Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kwtcHHwWGHaPnn5eQSnOALQSftg.roa
File:                     kwtcHHwWGHaPnn5eQSnOALQSftg.roa (raw, json)
Hash identifier:          XqPkcdvPohIU994Mmt74R8Yw0l26pimZ/IfN/Gyv5So=
Subject key identifier:   93:0B:5C:1C:7C:16:18:76:8F:9E:7E:5E:41:29:CE:00:B4:12:7E:D8
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       013B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kwtcHHwWGHaPnn5eQSnOALQSftg.roa
Signing time:             Fri 07 Jul 2023 04:08:18 +0000
ROA not before:           Fri 07 Jul 2023 04:08:18 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        36.54.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:18 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=930B5C1C7C1618768F9E7E5E4129CE00B4127ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:7b:76:24:f5:79:80:7c:3e:ff:dd:cf:11:
                    4d:27:ed:d7:f7:62:db:3b:8c:f1:1c:9c:7c:4e:3e:
                    d4:b9:5b:19:b5:07:55:6c:c8:1d:aa:d7:31:b4:7c:
                    c3:a9:bf:6c:70:6d:3c:3d:c0:66:28:09:c4:d8:4e:
                    7a:da:80:ba:d9:82:1c:4a:bd:76:f2:29:ac:c0:60:
                    e4:66:76:a7:df:b1:78:8f:87:8a:84:c2:8b:30:5d:
                    d0:55:c0:99:93:9e:10:41:6c:1e:2d:d9:cc:6a:09:
                    ee:ce:13:8e:1b:13:21:cd:cc:af:e8:b8:01:81:d3:
                    2c:55:8c:0e:a2:fe:65:e6:9e:07:06:ef:a0:b8:5b:
                    bc:93:ed:40:c8:14:a9:f4:19:cb:f7:6a:9e:e4:23:
                    99:f2:1e:81:8c:04:25:2a:2b:15:9a:c9:c0:e5:90:
                    6a:65:99:c9:1f:4b:f9:cf:97:00:b4:da:03:a4:40:
                    49:3e:a5:85:f6:86:32:cb:f6:3e:3f:0b:f5:bf:7d:
                    fe:0b:41:ae:f5:35:2b:41:63:65:c2:b9:7f:dc:67:
                    00:72:6c:b4:42:14:f0:6b:ab:98:e4:f4:b0:71:30:
                    72:e9:9d:91:49:1b:12:ec:95:c9:c6:6e:c8:50:b5:
                    8e:e8:e9:32:41:bc:36:71:7b:9e:fe:71:43:c8:61:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0B:5C:1C:7C:16:18:76:8F:9E:7E:5E:41:29:CE:00:B4:12:7E:D8
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kwtcHHwWGHaPnn5eQSnOALQSftg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7e:e7:a0:dd:ff:0b:75:58:3d:c2:4e:c7:77:53:d4:d3:3d:64:
         ac:63:e4:c6:83:c3:2a:2e:dd:cf:b8:9a:ba:7d:1d:cb:78:08:
         1a:d7:b3:f7:4a:3d:c5:03:03:80:14:99:d3:67:46:c2:08:76:
         ca:97:95:95:83:54:bf:d8:fe:e2:b3:98:06:f2:a2:36:25:1b:
         35:35:61:eb:63:b9:79:d1:23:a8:f2:5a:ef:26:af:21:12:03:
         39:64:7d:88:e3:8a:a6:71:8c:f1:0d:f9:6c:51:9e:26:41:e6:
         a2:48:d7:c2:b0:ae:fc:b4:82:8d:e7:6e:76:d9:af:66:39:c3:
         31:77:e0:c0:52:58:7a:e3:e1:29:35:9e:74:fd:6a:7a:05:ac:
         57:73:76:e9:51:1d:d6:76:32:77:62:50:e1:6b:ec:4d:f2:11:
         81:1b:92:f9:8d:69:ec:cd:bc:e9:41:0f:3e:25:2e:16:24:7a:
         4e:67:18:5b:ee:0d:ed:6c:41:93:20:45:f7:cd:14:a4:21:e0:
         98:f8:58:9a:ad:cc:4b:f2:59:f0:e6:80:cf:ac:d6:ee:2a:81:
         fe:b9:3d:9a:28:c6:e1:c9:33:4b:84:79:4e:a4:08:1b:de:b1:
         0e:a2:84:47:e8:d4:cd:e2:bb:3b:8f:05:c8:33:43:36:4d:d2:
         fc:c5:21:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org