Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/tcLDYQPh_WdlI7Jwkg-3PajJ4K0.roa
File:                     tcLDYQPh_WdlI7Jwkg-3PajJ4K0.roa (raw, json)
Hash identifier:          kOynYfPSuFbZ5idShJLxmAG+IuXkkW/HxPFv460luz4=
Subject key identifier:   B5:C2:C3:61:03:E1:FD:67:65:23:B2:70:92:0F:B7:3D:A8:C9:E0:AD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       014E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tcLDYQPh_WdlI7Jwkg-3PajJ4K0.roa
Signing time:             Fri 07 Jul 2023 04:08:26 +0000
ROA not before:           Fri 07 Jul 2023 04:08:26 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        175.103.128.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:26 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=B5C2C36103E1FD676523B270920FB73DA8C9E0AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:b3:e2:76:1e:01:77:17:e7:de:82:4e:0f:
                    fe:8f:59:3e:fc:32:fa:94:69:05:40:05:2c:7f:36:
                    13:12:09:a3:2e:26:fd:a4:a1:c1:c3:c6:f8:dc:5d:
                    e1:c5:a2:a0:02:9e:37:95:13:41:60:e7:f5:c4:e5:
                    c3:5b:13:a4:41:47:65:dc:4f:35:4a:2e:16:de:c1:
                    86:35:fb:cb:ce:d2:1d:5a:dc:e5:d2:87:41:cd:e4:
                    76:a0:45:d3:b9:41:b8:b4:e5:9d:cb:11:82:d4:c1:
                    48:76:6b:6f:47:57:cc:57:fd:78:c7:c6:ab:04:9f:
                    e0:04:a0:bf:ec:af:d1:45:e6:a9:4c:b0:2e:d8:35:
                    f1:2a:63:26:e3:00:27:8f:3e:c1:21:6b:c2:28:ec:
                    50:f5:89:24:59:90:f7:e5:3c:c5:00:fb:a2:77:cd:
                    c6:87:a0:eb:6a:1e:2b:5b:b1:0c:5f:36:1e:55:c7:
                    e8:e9:d6:45:73:73:97:d0:e9:d7:31:35:77:aa:4c:
                    5b:86:7b:be:43:58:16:76:1f:7a:d5:8d:f6:3d:00:
                    8e:44:f3:fa:b1:a8:0b:a2:df:0d:70:f7:ff:08:6f:
                    ae:19:8c:99:e8:88:ba:1d:30:fc:4d:a3:89:df:54:
                    84:07:64:85:ba:5a:b8:2e:52:a6:c7:c1:16:33:1c:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:C3:61:03:E1:FD:67:65:23:B2:70:92:0F:B7:3D:A8:C9:E0:AD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tcLDYQPh_WdlI7Jwkg-3PajJ4K0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:a6:9e:9a:8f:98:2d:fd:e0:bd:2f:94:0a:4c:84:cb:db:52:
         66:25:54:b8:fb:93:c6:b8:a3:6e:2a:0c:fe:30:12:f9:3d:40:
         de:5e:21:45:0a:91:46:2d:2b:ca:4b:b0:8b:4d:62:c9:6b:29:
         57:2a:76:6d:77:0f:e5:f2:27:6e:ba:fe:71:09:9e:cf:20:cf:
         d3:82:b8:46:dd:71:20:bd:61:cf:c4:97:66:56:27:df:a2:44:
         e3:91:f8:b1:19:3f:21:51:39:6e:e7:6d:11:c1:85:67:9b:b6:
         5e:69:82:a7:3a:c0:1d:0f:7e:de:0a:73:90:68:92:b6:88:60:
         e3:4a:c2:e8:dc:a7:72:fe:9f:b7:5d:e5:06:46:06:6d:e6:27:
         66:5b:db:39:f3:2f:6d:3e:ff:8e:f6:b7:bc:98:04:ca:d1:3a:
         95:7d:16:be:20:c3:73:07:ca:21:68:7f:fe:4d:ea:c7:b3:58:
         e9:05:f4:26:32:c5:4d:a6:77:3f:c4:ac:1e:77:aa:cb:ac:47:
         ab:14:f0:a2:ec:db:2f:e1:42:d8:eb:7f:5e:f6:26:76:e3:37:
         00:1f:dd:ac:d6:75:68:ee:60:38:e1:de:ce:63:54:fc:ec:c1:
         38:50:58:d2:a7:9b:d0:55:98:59:9f:79:23:9b:e5:f5:bc:71:
         62:7b:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org