Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/c9k1-zVZ_qHXpCOJaH6zqgjmty8.roa
File:                     c9k1-zVZ_qHXpCOJaH6zqgjmty8.roa (raw, json)
Hash identifier:          G/dNnIpicz2R/UmmHSAe1ZWeLvKi2BF3AvOeV1rMHJY=
Subject key identifier:   73:D9:35:FB:35:59:FE:A1:D7:A4:23:89:68:7E:B3:AA:08:E6:B7:2F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0166
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/c9k1-zVZ_qHXpCOJaH6zqgjmty8.roa
Signing time:             Fri 07 Jul 2023 04:10:35 +0000
ROA not before:           Fri 07 Jul 2023 04:10:35 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        36.53.224.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:35 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=73D935FB3559FEA1D7A42389687EB3AA08E6B72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:5b:b5:40:b7:ce:7b:dd:83:36:40:42:c8:
                    f8:11:c3:87:64:69:99:1a:47:06:37:40:25:50:84:
                    1e:67:f7:77:8c:04:c6:55:34:e4:57:8d:ed:50:45:
                    7b:1b:e1:1d:c3:da:7d:84:92:29:f5:58:96:0c:73:
                    b2:a5:0c:48:93:50:d2:d0:86:de:6b:9c:0d:ca:31:
                    92:4a:37:29:43:fa:88:a8:cb:86:79:71:5e:a4:2b:
                    98:49:e2:25:b3:e8:de:69:6e:5a:90:e7:61:e7:ff:
                    fb:d6:f3:55:d0:4d:ca:b1:97:ab:18:c9:9f:61:95:
                    70:00:88:2a:b7:3c:94:1f:78:5a:ed:05:1b:01:91:
                    59:9d:ca:14:4d:96:a6:32:bc:0d:54:74:44:62:72:
                    bd:e8:5f:99:3e:e7:58:e8:85:32:ea:fa:41:aa:83:
                    d2:48:2c:27:aa:e3:48:64:32:76:17:09:97:b5:3f:
                    47:ca:6c:c4:cd:cc:3b:9a:84:b5:e4:1d:81:28:a6:
                    6f:11:89:10:9d:c2:15:e2:e8:34:0a:23:fb:92:09:
                    37:cc:9d:b6:45:f8:eb:5c:10:07:a7:f7:2a:b6:cf:
                    84:0c:09:13:01:8f:c7:99:fb:6d:6e:12:ab:d0:a4:
                    29:a1:84:8d:88:4e:72:7f:02:55:f3:93:57:11:9a:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D9:35:FB:35:59:FE:A1:D7:A4:23:89:68:7E:B3:AA:08:E6:B7:2F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/c9k1-zVZ_qHXpCOJaH6zqgjmty8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.53.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:81:a1:9e:1e:4a:1b:21:58:d1:98:81:91:1f:fe:43:31:
         a9:f1:53:0e:be:70:6f:2e:8c:28:24:ee:62:a2:53:a2:eb:a0:
         dc:43:19:68:dc:b9:64:09:f2:02:66:19:84:49:65:f2:0a:8a:
         68:a3:5f:14:22:71:6a:67:cc:62:83:eb:1b:bb:08:8e:ae:b5:
         f3:00:4b:1c:b8:ef:83:fa:b1:7c:35:d7:2e:db:c1:dd:4f:80:
         75:56:dc:ce:2a:18:59:16:24:79:4b:34:8a:b6:ec:b4:e9:e8:
         af:03:78:f5:41:fc:ba:4c:56:ab:5c:da:aa:1c:cd:de:c1:d2:
         76:ca:44:67:e3:a7:c8:7a:ed:85:7a:ea:6a:82:90:41:bd:47:
         c0:c1:9c:2e:e9:86:0b:ca:10:8f:c0:a9:13:c9:94:31:36:80:
         1d:ba:43:eb:45:2a:2e:5d:c2:79:85:17:49:c2:08:b0:64:1c:
         ba:0b:c2:a7:61:0f:f8:6a:04:58:b7:cf:3f:61:53:61:62:a2:
         20:c7:f9:24:62:3e:2a:dc:21:1c:45:8a:b4:7a:39:c4:87:4a:
         11:63:d5:86:b3:10:4e:4e:4a:92:2b:6f:31:33:1c:07:ea:26:
         3a:fb:06:c8:8b:42:2e:d0:2b:85:6e:3d:3d:b9:c2:a4:db:12:
         dc:83:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org