Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/mc6pCL_IQMI4S2-fzxcLRQH52RU.roa
File:                     mc6pCL_IQMI4S2-fzxcLRQH52RU.roa (raw, json)
Hash identifier:          O7HVJV9BoQ8ytZbJuudTqdp46Wu19kDNnxgoBkTlvP4=
Subject key identifier:   99:CE:A9:08:BF:C8:40:C2:38:4B:6F:9F:CF:17:0B:45:01:F9:D9:15
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01DF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mc6pCL_IQMI4S2-fzxcLRQH52RU.roa
Signing time:             Tue 01 Aug 2023 01:31:27 +0000
ROA not before:           Tue 01 Aug 2023 01:31:27 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     10013
IP address blocks:        36.55.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Aug  1 01:31:27 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=99CEA908BFC840C2384B6F9FCF170B4501F9D915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5a:a4:90:16:3a:96:6a:13:81:34:cd:4c:06:
                    32:c8:e1:e5:e4:ed:48:63:77:7d:d8:00:1f:be:b1:
                    7e:c7:1c:7a:67:98:53:8a:73:c7:b7:6e:25:f3:cc:
                    fb:7b:33:25:38:b1:98:87:79:3e:ee:c6:49:60:5a:
                    27:f4:44:55:76:30:6c:86:0c:ca:fd:1c:5e:bc:a6:
                    70:dd:7c:35:3d:ef:3d:9d:42:2b:a5:9a:a1:22:7f:
                    dd:a4:d6:81:8c:1d:89:1b:89:f4:14:16:f2:34:a3:
                    f5:3f:b3:fb:6b:4d:33:01:06:c9:2d:69:32:23:26:
                    8f:4e:4f:1c:cc:57:cc:5b:18:30:3c:a0:bc:ab:8a:
                    82:75:ed:ab:8a:85:90:fe:90:5e:4d:39:48:48:4e:
                    f0:9b:c5:01:e2:48:ee:0c:bb:1c:a5:8f:ef:0f:37:
                    05:21:6e:d8:85:40:e9:c7:1c:60:89:80:4c:07:40:
                    ff:e6:51:08:7c:b7:75:19:17:02:f4:19:5b:ae:1a:
                    61:0d:9b:87:5c:06:e7:5d:b9:28:75:55:81:08:86:
                    0a:c2:b7:cc:f8:29:ef:f8:8b:e3:87:95:8d:58:e7:
                    a6:e3:dc:02:7d:1a:4c:e3:90:68:7b:8d:e3:77:8a:
                    1b:9f:a4:90:57:3d:6f:66:ef:2d:30:aa:46:1f:39:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CE:A9:08:BF:C8:40:C2:38:4B:6F:9F:CF:17:0B:45:01:F9:D9:15
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mc6pCL_IQMI4S2-fzxcLRQH52RU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.55.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:e6:47:04:aa:f6:de:09:80:69:1e:4c:30:77:31:4c:4a:87:
         32:da:cf:60:17:1e:2c:db:8e:96:7c:4e:f1:6f:82:03:5f:c7:
         b3:e9:a4:82:c5:8f:78:76:c8:be:be:42:b8:a2:cf:7d:1a:03:
         bf:bc:fc:6e:a6:2c:c2:f6:95:87:18:8a:27:47:7b:55:33:15:
         98:be:46:9f:bf:79:e4:a9:f9:61:ca:bc:c2:c1:e9:62:a7:82:
         cb:ca:db:a3:de:eb:13:86:b7:63:ff:4f:16:19:c9:1b:98:30:
         33:89:77:2e:60:d9:a2:2f:6e:db:c2:2a:61:c6:42:ba:ec:47:
         aa:3c:c6:d0:55:a5:6a:2c:a2:b8:28:74:a2:b2:48:8b:10:e3:
         9f:17:17:37:63:d7:a7:5a:29:c8:5e:d0:f4:4f:2a:dd:40:07:
         2e:96:56:7a:7c:c9:91:a3:c0:e8:0f:b9:bb:0f:09:41:9f:49:
         56:81:af:cc:7c:05:8e:98:38:bb:c3:41:20:eb:e6:2f:b9:2f:
         e1:92:09:8b:9e:44:e0:25:d6:45:48:df:2b:0f:f3:b2:61:e1:
         58:2c:84:97:bd:de:0e:ae:cd:43:2c:25:19:b5:27:87:a0:af:
         b0:c6:b1:f5:67:0b:58:e8:b8:9f:05:30:b8:2e:1b:d4:2e:67:
         94:35:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:42 2024 by rpki-client on console-ams.rpki-client.org