Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TEpmxmQa-b0XSjKG2BxuyQruHcE.roa
File:                     TEpmxmQa-b0XSjKG2BxuyQruHcE.roa (raw, json)
Hash identifier:          yDzzlSo52NrEtRU6byIhGxwalL8UY4XYabSLA0T3v2U=
Subject key identifier:   4C:4A:66:C6:64:1A:F9:BD:17:4A:32:86:D8:1C:6E:C9:0A:EE:1D:C1
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       5D
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TEpmxmQa-b0XSjKG2BxuyQruHcE.roa
Signing time:             Sun 30 Jun 2024 01:32:08 +0000
ROA not before:           Sun 30 Jun 2024 01:32:08 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     4694
IP address blocks:        202.239.32.0/19 maxlen: 24
Validation:               Failed, certificate revoked on Mon 28 Oct 2024 07:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jun 30 01:32:08 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=4C4A66C6641AF9BD174A3286D81C6EC90AEE1DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:74:bd:6a:f4:29:9d:bb:c4:ed:ef:cb:f0:
                    b0:73:f3:6b:c6:af:db:fe:c8:f7:98:ca:b0:2c:f5:
                    3a:c3:76:09:ce:68:47:25:34:49:b8:2a:93:79:90:
                    d6:58:cd:af:f0:44:94:76:ee:8a:11:ad:9d:bc:17:
                    7c:fc:2c:24:b0:5a:b1:6d:9a:f9:d5:07:53:65:2b:
                    5c:37:62:44:8c:71:8d:d3:89:de:fb:82:49:31:5b:
                    3d:86:ef:97:69:e9:d7:88:89:06:4f:d5:77:fb:44:
                    43:ac:74:5b:8c:46:8b:c0:04:34:5a:80:0e:9f:4b:
                    25:92:2e:25:d3:c7:2e:c0:de:f6:de:7d:4b:98:74:
                    0a:0c:ca:fb:21:2e:bd:51:17:8c:5c:fb:84:16:3d:
                    f0:d1:ae:b9:a0:12:6c:59:92:67:a1:7d:87:4e:d6:
                    b4:14:ff:03:10:41:e4:82:b6:c6:1f:78:b3:6e:03:
                    5d:4d:fa:f8:3d:9a:3f:11:35:cd:df:b1:60:86:ad:
                    74:7e:38:e6:07:f2:19:bf:19:eb:a1:53:b2:0c:9f:
                    c4:57:b3:a6:60:7f:8c:dc:d0:1c:9c:33:0f:82:8c:
                    a6:38:fe:18:b3:c7:f9:be:ba:1b:67:02:c8:93:8a:
                    ea:d6:74:95:ea:1b:5b:b8:6a:75:89:4d:b3:8d:92:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4A:66:C6:64:1A:F9:BD:17:4A:32:86:D8:1C:6E:C9:0A:EE:1D:C1
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TEpmxmQa-b0XSjKG2BxuyQruHcE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.239.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:2a:2d:dd:70:a8:15:84:ae:c6:4a:d1:8a:82:c4:2f:70:9e:
         b7:0d:ad:a3:77:66:46:12:3a:bc:0e:ae:ef:f4:5d:fa:19:4f:
         d6:6f:15:24:c1:18:53:6f:63:0e:33:ec:25:1a:12:2d:4b:96:
         db:6f:da:b9:7e:ef:13:07:c7:14:c7:f0:17:9f:fa:23:01:95:
         17:7f:28:41:89:c2:f6:8c:66:17:38:01:0c:eb:ae:28:d2:a3:
         49:60:16:e9:93:95:1e:e2:ac:e0:fa:d3:0f:ec:a8:b5:91:09:
         21:55:7a:6f:c7:23:1d:cd:ed:a8:c7:4f:aa:25:bc:af:b2:21:
         dc:7e:16:8c:5a:60:8b:be:58:f2:8e:ca:76:2c:a4:f2:d2:6f:
         66:a3:ba:fb:eb:20:ff:f8:fb:13:e6:b5:cb:97:71:79:f8:5c:
         d2:a5:36:36:02:20:da:7a:c4:bc:65:d3:a4:e7:60:b1:9e:7d:
         ca:d8:7a:aa:10:1c:98:fd:7e:83:2a:e7:44:34:f4:ac:83:42:
         d1:fb:fd:a1:f0:22:da:25:c5:82:67:1c:97:8e:b8:01:da:73:
         e4:53:33:9d:fd:d2:ff:28:e1:01:2e:e5:50:7b:5f:98:ca:d1:
         f0:24:72:d7:72:88:f2:d8:df:90:19:ec:f3:45:37:f3:c3:16:
         8b:67:e7:19
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTBB
ODIyODhEMkUyM0RCRkE4NzYzOEYzRUI4Qjk5NUUxODk3RTk1MB4XDTI0MDYzMDAx
MzIwOFoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoNEM0QTY2QzY2NDFBRjlC
RDE3NEEzMjg2RDgxQzZFQzkwQUVFMURDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMdUdL1q9Cmdu8Tt78vwsHPza8av2/7I95jKsCz1OsN2Cc5oRyU0
Sbgqk3mQ1ljNr/BElHbuihGtnbwXfPwsJLBasW2a+dUHU2UrXDdiRIxxjdOJ3vuC
STFbPYbvl2np14iJBk/Vd/tEQ6x0W4xGi8AENFqADp9LJZIuJdPHLsDe9t59S5h0
CgzK+yEuvVEXjFz7hBY98NGuuaASbFmSZ6F9h07WtBT/AxBB5IK2xh94s24DXU36
+D2aPxE1zd+xYIatdH445gfyGb8Z66FTsgyfxFezpmB/jNzQHJwzD4KMpjj+GLPH
+b66G2cCyJOK6tZ0leobW7hqdYlNs42SfzcCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRMSmbGZBr5vRdKMobYHG7JCu4dwTAfBgNVHSMEGDAWgBRZCoIojS4j2/qHY48+
uLmV4Yl+lTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODMvV1FxQ0tJMHVJOXY2aDJPUFByaTVsZUdKZnBVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV1FxQ0tJMHVJOXY2aDJPUFByaTVs
ZUdKZnBVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgzL1RFcG14bVFhLWIwWFNqS0cyQnh1eVFydUhjRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAXK7yAwDQYJKoZIhvcNAQELBQADggEBAA8qLd1wqBWErsZK0YqCxC9w
nrcNraN3ZkYSOrwOru/0XfoZT9ZvFSTBGFNvYw4z7CUaEi1Llttv2rl+7xMHxxTH
8Bef+iMBlRd/KEGJwvaMZhc4AQzrrijSo0lgFumTlR7irOD60w/sqLWRCSFVem/H
Ix3N7ajHT6olvK+yIdx+FoxaYIu+WPKOynYspPLSb2ajuvvrIP/4+xPmtcuXcXn4
XNKlNjYCINp6xLxl06TnYLGefcrYeqoQHJj9foMq50Q09KyDQtH7/aHwItolxYJn
HJeOuAHac+RTM5390v8o4QEu5VB7X5jK0fAkctdyiPLY35AZ7PNFN/PDFotn5xk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:12 2025 by rpki-client