Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/qbYtR5cPUO91IzCVPiOXrSbNcqk.roa
File:                     qbYtR5cPUO91IzCVPiOXrSbNcqk.roa (raw, json)
Hash identifier:          o/fuF500heB2tuMlPzgQgB/Z/JZAg3yjlIlV/NHqE6Y=
Subject key identifier:   A9:B6:2D:47:97:0F:50:EF:75:23:30:95:3E:23:97:AD:26:CD:72:A9
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0164
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qbYtR5cPUO91IzCVPiOXrSbNcqk.roa
Signing time:             Fri 07 Jul 2023 04:10:34 +0000
ROA not before:           Fri 07 Jul 2023 04:10:34 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        59.156.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:34 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=A9B62D47970F50EF752330953E2397AD26CD72A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:df:b9:03:84:cd:4c:85:ba:89:42:54:03:e6:
                    06:20:dd:e7:2e:33:40:de:79:f4:fd:3b:13:f4:c0:
                    e3:84:40:fb:34:a8:2c:66:29:5f:3c:b6:e6:2a:26:
                    1d:54:b8:9d:59:36:c3:c7:9b:cd:d4:1f:0d:6c:96:
                    f9:13:1f:c1:1d:ed:43:ab:dc:14:a5:32:81:35:ee:
                    ab:00:35:e5:fd:f9:b8:52:78:e7:81:10:9d:bd:b9:
                    77:dd:01:3a:a1:f8:47:bb:db:80:f8:24:8a:e3:15:
                    db:cc:37:52:37:e4:b3:2c:ef:46:5b:bc:4e:cc:c4:
                    cb:ac:40:90:bd:f3:91:26:b4:af:e6:34:56:58:c5:
                    80:1a:98:29:f7:7c:b7:ed:1d:10:ff:20:17:b5:e2:
                    52:01:2b:8d:24:1e:fb:f8:a5:3c:a9:b6:00:30:68:
                    d1:b5:7c:56:4e:cf:3c:7d:a9:a3:ca:cd:46:03:17:
                    9d:2b:7d:96:a2:3b:ac:a7:fa:cf:fc:28:a2:66:2c:
                    23:b1:50:70:55:ac:de:7d:6e:39:6c:c1:a8:d6:51:
                    5d:9e:56:27:7c:36:78:66:af:bd:09:83:de:cf:f2:
                    5e:f0:b3:e5:ad:b1:7e:f1:ec:e5:6c:74:0f:fc:fe:
                    e0:fe:68:6b:e2:5b:05:24:17:ff:a7:bf:90:55:37:
                    a8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:2D:47:97:0F:50:EF:75:23:30:95:3E:23:97:AD:26:CD:72:A9
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qbYtR5cPUO91IzCVPiOXrSbNcqk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:8c:3f:08:e4:27:df:a4:a3:57:88:89:b7:ed:58:5a:b2:7e:
         ae:68:da:47:f1:a7:e4:a8:ac:fc:c1:c8:8f:e8:48:60:9f:19:
         e9:f8:92:56:39:9e:43:d4:99:80:d4:6f:1d:6f:f4:98:45:d6:
         c5:b8:2b:41:c2:2c:4f:11:c0:b9:c8:29:6e:32:59:7b:a8:db:
         bc:35:89:db:e9:58:f3:d9:34:a5:c4:16:93:76:5d:93:fa:de:
         1f:42:cf:dc:a4:a0:4a:b0:01:f1:20:92:cd:83:a5:d6:12:c3:
         4e:76:91:8a:56:49:61:22:5c:9b:03:e7:8d:b5:c5:d4:31:4f:
         7c:f4:24:6f:35:d5:6d:ec:c3:8b:dc:f9:f1:e9:bb:d9:0e:2e:
         f6:0c:93:1d:18:ed:34:47:57:ae:c8:1b:22:7c:20:48:87:4b:
         28:ee:68:a0:51:db:5a:26:8b:92:87:a9:f2:00:4e:09:f9:d1:
         76:77:20:20:5b:76:cf:ad:50:8c:c9:a4:df:b1:5f:59:a1:e6:
         c8:b8:2a:7d:62:ad:c4:fd:f0:c5:61:50:5f:13:fc:db:f9:64:
         3b:01:45:be:b4:d9:46:18:29:38:57:cb:d1:28:c0:8a:69:85:
         36:11:e8:29:8f:7a:9a:04:af:7e:49:e2:6b:b6:64:c7:ba:f2:
         fa:ae:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org