Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/nR2S-lwC-MioiHBx0VRTKg8oTMI.roa
File:                     nR2S-lwC-MioiHBx0VRTKg8oTMI.roa (raw, json)
Hash identifier:          zlc2OmYYy2Cje7XfuvfTzYuBiRsaUqkEeWUm4R/wYtQ=
Subject key identifier:   9D:1D:92:FA:5C:02:F8:C8:A8:88:70:71:D1:54:53:2A:0F:28:4C:C2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01B3
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nR2S-lwC-MioiHBx0VRTKg8oTMI.roa
Signing time:             Fri 07 Jul 2023 04:14:36 +0000
ROA not before:           Fri 07 Jul 2023 04:14:36 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        175.103.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:36 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=9D1D92FA5C02F8C8A8887071D154532A0F284CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:68:01:d2:18:87:e2:29:fc:29:a9:09:b7:
                    7d:49:a3:a8:a0:4a:95:e1:dd:44:b0:cd:b4:21:cc:
                    b0:85:68:f4:39:bd:cd:50:64:ab:60:b7:0b:89:aa:
                    18:1d:6f:08:dd:4f:fa:5e:79:e8:73:12:cc:e1:6c:
                    61:1e:e4:d6:08:6b:a3:3b:f6:19:27:e1:08:34:7c:
                    7c:1a:67:81:e5:32:27:47:26:b8:de:e3:4b:0c:33:
                    41:71:d1:f4:d4:e6:b1:fa:90:f2:f3:19:67:39:ef:
                    42:94:d1:9a:f1:c2:66:74:d4:60:65:ff:26:9f:a3:
                    45:91:f6:15:e6:ca:99:2c:99:27:12:cd:6f:b0:a2:
                    58:9e:39:88:cb:ca:f2:35:61:1f:78:83:eb:e0:bd:
                    88:d1:13:d5:fa:14:e7:63:15:6e:a4:52:70:3d:89:
                    c1:0d:e7:0d:41:d3:77:42:19:3a:50:f0:a5:e9:eb:
                    b2:cb:75:f6:1d:57:f1:7e:9f:61:ab:ff:b2:d7:5e:
                    cf:93:05:29:e8:b3:3d:69:55:e4:0e:e8:44:6f:50:
                    1f:b2:e8:58:64:f2:b8:24:51:11:de:e7:ba:e1:25:
                    8e:8e:dc:b1:f8:4c:e1:20:ec:19:fb:ce:b3:d2:3a:
                    b4:cc:bf:af:52:7d:d8:8d:bf:52:57:45:ca:3f:0d:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1D:92:FA:5C:02:F8:C8:A8:88:70:71:D1:54:53:2A:0F:28:4C:C2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nR2S-lwC-MioiHBx0VRTKg8oTMI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:23:d4:a0:9f:fc:15:e3:8c:c7:aa:40:3a:0d:74:af:ab:
         33:ee:e6:c5:57:f3:ab:ac:ad:2f:36:94:ef:05:57:e8:2f:ed:
         05:16:c6:5d:a8:79:82:a6:3b:c8:aa:ff:5b:d3:9b:ba:a3:d9:
         46:67:41:4a:21:07:cb:f8:a2:3d:fb:1d:b7:6c:87:de:77:0e:
         89:f7:87:aa:11:08:0f:a3:f7:1a:27:ea:98:78:fd:21:75:99:
         f8:ed:6d:00:6e:e7:b6:33:b9:29:a5:89:12:a5:3f:fa:ad:17:
         ad:9d:ee:11:f8:9d:35:b4:f8:b9:05:b0:20:28:71:9f:e3:e2:
         ba:53:24:37:c1:61:97:5c:2b:d6:62:11:e2:6d:c5:71:e1:8a:
         ac:9d:e1:a6:2c:99:69:7c:b8:2b:04:13:34:05:5b:c3:5f:68:
         74:91:a0:9a:72:79:6d:6d:09:2c:70:55:a7:3d:6c:28:e4:51:
         0d:a7:e2:20:04:82:e6:50:9c:30:53:ed:7b:de:f5:0b:f7:51:
         47:25:6f:e0:22:ba:24:60:4c:79:7a:c1:63:e2:bc:0a:dc:2a:
         66:99:d0:2f:07:a6:7b:eb:59:0f:e7:2a:e1:41:3d:2e:de:de:
         30:64:5a:b5:31:e8:8d:34:60:72:b4:fd:63:d8:53:1f:8a:1b:
         2d:cb:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org