Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/z5bR_dkj1Pvr35Kgwe9LVJb720Q.roa
File:                     z5bR_dkj1Pvr35Kgwe9LVJb720Q.roa (raw, json)
Hash identifier:          O8EHiIqUJFh9aVFaCEyQNkFbJlUe3qQVGLMMepm0lus=
Subject key identifier:   CF:96:D1:FD:D9:23:D4:FB:EB:DF:92:A0:C1:EF:4B:54:96:FB:DB:44
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01C3
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/z5bR_dkj1Pvr35Kgwe9LVJb720Q.roa
Signing time:             Fri 07 Jul 2023 04:14:43 +0000
ROA not before:           Fri 07 Jul 2023 04:14:43 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        175.103.144.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:43 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=CF96D1FDD923D4FBEBDF92A0C1EF4B5496FBDB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:e9:0a:be:70:eb:a2:64:25:6b:a3:f4:95:
                    1a:d2:73:fc:92:7f:d8:0a:4e:2e:ee:74:fd:17:ba:
                    7d:c7:e1:8d:d8:d6:b4:d7:a8:46:7c:74:c1:b5:5d:
                    a9:2c:4d:57:2d:d1:00:1d:0c:b8:32:8c:20:4e:86:
                    13:8c:ab:df:0e:d0:fc:9b:8c:9e:40:95:98:00:e8:
                    55:15:a8:55:1d:5d:ab:95:1c:7c:fa:75:29:58:fe:
                    0e:6c:a0:58:3a:42:5c:89:b3:17:6f:d8:85:a5:70:
                    fa:11:f7:d5:ff:f2:71:bc:9e:2a:f0:52:fa:c5:5c:
                    63:15:07:05:ae:4f:49:4e:ce:25:f5:5b:ec:e8:bf:
                    33:b8:0f:89:10:0d:f1:e5:6f:55:13:b8:17:6e:f5:
                    42:38:e9:c3:aa:8c:41:8f:79:b7:ba:df:df:f0:0b:
                    d3:f3:9b:a3:bf:9c:72:3c:fb:ee:dc:eb:c2:e5:1a:
                    52:7d:d0:46:bc:8f:85:73:4c:8d:8f:c6:58:35:3e:
                    cf:9c:c8:b7:46:0a:b5:48:ea:cb:a3:a6:ae:1d:a6:
                    cd:d1:4e:83:89:d7:e3:36:3d:59:00:81:9b:20:80:
                    5b:0f:5d:d6:7c:2d:60:ae:11:73:0f:b2:8d:10:54:
                    44:33:08:c6:0d:3c:71:20:a2:57:a0:c1:04:49:ac:
                    bf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:96:D1:FD:D9:23:D4:FB:EB:DF:92:A0:C1:EF:4B:54:96:FB:DB:44
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/z5bR_dkj1Pvr35Kgwe9LVJb720Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:a6:bf:cc:21:9b:14:e5:ac:b8:da:d8:a6:7f:65:92:c5:d1:
         31:61:97:95:8c:6a:a4:b6:da:3b:83:94:c2:07:2b:58:1e:bd:
         74:28:4c:60:be:3b:43:54:da:1f:d8:e6:7c:01:64:88:b8:b8:
         f9:dd:d5:2d:f7:63:bd:07:c2:c5:8b:3b:e2:ea:eb:45:19:fb:
         ac:c3:8d:91:6f:62:11:f1:5d:0c:62:b6:40:ae:4f:d8:02:9d:
         06:44:40:1f:1c:f4:8f:65:45:04:15:c6:da:d3:58:61:7e:e1:
         e2:b2:7c:fa:c0:ff:2b:b2:a0:59:d0:e7:2c:a2:c1:c8:50:3d:
         f6:d9:ff:99:bc:b5:10:a7:2b:9c:49:5f:1e:b8:57:82:6b:ef:
         94:32:b6:31:68:fd:00:3d:a4:1d:c7:98:81:04:1e:29:ba:ba:
         e0:e7:52:92:ae:fc:5e:9b:d4:bb:c3:b9:fa:c1:a8:f4:6c:9f:
         d6:1b:fe:f3:56:04:d3:99:95:02:6c:82:01:bf:20:9a:16:13:
         a2:8f:bf:b7:da:6f:69:21:df:a1:74:21:52:fd:a6:2f:75:9b:
         d4:6b:b0:c9:44:d9:01:e6:58:d0:eb:a0:1e:62:58:e0:53:90:
         15:45:98:23:46:28:49:9e:7a:90:41:25:f6:b6:30:ac:fd:21:
         fb:8e:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org