Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/gqPHsTg0zAwG8Q2loht43xUOOaE.roa
File:                     gqPHsTg0zAwG8Q2loht43xUOOaE.roa (raw, json)
Hash identifier:          VsqbVDkJ/OVZHoRpjdxAAtRO50IV6yskaCGPLxQyzbs=
Subject key identifier:   82:A3:C7:B1:38:34:CC:0C:06:F1:0D:A5:A2:1B:78:DF:15:0E:39:A1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0150
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gqPHsTg0zAwG8Q2loht43xUOOaE.roa
Signing time:             Fri 07 Jul 2023 04:08:27 +0000
ROA not before:           Fri 07 Jul 2023 04:08:27 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        210.159.192.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:27 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=82A3C7B13834CC0C06F10DA5A21B78DF150E39A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:54:32:ab:2c:f5:b6:b7:ae:91:91:32:34:
                    21:bb:aa:2e:df:42:31:79:19:f1:89:78:5b:fd:7e:
                    8e:46:68:3d:7c:b4:d2:be:a7:e4:1b:ec:f4:d6:30:
                    9a:e0:63:a4:22:74:a7:24:1c:a9:b4:a7:17:f0:70:
                    a6:3f:51:30:a5:c5:85:da:f2:94:c0:a0:de:9e:38:
                    68:ef:4b:26:34:04:40:b3:34:7d:16:cf:c5:fb:7e:
                    3c:ae:7f:bd:98:da:5a:6b:99:2c:b1:05:32:d4:b9:
                    67:13:d6:76:fe:de:93:13:83:88:f1:fd:a8:6c:6c:
                    83:1a:8c:84:7d:bb:01:86:22:f8:4b:cf:a6:b5:c7:
                    fe:28:04:d6:67:5a:a5:6b:1b:0c:5f:9a:58:52:92:
                    c1:dd:89:22:28:ce:81:72:46:72:0f:ad:db:3e:f6:
                    75:d5:cd:e4:aa:5f:81:96:00:19:61:c1:17:21:bb:
                    d6:f2:0c:0a:78:15:83:fa:9d:ff:f6:df:0c:be:6b:
                    60:d9:1b:e5:88:e0:39:9e:0f:5c:e2:b4:1a:63:21:
                    bc:0f:a5:5e:04:51:39:5d:a3:e3:ec:7c:ca:20:5d:
                    5c:74:e9:e8:53:c5:57:78:4f:89:e4:2f:1b:9a:a9:
                    d8:b6:63:e7:1b:9e:76:d7:11:31:77:09:30:1d:2a:
                    02:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A3:C7:B1:38:34:CC:0C:06:F1:0D:A5:A2:1B:78:DF:15:0E:39:A1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gqPHsTg0zAwG8Q2loht43xUOOaE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         07:2f:e2:8c:87:6b:8a:85:9f:66:91:3b:2f:69:ab:6a:41:a0:
         ed:95:e4:ec:7c:29:65:fa:36:e6:7c:8b:46:6f:07:61:c2:10:
         aa:ec:ae:4c:9f:0b:07:7c:7e:75:7b:99:c7:2f:c2:f2:8e:1b:
         40:4b:d9:03:6c:a1:c3:c6:52:e2:0f:a9:db:29:ba:d5:c9:f8:
         f7:d6:40:0f:a6:63:bf:55:a8:f3:a4:c7:07:48:15:b6:20:7a:
         05:21:81:35:24:6a:3c:36:3d:89:d8:f3:7b:44:3f:40:f8:83:
         d3:56:d2:84:01:69:66:07:88:ea:4c:6f:32:fc:31:6e:b7:d7:
         95:08:f6:a7:3a:1d:6a:af:5a:cf:f6:d1:ee:fd:ee:35:f2:ef:
         a6:2c:16:e6:e0:28:bb:6c:9a:92:89:c5:4f:d9:6d:f5:78:7f:
         2a:38:30:32:28:85:fe:0f:2d:e2:5a:e1:33:bc:43:e4:a2:5b:
         7c:9c:8d:1d:67:24:b6:46:6e:b4:94:2a:5b:ff:32:20:67:e1:
         98:e4:5f:ba:81:c6:c6:a5:e6:b1:71:33:1b:3c:be:f4:d3:6a:
         d7:83:a5:fe:c5:e9:37:0b:48:39:aa:7a:b6:96:1a:99:39:ad:
         5c:9a:f0:9f:ec:98:22:55:05:b4:1f:0b:a7:f1:67:ef:39:08:
         5e:b0:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org