Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/EArNuH-EvPWLPPeKFBoUGFCaKJs.roa
File:                     EArNuH-EvPWLPPeKFBoUGFCaKJs.roa (raw, json)
Hash identifier:          B9fkBCcoTQOXZasWCXfvuPeEWwF7QfLsLXlwsPihTQc=
Subject key identifier:   10:0A:CD:B8:7F:84:BC:F5:8B:3C:F7:8A:14:1A:14:18:50:9A:28:9B
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       3E
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/EArNuH-EvPWLPPeKFBoUGFCaKJs.roa
Signing time:             Tue 01 Aug 2023 01:29:01 +0000
ROA not before:           Tue 01 Aug 2023 01:29:01 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     24296
IP address blocks:        203.95.16.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Aug  1 01:29:01 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=100ACDB87F84BCF58B3CF78A141A1418509A289B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:bc:5b:df:2c:8a:95:04:72:e5:11:6b:d5:b0:
                    e6:9a:57:7a:3f:77:c4:dc:9e:cd:0a:af:82:9a:1f:
                    08:45:a2:41:14:c1:a3:a9:9b:01:84:66:4e:6e:1b:
                    18:b9:0f:ff:c7:5f:34:3d:54:80:d9:3c:64:ea:5a:
                    3e:f8:87:7e:e4:4f:24:1c:ee:9e:02:73:7d:c6:3e:
                    a8:52:c3:59:30:fb:82:2d:80:10:22:a1:82:eb:ac:
                    07:8a:c7:47:63:4e:fa:ae:c6:4d:0c:c1:70:ab:f5:
                    01:c8:4e:de:2e:f5:e5:0b:6a:8b:a5:85:6b:c8:53:
                    d1:45:f2:ea:29:1a:b7:39:b2:40:d7:16:2f:15:f9:
                    81:11:7c:d5:ea:55:ff:c4:a1:3d:b7:d0:34:42:be:
                    af:73:95:3e:2a:69:c7:c3:a1:39:49:be:59:99:f8:
                    4f:3d:47:b4:fc:37:8c:fd:7b:df:7f:a7:10:b3:82:
                    cd:91:ec:b4:fc:3c:99:d0:97:87:df:a5:6e:8c:fa:
                    17:4e:1e:3d:ee:6f:0e:49:1b:e9:0b:d0:53:04:8f:
                    3c:77:60:8b:16:be:8c:aa:01:8e:08:48:a4:02:9c:
                    e9:2d:eb:34:13:59:f8:d2:18:61:6c:34:c5:4a:64:
                    72:1d:46:16:69:6a:24:8a:35:fb:09:cc:15:97:88:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0A:CD:B8:7F:84:BC:F5:8B:3C:F7:8A:14:1A:14:18:50:9A:28:9B
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/EArNuH-EvPWLPPeKFBoUGFCaKJs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:12:a0:a9:b9:b2:d9:07:40:33:c2:45:98:e9:bc:5c:ab:9b:
         78:bb:d6:0f:01:ac:b2:8f:6c:96:10:c4:d1:ab:8c:13:c0:b2:
         ba:ce:f2:8f:fd:7b:b0:04:02:56:31:d7:c9:21:ab:82:c5:02:
         65:fe:a7:fd:08:ef:f6:bc:cf:8a:a6:ec:03:0e:03:d3:da:ee:
         a1:47:07:6d:9b:b7:96:78:3e:b6:80:9e:36:fd:f7:9a:3d:00:
         60:26:82:46:88:d5:77:e6:79:6a:59:88:f6:f5:c8:fb:b9:a1:
         cb:b9:29:a8:d6:2a:e3:73:09:3d:c5:a2:5a:40:bd:47:95:b7:
         4b:e7:1a:1c:a3:2f:cc:1d:43:7b:94:cc:b1:fd:28:ed:15:64:
         bd:7d:b0:83:4d:b1:16:cb:3d:70:39:34:80:de:ca:5e:72:8d:
         e7:4e:fc:1c:f4:30:22:6d:4f:0b:e2:b4:a8:13:a7:89:74:8a:
         76:f3:94:5c:4f:20:61:62:30:75:73:b9:32:71:2c:90:f5:c7:
         a8:ac:51:33:1a:41:05:93:d9:17:fb:a2:f7:52:7b:ec:35:6c:
         c9:e1:21:9e:e2:94:81:27:58:be:47:de:62:4a:46:c1:ad:39:
         c1:23:b7:53:fd:66:fd:79:e6:5d:fb:e6:df:06:2a:fc:52:d0:
         78:37:b6:d0
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MkY4
QUJCQTRBQjRGNjUwQjJDNjlCQThDNkNBNUVEMjJERkUzNTRGMB4XDTIzMDgwMTAx
MjkwMVoXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoMTAwQUNEQjg3Rjg0QkNG
NThCM0NGNzhBMTQxQTE0MTg1MDlBMjg5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPi8W98sipUEcuURa9Ww5ppXej93xNyezQqvgpofCEWiQRTBo6mb
AYRmTm4bGLkP/8dfND1UgNk8ZOpaPviHfuRPJBzungJzfcY+qFLDWTD7gi2AECKh
guusB4rHR2NO+q7GTQzBcKv1AchO3i715Qtqi6WFa8hT0UXy6ikatzmyQNcWLxX5
gRF81epV/8ShPbfQNEK+r3OVPippx8OhOUm+WZn4Tz1HtPw3jP1733+nELOCzZHs
tPw8mdCXh9+lboz6F04ePe5vDkkb6QvQUwSPPHdgixa+jKoBjghIpAKc6S3rNBNZ
+NIYYWw0xUpkch1GFmlqJIo1+wnMFZeIKFMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQQCs24f4S89Ys894oUGhQYUJoomzAfBgNVHSMEGDAWgBRy+Ku6SrT2ULLGm6jG
yl7SLf41TzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjExMTYvY3ZpcnVrcTA5bEN5eHB1b3hzcGUwaTMtTlU4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY3ZpcnVrcTA5bEN5eHB1b3hzcGUw
aTMtTlU4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIxMTE2L0VBck51SC1FdlBXTFBQZUtGQm9VR0ZDYUtKcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAPLXxAwDQYJKoZIhvcNAQELBQADggEBABESoKm5stkHQDPCRZjpvFyr
m3i71g8BrLKPbJYQxNGrjBPAsrrO8o/9e7AEAlYx18khq4LFAmX+p/0I7/a8z4qm
7AMOA9Pa7qFHB22bt5Z4PraAnjb995o9AGAmgkaI1XfmeWpZiPb1yPu5ocu5KajW
KuNzCT3FolpAvUeVt0vnGhyjL8wdQ3uUzLH9KO0VZL19sINNsRbLPXA5NIDeyl5y
jedO/Bz0MCJtTwvitKgTp4l0inbzlFxPIGFiMHVzuTJxLJD1x6isUTMaQQWT2Rf7
ovdSe+w1bMnhIZ7ilIEnWL5H3mJKRsGtOcEjt1P9Zv155l375t8GKvxS0Hg3ttA=
-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:25 2024 by rpki-client on console-fra.rpki-client.org