Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/qt4fa--PtpYVlAi2pODWpoVyTQU.roa
File:                     qt4fa--PtpYVlAi2pODWpoVyTQU.roa (raw, json)
Hash identifier:          H+1U+NV3UD2ud1DntVEslILeYLj636Zus1kWcJvpM60=
Subject key identifier:   AA:DE:1F:6B:EF:8F:B6:96:15:94:08:B6:A4:E0:D6:A6:85:72:4D:05
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0139
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qt4fa--PtpYVlAi2pODWpoVyTQU.roa
Signing time:             Fri 07 Jul 2023 04:08:17 +0000
ROA not before:           Fri 07 Jul 2023 04:08:17 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        36.52.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:17 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=AADE1F6BEF8FB696159408B6A4E0D6A685724D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:f2:77:82:80:f0:0d:e3:8b:fc:de:03:4e:
                    3a:17:c4:3c:7f:d8:64:ba:19:04:96:9b:35:ad:a5:
                    41:65:4a:10:bb:3c:0f:4b:ba:31:45:00:a7:a1:18:
                    91:3a:c8:34:2f:60:e8:2e:54:67:9e:06:65:0f:ac:
                    9b:34:bc:67:1f:34:74:52:96:59:67:91:d7:c9:ca:
                    0f:4b:30:3a:c3:e6:25:7d:3d:d9:0e:a6:d7:93:70:
                    18:89:f3:ea:1a:d2:58:34:7d:6a:e2:84:6e:ce:d0:
                    ad:41:85:08:fc:fc:8c:a7:b7:43:7c:30:73:0d:5d:
                    39:b7:f1:54:8d:23:08:30:5c:66:43:71:32:22:e3:
                    25:b2:d4:e8:26:03:ed:0c:1d:35:11:a6:06:45:a7:
                    39:22:a3:a5:d2:2a:01:0e:f7:50:62:5f:cf:67:c0:
                    6b:97:e7:f5:16:49:d3:3a:0f:87:b4:36:0a:35:0a:
                    e9:1d:80:e5:17:37:fe:60:84:a4:aa:f3:86:6e:28:
                    68:3f:64:09:f2:4b:0d:cf:74:fa:cb:1c:a7:86:af:
                    40:79:37:31:e0:55:f3:21:00:13:b4:25:e5:05:e8:
                    71:e3:eb:07:74:d2:9b:27:2e:0d:cb:0c:b3:7a:6b:
                    c0:e8:bb:69:df:0d:3a:00:89:25:9c:4e:4c:4c:9e:
                    75:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DE:1F:6B:EF:8F:B6:96:15:94:08:B6:A4:E0:D6:A6:85:72:4D:05
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qt4fa--PtpYVlAi2pODWpoVyTQU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:69:82:b7:3f:ba:ac:86:1d:31:7d:38:6e:05:01:46:b8:64:
         98:4c:74:c9:3e:82:59:e8:16:e2:76:60:58:16:26:2d:7c:10:
         fb:41:a5:79:b7:7f:41:58:36:9e:00:06:cb:8f:d1:55:a8:72:
         c3:28:e6:a1:b6:29:67:52:3b:86:69:c5:68:e8:27:58:25:ce:
         7e:82:22:af:e5:8e:8e:8c:29:70:c4:0d:f5:ae:1d:b2:de:fd:
         74:42:48:29:97:82:72:fa:e5:b6:73:80:40:9e:e2:0a:04:38:
         70:ff:97:f1:3b:d8:ed:8d:f9:44:17:bf:75:1e:18:61:19:f5:
         4c:b0:8e:4e:9c:94:f4:84:bf:14:3f:0b:69:61:09:13:5c:b2:
         2b:2d:96:7e:9e:22:df:21:56:34:fc:a6:ca:e1:09:4d:c4:ce:
         05:80:fe:9a:ac:78:ae:74:93:86:24:5d:00:28:15:cc:83:93:
         40:27:7b:c8:e6:5d:61:10:52:03:a7:bd:22:12:96:f2:e2:01:
         54:b0:6c:54:7b:82:82:4a:16:fd:2a:e8:ca:09:da:87:7b:1e:
         95:cd:ca:f2:ec:ad:b2:b4:b1:cb:bc:28:b3:ed:c5:cc:fe:80:
         29:f9:15:af:5b:c1:ef:89:ed:aa:31:b3:80:52:49:06:9f:e6:
         1c:77:31:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org