Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Z3JyWshYh7QZ0LZP7f8xG2DG_D4.roa
File:                     Z3JyWshYh7QZ0LZP7f8xG2DG_D4.roa (raw, json)
Hash identifier:          8bKzVWK32PrwF8+ZxKefl2T895QhPRY8tygse6Z+YLo=
Subject key identifier:   67:72:72:5A:C8:58:87:B4:19:D0:B6:4F:ED:FF:31:1B:60:C6:FC:3E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0158
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Z3JyWshYh7QZ0LZP7f8xG2DG_D4.roa
Signing time:             Fri 07 Jul 2023 04:10:30 +0000
ROA not before:           Fri 07 Jul 2023 04:10:30 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.205.60.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:30 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=6772725AC85887B419D0B64FEDFF311B60C6FC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f2:f0:4a:76:09:c7:e4:06:5e:55:c5:0c:39:
                    89:f9:da:fb:4a:01:9c:d2:17:25:c1:f9:01:48:81:
                    6d:b3:ee:ee:9c:e2:76:fa:0c:2c:90:c1:c1:d9:c9:
                    96:ac:e6:2c:dc:fd:e9:d6:24:53:28:ac:ca:15:80:
                    c3:c9:d5:0b:34:c6:af:76:ef:88:f1:c1:4b:92:86:
                    ab:df:71:00:45:32:7e:63:69:99:5c:84:5e:79:04:
                    a9:c6:9b:2b:e4:91:ce:a8:6b:f0:3f:a9:3a:77:09:
                    97:ea:97:86:35:64:39:b3:72:c8:4c:33:a8:d3:f3:
                    a6:6b:59:73:a0:0c:0d:45:87:0a:fa:d9:2d:d0:fc:
                    51:d0:b4:2d:7f:94:0d:dd:43:e6:90:79:ee:f1:14:
                    08:a9:b4:b0:6a:60:14:54:66:aa:e2:b4:c1:85:9f:
                    18:e6:85:ce:ff:94:7d:10:58:af:e2:9a:a0:1e:77:
                    2f:9d:dd:e3:18:04:2c:fd:7c:f3:6d:7a:dc:47:e3:
                    da:f8:2e:20:3a:5b:23:2b:c9:2e:e3:b3:62:59:b2:
                    74:63:11:2b:2b:78:da:91:8d:3b:b9:4b:96:c7:2d:
                    e3:36:1c:1c:95:97:0b:50:fb:2c:6b:04:29:65:f9:
                    34:6d:09:7e:87:32:c5:a0:4b:7f:4f:5f:c9:a4:4b:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:72:72:5A:C8:58:87:B4:19:D0:B6:4F:ED:FF:31:1B:60:C6:FC:3E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Z3JyWshYh7QZ0LZP7f8xG2DG_D4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:a2:4f:0a:50:49:8d:85:83:d8:1d:39:93:ec:3c:34:7b:
         82:0e:f0:c4:e1:4e:17:6a:4a:ad:ba:a2:63:0c:99:e1:ae:6a:
         94:54:16:9b:b2:7a:c2:47:ba:21:92:6d:cb:0f:50:38:38:7c:
         66:8c:5c:a4:c2:74:cd:6c:68:90:93:00:b6:e8:f6:40:c2:b6:
         0b:e6:31:7f:d8:71:37:aa:33:cb:86:d7:ff:06:df:20:5a:02:
         d0:12:91:e5:d7:56:94:f3:a1:8a:7f:44:20:8b:65:bc:c0:24:
         ae:2a:05:b2:e4:d4:92:f2:03:4c:44:cf:53:8e:80:09:b0:e1:
         85:71:c0:f2:cd:58:aa:f1:3d:d0:0d:94:27:3a:14:93:b9:fc:
         35:80:83:28:b3:df:c7:15:5e:e1:95:c0:49:09:f4:58:34:9e:
         a3:52:3d:33:03:93:c2:a4:96:0d:4c:8a:c3:e2:61:1a:03:76:
         f3:57:a8:e6:b0:4c:29:16:44:f4:08:7b:1a:ce:58:a9:36:91:
         f2:11:34:d4:a1:f9:52:3f:1a:dc:6a:81:26:02:14:be:b7:a6:
         ba:3e:b0:2a:96:35:93:ed:ba:98:8a:24:84:e5:87:b0:96:0f:
         f5:53:27:86:eb:97:f4:7b:c9:d5:98:66:df:08:1a:62:20:52:
         4d:04:30:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org