Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Y6kwsIyWpiGz1Hok2B9gC9fARdE.roa
File:                     Y6kwsIyWpiGz1Hok2B9gC9fARdE.roa (raw, json)
Hash identifier:          GAH1K0De98b4FbequvHCcJCSiCyOy23FbUMuWql5WZQ=
Subject key identifier:   63:A9:30:B0:8C:96:A6:21:B3:D4:7A:24:D8:1F:60:0B:D7:C0:45:D1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0176
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Y6kwsIyWpiGz1Hok2B9gC9fARdE.roa
Signing time:             Fri 07 Jul 2023 04:10:41 +0000
ROA not before:           Fri 07 Jul 2023 04:10:41 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.205.40.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:41 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=63A930B08C96A621B3D47A24D81F600BD7C045D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:57:52:98:e8:80:b9:53:7c:c0:2e:70:8f:
                    97:9d:51:60:b2:c6:e4:75:5a:41:fa:d0:81:ea:bd:
                    0d:db:43:73:f6:8f:8d:1a:48:1f:cb:1f:b1:d2:37:
                    20:4e:83:5e:c0:88:48:23:6a:99:fd:25:21:62:ac:
                    fb:8f:a3:45:12:8d:76:a8:d3:c2:a7:40:08:6e:66:
                    e4:ff:bd:98:2b:41:9d:47:81:65:74:59:91:a7:56:
                    49:30:8c:50:4b:50:38:1f:a5:a2:cd:27:4b:03:59:
                    28:67:35:40:bf:b0:1e:58:f0:ad:76:a0:63:3d:87:
                    1d:75:6c:50:41:10:45:43:f1:d2:4b:a1:d0:87:69:
                    f4:a9:ad:2f:98:f8:16:d5:aa:de:63:4e:b2:af:03:
                    0c:d9:50:23:01:7f:b3:37:f8:73:e7:70:3c:3b:50:
                    fd:07:86:04:9e:8d:74:d1:4e:7a:8e:5c:c7:04:39:
                    b2:76:5b:a7:b3:13:a1:63:61:07:2f:72:4e:66:c3:
                    29:a4:94:b6:51:cc:14:fa:ab:1a:a6:05:56:9b:36:
                    c7:49:06:5e:8f:3e:d8:a8:f5:4e:92:09:6d:98:83:
                    b7:83:b4:31:ee:90:15:fa:e5:d2:6e:fd:1c:9a:c6:
                    71:29:79:f5:5a:fb:5f:9b:49:4c:ca:fd:f6:31:8c:
                    f0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A9:30:B0:8C:96:A6:21:B3:D4:7A:24:D8:1F:60:0B:D7:C0:45:D1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Y6kwsIyWpiGz1Hok2B9gC9fARdE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:30:7f:46:a9:1b:9a:bb:a3:01:1d:09:33:9b:4c:e2:fb:4a:
         fa:db:9a:31:9f:10:55:84:0b:f8:fb:3c:9c:43:96:9c:1b:a1:
         29:1a:07:39:ad:f3:43:8b:13:8c:6a:63:41:84:43:48:af:d7:
         63:fd:ae:4d:19:d5:e7:e7:8f:36:be:03:e6:14:0f:cf:10:76:
         eb:09:23:66:b8:85:fa:43:b6:f1:87:fe:7b:f9:55:32:6d:af:
         6e:ed:e8:55:3c:bb:ee:62:d2:84:02:c3:e0:cc:94:d4:58:d2:
         59:38:c0:f7:5f:2e:0c:17:43:6d:9c:d3:b0:39:9a:3f:c5:78:
         64:7b:0a:a1:c9:f0:80:29:7b:a5:5b:6a:5e:8a:8f:e2:02:59:
         b1:28:e9:1c:3b:f5:0d:ad:b2:09:48:f2:0c:94:cc:4b:53:10:
         c7:30:e8:31:a5:ce:0c:93:5d:94:a6:ba:b2:33:61:74:22:98:
         77:a5:41:0f:fa:df:4b:01:e5:c5:9b:2d:2e:14:7f:16:87:00:
         df:a5:e9:01:ea:d1:87:fc:a9:78:b7:f5:5d:c5:5f:13:52:d2:
         36:ce:64:40:38:f0:ca:5b:95:8e:a7:8c:b4:c3:4c:06:d5:a5:
         42:af:9c:d6:5e:c4:e0:8b:54:04:38:ca:2f:3b:94:3b:89:35:
         1a:a5:6f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org