Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/qiugjm08HJWBrFGP6E6xK4xClqU.roa
File:                     qiugjm08HJWBrFGP6E6xK4xClqU.roa (raw, json)
Hash identifier:          /BIF/yardMhLeFbk3i6RBtuy6xzWV7zNsbWxB/b0f0o=
Subject key identifier:   AA:2B:A0:8E:6D:3C:1C:95:81:AC:51:8F:E8:4E:B1:2B:8C:42:96:A5
Certificate issuer:       /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial:       02
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/qiugjm08HJWBrFGP6E6xK4xClqU.roa
Signing time:             Sat 15 Jul 2023 13:48:33 +0000
ROA not before:           Sat 15 Jul 2023 13:48:33 +0000
ROA not after:            Sun 14 Jul 2024 13:40:38 +0000
asID:                     63800
IP address blocks:        103.131.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 Nov 2023 16:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
        Validity
            Not Before: Jul 15 13:48:33 2023 GMT
            Not After : Jul 14 13:40:38 2024 GMT
        Subject: CN=AA2BA08E6D3C1C9581AC518FE84EB12B8C4296A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:d1:4f:18:03:62:bd:37:c2:e0:a3:48:51:
                    41:01:c7:b0:9e:d7:e0:91:f0:63:3a:7e:74:e4:70:
                    75:64:e2:a0:a1:4e:57:c1:2a:9f:0a:54:ab:b1:39:
                    86:d3:fb:2f:23:ec:59:52:22:31:d6:64:8f:8d:17:
                    42:20:f3:9d:ce:8b:29:2a:5a:d0:da:1f:3a:1a:f7:
                    dd:b8:bd:73:6f:e7:6d:1f:be:bd:b7:8f:1f:f2:6d:
                    3e:f2:db:00:19:b3:20:3a:1f:bc:50:38:59:0c:20:
                    d1:69:f1:73:0f:3d:95:d0:5c:3b:1f:07:ca:ae:86:
                    03:63:2b:79:d1:ff:73:a0:db:b4:09:c4:22:13:1d:
                    f6:4b:56:92:1b:b7:24:3f:f6:a1:f8:0f:e0:84:8f:
                    71:94:0e:ad:6a:00:85:2a:e2:6a:03:f3:91:5c:5f:
                    be:87:c2:12:35:4e:cd:eb:53:b9:62:89:9b:56:ae:
                    da:7c:6b:be:4d:c7:57:b5:6b:a1:f7:44:61:09:97:
                    b9:68:dc:ad:7f:ef:7d:ea:52:14:db:5d:ad:19:cd:
                    5b:05:97:da:78:f2:ad:d1:57:87:40:d0:0a:d4:33:
                    d0:c7:9d:4d:fc:e3:30:24:a7:08:d8:08:5d:fd:4d:
                    90:9f:83:51:65:8c:38:37:c7:9f:a7:08:1f:44:f3:
                    07:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2B:A0:8E:6D:3C:1C:95:81:AC:51:8F:E8:4E:B1:2B:8C:42:96:A5
            X509v3 Authority Key Identifier:
                keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/qiugjm08HJWBrFGP6E6xK4xClqU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:93:47:0c:b6:9b:da:94:1f:a7:6d:48:7d:84:b2:1c:6c:bd:
         d2:5c:d4:4f:99:be:90:1d:73:6e:76:8b:9a:cf:be:e1:e4:d3:
         f9:37:fd:d6:5a:3a:2b:a4:bd:49:da:a0:a1:41:ca:0e:4a:7c:
         e9:3f:7a:4a:af:a8:cc:c7:77:99:81:13:93:36:a7:05:ab:e1:
         d2:bc:18:2a:92:cc:7c:e5:3b:e1:73:83:02:62:82:2a:39:61:
         1d:1d:86:c2:41:17:fc:b6:aa:5e:fe:ca:07:ee:f9:37:14:43:
         d9:78:1c:12:1f:cb:c0:c3:9d:28:79:b3:f0:1f:be:8f:d9:59:
         76:c9:58:be:87:23:7b:cf:9d:52:26:e4:aa:2a:da:14:d0:bd:
         7c:49:26:21:10:e3:c9:14:16:7d:5c:78:34:c5:2e:24:41:34:
         4a:12:b7:82:1c:25:df:66:5d:00:1e:5c:83:3c:c5:aa:e0:43:
         df:ce:2b:c2:7b:cf:84:3f:79:82:d7:29:f1:a3:e5:60:70:a3:
         56:9c:ae:49:94:d4:aa:aa:43:cd:c8:b7:e0:55:0f:94:a6:ee:
         36:89:93:79:66:21:0c:17:80:98:b1:a0:4e:af:5c:e0:fb:dd:
         26:cb:96:5c:1e:a8:d4:f3:ef:26:d1:1c:a7:8d:87:22:0f:1e:
         0a:0a:68:77
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNTBF
ODI5NzVEODI5MUM0NEFBN0U1M0VBMTUxMjRGMEVFQTIwQjA1MB4XDTIzMDcxNTEz
NDgzM1oXDTI0MDcxNDEzNDAzOFowMzExMC8GA1UEAxMoQUEyQkEwOEU2RDNDMUM5
NTgxQUM1MThGRTg0RUIxMkI4QzQyOTZBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL5k0U8YA2K9N8Lgo0hRQQHHsJ7X4JHwYzp+dORwdWTioKFOV8Eq
nwpUq7E5htP7LyPsWVIiMdZkj40XQiDznc6LKSpa0NofOhr33bi9c2/nbR++vbeP
H/JtPvLbABmzIDofvFA4WQwg0Wnxcw89ldBcOx8Hyq6GA2MredH/c6DbtAnEIhMd
9ktWkhu3JD/2ofgP4ISPcZQOrWoAhSriagPzkVxfvofCEjVOzetTuWKJm1au2nxr
vk3HV7VrofdEYQmXuWjcrX/vfepSFNtdrRnNWwWX2njyrdFXh0DQCtQz0MedTfzj
MCSnCNgIXf1NkJ+DUWWMODfHn6cIH0TzB3kCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSqK6CObTwclYGsUY/oTrErjEKWpTAfBgNVHSMEGDAWgBQlDoKXXYKRxEqn5T6h
USTw7qILBTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMTQvSlE2Q2wxMkNrY1JLcC1VLW9WRWs4TzZpQ3dVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSlE2Q2wxMkNrY1JLcC1VLW9WRWs4
TzZpQ3dVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjE0L3FpdWdqbTA4SEpXQnJGR1A2RTZ4SzR4Q2xxVS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABng5cwDQYJKoZIhvcNAQELBQADggEBAFCTRwy2m9qUH6dtSH2Eshxs
vdJc1E+ZvpAdc252i5rPvuHk0/k3/dZaOiukvUnaoKFByg5KfOk/ekqvqMzHd5mB
E5M2pwWr4dK8GCqSzHzlO+FzgwJigio5YR0dhsJBF/y2ql7+ygfu+TcUQ9l4HBIf
y8DDnSh5s/Afvo/ZWXbJWL6HI3vPnVIm5Koq2hTQvXxJJiEQ48kUFn1ceDTFLiRB
NEoSt4IcJd9mXQAeXIM8xargQ9/OK8J7z4Q/eYLXKfGj5WBwo1acrkmU1KqqQ83I
t+BVD5Sm7jaJk3lmIQwXgJixoE6vXOD73SbLllweqNTz7ybRHKeNhyIPHgoKaHc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org