpN19H0_XK3MqIn-djrxQeHPs.roa
Signing time:             Fri 07 Jul 2023 04:06:02 +0000
ROA not before:           Fri 07 Jul 2023 04:06:02 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        119.150.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:06:02 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5F7C29375F47D3F5CADCCA889FE763AF141E1CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:0c:96:e6:96:26:fb:a8:da:c8:94:e9:74:
                    a0:f7:04:a2:dd:a9:b5:45:bf:4f:a1:3e:99:e5:1c:
                    83:8e:51:49:02:82:f0:d3:05:91:28:d1:7b:1b:09:
                    ff:63:13:1b:5b:4f:d9:a0:0d:d5:3c:05:ca:78:50:
                    62:ba:18:91:81:fc:f5:99:a1:ca:1f:eb:28:70:44:
                    fc:02:f8:c2:46:dd:a8:e6:d7:88:ef:0c:dc:59:69:
                    37:bf:73:e2:51:2d:b9:d0:b3:13:1e:da:aa:5c:f1:
                    9d:0a:9c:de:ca:a7:a0:93:98:58:fc:17:6b:9c:34:
                    ed:1a:01:a5:1f:d8:5c:ab:e8:d8:2f:c4:6e:d3:85:
                    05:d5:97:6b:a2:c7:c5:de:17:b9:0c:53:01:02:f4:
                    46:d0:09:4b:1d:86:46:38:8f:c3:60:d9:e4:e2:68:
                    ac:bd:3e:4b:3a:10:3b:a6:15:dc:78:65:91:0e:cb:
                    a0:eb:bb:c9:03:f5:7a:24:1b:c4:86:43:61:d9:2e:
                    6c:82:ee:33:e8:94:d6:3c:26:29:9b:5a:11:b4:ae:
                    cb:59:67:13:c9:da:1c:17:92:d3:1d:dc:98:93:ba:
                    a2:fa:9d:df:92:a5:7e:ce:fe:6f:8a:ac:39:e0:b0:
                    53:8a:88:5c:60:87:f3:95:4d:87:93:f1:24:ad:70:
                    27:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7C:29:37:5F:47:D3:F5:CA:DC:CA:88:9F:E7:63:AF:14:1E:1C:FB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/X3wpN19H0_XK3MqIn-djrxQeHPs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:10:76:08:c9:37:35:78:92:97:0e:cc:ee:c3:cb:13:f1:8a:
         90:91:18:a6:43:38:bd:b2:05:52:17:e9:47:ad:ff:88:45:77:
         b8:9e:69:e6:76:25:70:10:cd:e7:06:54:4c:5e:23:45:46:b7:
         62:55:a5:7e:cf:ae:ee:50:e2:43:97:f2:54:e8:69:5f:ab:ba:
         0d:07:4d:bb:2a:33:b5:0a:c8:b2:4d:61:c5:d9:0c:fb:14:82:
         12:b8:49:d2:9d:e7:bf:c2:e3:7c:d6:80:8e:7e:29:0a:a4:e5:
         bf:25:c2:ca:af:fa:35:d8:42:18:2d:81:f7:95:ab:b4:79:96:
         1a:cf:f9:c3:f5:0b:53:a9:6c:fb:db:18:08:7f:89:b4:8c:c2:
         60:2e:03:f0:b0:79:d5:a8:ac:30:fb:23:85:e9:58:36:e6:e8:
         26:4b:52:2f:84:56:77:8e:83:fd:76:f2:38:f7:72:5d:b4:be:
         48:6e:06:31:99:12:4a:95:2a:aa:dd:c2:c9:16:83:e6:bb:e3:
         d9:0f:80:e3:b0:db:c7:f2:5c:ca:4f:05:c4:5d:0a:27:f9:04:
         a3:30:6a:97:b2:92:03:88:86:83:d0:98:2a:43:43:77:02:c7:
         57:86:ae:d5:7e:85:1c:d7:e6:04:fe:1b:5c:45:4a:a0:23:d4:
         87:27:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org