Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZQ_uZolThIAAK69N6MW3nt7vAGM.roa
File:                     ZQ_uZolThIAAK69N6MW3nt7vAGM.roa (raw, json)
Hash identifier:          NmxdzDFYEHkacLyF8d5/hM4ZMjqI3xu3IiLb7Cr4TCI=
Subject key identifier:   65:0F:EE:66:89:53:84:80:00:2B:AF:4D:E8:C5:B7:9E:DE:EF:00:63
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       012C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZQ_uZolThIAAK69N6MW3nt7vAGM.roa
Signing time:             Fri 07 Jul 2023 04:06:04 +0000
ROA not before:           Fri 07 Jul 2023 04:06:04 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        175.104.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:06:04 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=650FEE6689538480002BAF4DE8C5B79EDEEF0063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:c0:0d:6c:f0:87:90:e8:17:73:30:dd:1c:
                    8d:6c:a0:9d:94:00:f7:2b:bb:dd:93:05:20:61:cf:
                    cf:93:6f:43:15:3f:bc:d0:0a:91:96:2e:18:1b:85:
                    54:77:38:0b:9f:0f:7e:e9:55:da:97:e0:31:ca:0d:
                    80:be:1e:47:73:b7:8a:79:ab:1d:4a:72:af:30:14:
                    96:ca:4e:ba:ed:c9:cd:dd:74:06:7c:fc:94:68:1a:
                    87:c7:09:ff:57:4d:0a:92:ef:92:22:6f:45:b2:6d:
                    ee:98:e3:33:e3:3d:ac:22:fa:5e:98:86:ea:6e:8a:
                    9d:86:9a:96:49:9d:a0:eb:ce:e0:c2:f5:17:db:1f:
                    45:10:84:62:98:63:9f:50:46:16:b6:23:db:9f:a5:
                    48:97:a4:8a:1e:a9:18:fd:c4:13:92:ea:82:75:a4:
                    dd:14:fa:bc:3d:1d:b6:6a:e3:cb:80:7c:49:aa:c9:
                    30:ef:1b:78:5c:f9:04:37:d8:2f:12:af:ef:9a:96:
                    0e:4c:f2:5c:a3:8a:5d:eb:0e:4c:55:70:19:f1:b2:
                    50:95:a4:a6:7f:c9:0e:56:f4:14:13:6f:8a:13:91:
                    cd:2a:0d:40:f0:45:d6:eb:88:3e:c6:6e:74:d0:f5:
                    86:b0:ad:a7:57:4e:70:1f:35:3d:16:e2:91:0c:db:
                    57:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0F:EE:66:89:53:84:80:00:2B:AF:4D:E8:C5:B7:9E:DE:EF:00:63
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZQ_uZolThIAAK69N6MW3nt7vAGM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.104.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7d:07:69:92:7a:09:df:fa:95:be:ad:74:55:1f:6b:8b:dc:db:
         40:5d:13:b0:5a:5d:1c:bd:ef:d8:75:59:3a:64:4b:ec:fb:79:
         73:77:af:a3:91:0f:86:50:e5:6a:70:a4:f4:45:e9:d1:38:56:
         15:aa:06:60:cc:12:e9:87:67:c3:6d:f2:73:57:5e:31:4b:13:
         0b:c7:b5:40:33:68:b4:cf:5c:de:49:9d:0f:15:6d:14:58:d7:
         32:57:b4:a9:85:10:28:f4:8a:66:02:66:34:6c:9a:26:50:e7:
         b7:4c:84:73:b2:59:53:a3:79:e0:51:e1:61:ab:75:29:ad:7f:
         6d:b9:e1:80:cb:a8:98:c4:01:63:1b:9b:43:c1:76:35:54:75:
         bc:a5:79:f9:db:69:3c:98:b6:12:a7:87:38:53:b3:06:17:04:
         e7:8a:02:7b:fe:9c:2a:9b:37:ca:65:51:ab:b9:63:71:3c:28:
         0f:35:60:40:3b:ad:5b:39:47:12:17:01:b0:9a:0b:88:34:a8:
         12:13:01:ba:63:3c:5f:58:e5:f8:70:25:6e:17:c3:1c:38:56:
         33:b1:bb:20:93:38:46:c1:b2:1d:10:ff:06:90:7f:f7:22:21:
         03:4d:3f:96:64:dc:9a:4c:05:f0:40:35:57:9d:b4:73:4b:ae:
         fd:02:c7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org