Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/jDx56gHINwqawnvTNPhw8HPlaSw.roa
File:                     jDx56gHINwqawnvTNPhw8HPlaSw.roa (raw, json)
Hash identifier:          FlkTGPRJbw7onJqNyv8G9QWpiUvYWlf0gy+zUtXZShs=
Subject key identifier:   8C:3C:79:EA:01:C8:37:0A:9A:C2:7B:D3:34:F8:70:F0:73:E5:69:2C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       015C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jDx56gHINwqawnvTNPhw8HPlaSw.roa
Signing time:             Fri 07 Jul 2023 04:10:31 +0000
ROA not before:           Fri 07 Jul 2023 04:10:31 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.87.0.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:31 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=8C3C79EA01C8370A9AC27BD334F870F073E5692C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:0f:63:72:cb:34:4c:f0:f2:50:7b:a6:5a:
                    36:32:f9:84:a0:c4:d8:57:14:31:31:db:a7:78:93:
                    57:3c:95:e0:25:3c:46:2d:32:7e:2c:df:1d:99:c0:
                    26:5b:b4:57:e5:0b:62:fc:2f:64:91:3e:da:f5:8e:
                    e3:17:81:43:09:1b:0d:60:ef:5e:22:cc:aa:7f:d9:
                    0c:98:1a:fd:78:b9:65:0b:ae:d4:c9:85:d2:bc:84:
                    86:06:e8:62:2d:ee:8b:b6:d2:88:03:bb:bf:32:24:
                    17:e4:1b:68:5d:08:f2:88:6d:8d:25:2a:41:88:c0:
                    0c:47:be:42:c5:b7:98:c8:2d:3c:b3:94:42:d5:c0:
                    dc:9a:23:a9:1d:72:39:fe:79:95:54:f0:9c:a1:04:
                    ae:c9:72:db:d8:70:de:15:f9:2e:bf:d5:6e:a7:5b:
                    18:6b:5d:a1:87:ff:b9:a9:04:e4:87:cd:6b:4e:5e:
                    9f:7b:95:b0:8a:ed:2f:ff:f5:46:84:4b:51:86:49:
                    dd:29:c9:69:0b:2d:18:ec:7c:99:94:95:5c:ef:d8:
                    4d:79:94:bc:89:ac:a9:b3:4c:b4:0d:7d:58:5d:69:
                    c8:30:15:57:a4:95:ba:17:50:8d:15:a0:87:e1:e4:
                    36:3a:e5:6c:dc:88:8b:87:17:85:7c:88:f1:05:2d:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3C:79:EA:01:C8:37:0A:9A:C2:7B:D3:34:F8:70:F0:73:E5:69:2C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jDx56gHINwqawnvTNPhw8HPlaSw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.87.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:35:35:b5:00:e7:52:fe:9b:11:cb:6f:cc:79:3d:96:a7:92:
         1d:06:4a:29:55:76:ca:32:57:36:76:fe:d3:5f:50:7b:65:a6:
         7e:4f:0d:b2:e2:a4:e6:98:da:ae:eb:1e:9c:6a:18:e0:7e:1b:
         0e:ab:16:4d:5a:11:e8:4c:bd:0b:17:72:bf:90:be:79:0e:10:
         7d:9b:11:90:3d:63:f1:61:27:80:67:d5:3e:5d:dd:37:ae:27:
         25:77:c5:a5:c9:a9:44:cd:52:1b:ab:a1:82:92:62:1c:0f:24:
         30:ac:5f:92:7b:29:bf:c7:b9:20:aa:89:64:15:93:5c:f1:8f:
         21:83:96:4b:2a:6f:ef:40:00:07:f5:9f:05:d1:af:96:b9:73:
         b0:ad:03:48:3b:b3:71:8a:79:b1:33:59:db:07:74:42:15:c0:
         35:6d:46:d3:f6:7c:a3:cf:fb:4d:52:5d:95:86:69:e2:9f:68:
         82:fd:6c:51:f0:5a:e7:e1:dd:90:1e:3e:46:3d:82:92:57:c7:
         97:27:2a:17:7f:5e:6b:63:a2:ff:66:c0:55:59:f4:05:d7:4a:
         0e:04:f0:48:bd:09:08:10:33:8a:62:32:3d:0c:ad:ff:7c:5f:
         81:15:28:8b:78:6b:f9:3d:01:b1:51:4b:cb:56:d7:60:70:5f:
         e2:02:cf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org