Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/AmSd7yll0h4zrapHfegMBUR-mcY.roa
File:                     AmSd7yll0h4zrapHfegMBUR-mcY.roa (raw, json)
Hash identifier:          f4mCz9vfFG+lGGxYl4t99FvJucIxQJdmW3NNR6xeBBs=
Subject key identifier:   02:64:9D:EF:29:65:D2:1E:33:AD:AA:47:7D:E8:0C:05:44:7E:99:C6
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       84
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/AmSd7yll0h4zrapHfegMBUR-mcY.roa
Signing time:             Sat 01 Jul 2023 01:28:29 +0000
ROA not before:           Sat 01 Jul 2023 01:28:29 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        125.192.0.0/13 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:29 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=02649DEF2965D21E33ADAA477DE80C05447E99C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:80:9b:dd:16:78:46:4d:a6:f0:5a:5f:37:1e:
                    03:01:4b:f1:99:24:88:aa:59:ec:d3:55:d7:eb:b2:
                    4d:45:8c:c7:92:46:f5:b7:4e:8c:a2:76:d7:d5:05:
                    6a:a6:ea:ea:8b:0e:c8:4d:f8:c6:e5:04:6f:9a:8a:
                    9d:70:ce:46:1a:ec:d6:ea:65:88:0f:2a:87:00:6c:
                    f5:c8:c7:97:dd:69:e5:fd:2c:b9:76:af:67:fd:23:
                    62:0d:c9:cc:69:dd:53:e8:f1:2c:78:c3:bf:cf:32:
                    c2:c6:1f:8e:7b:bc:a2:97:41:f7:66:62:ac:7c:9f:
                    11:fa:e8:d0:f8:7d:b5:83:38:bc:0c:76:95:d0:40:
                    30:c6:29:30:6b:98:72:6a:de:41:2c:ab:f8:c0:58:
                    26:b5:ad:9a:26:de:5e:10:9a:c8:f4:f2:e8:9b:c5:
                    1a:72:2c:b9:2d:7a:53:ab:6e:bd:cc:eb:bd:82:d9:
                    f8:69:ec:97:a1:17:4c:54:c1:0f:e1:4b:c9:a5:57:
                    a5:13:d1:e6:70:eb:4e:27:c0:9b:4f:b5:36:2d:93:
                    af:36:7b:72:ba:ad:1d:8b:8f:be:ea:65:85:a4:c3:
                    16:fa:78:12:ec:a6:9a:e2:de:14:d5:41:f0:95:48:
                    2a:55:47:c2:6f:89:de:24:8e:41:bb:87:2a:24:80:
                    ad:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:64:9D:EF:29:65:D2:1E:33:AD:AA:47:7D:E8:0C:05:44:7E:99:C6
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/AmSd7yll0h4zrapHfegMBUR-mcY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.192.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         21:53:77:d3:6d:e6:8d:21:94:d0:c2:47:00:e3:59:88:64:ea:
         8f:ad:78:ae:b0:fe:54:e2:52:b7:29:f7:c9:2f:48:b5:bb:5e:
         8b:b7:7f:a7:86:7f:23:3c:92:2e:f1:5d:37:83:39:d2:75:70:
         9b:58:2c:fe:4c:e3:e4:ba:a6:0e:22:c1:68:f1:cb:98:e6:3b:
         12:50:15:11:cc:59:ed:28:59:df:6b:5b:03:c4:26:01:3f:8f:
         d5:f1:25:34:02:71:5d:92:29:a4:bb:66:08:9a:b6:85:b9:6e:
         a4:8a:fe:d3:7e:fe:ea:f8:ff:94:94:66:21:e3:6c:96:9c:03:
         64:b3:31:41:cf:5c:11:42:4d:ba:8c:73:35:06:89:2c:c0:56:
         0f:c5:5e:fc:5b:34:95:6a:a2:87:8e:71:78:b6:7c:21:75:5a:
         f2:fa:c4:80:fa:28:98:42:1e:d1:a4:da:a9:ea:cd:ec:ff:17:
         a1:05:d2:88:2d:c7:81:d7:f4:16:15:a7:b0:d6:92:1e:09:4f:
         37:10:80:6d:8f:d1:b3:28:b3:9c:9f:fb:4e:e9:e6:a0:8f:70:
         91:b6:17:23:13:c2:7c:c4:28:0d:47:fd:e7:0e:7e:b5:9a:07:
         af:5b:ca:ef:04:fc:59:3d:d3:97:73:2f:a4:bd:d9:02:7b:fa:
         0d:55:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org