Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/4WurJDxycTjHUABHK94BLMe44kg.roa
File:                     4WurJDxycTjHUABHK94BLMe44kg.roa (raw, json)
Hash identifier:          SgsIgxuWsmEeIC7yDsdQmS0k+y0gq14laSyi+YikM3E=
Subject key identifier:   E1:6B:AB:24:3C:72:71:38:C7:50:00:47:2B:DE:01:2C:C7:B8:E2:48
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       017C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4WurJDxycTjHUABHK94BLMe44kg.roa
Signing time:             Fri 07 Jul 2023 04:10:43 +0000
ROA not before:           Fri 07 Jul 2023 04:10:43 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.44.16.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:43 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=E16BAB243C727138C75000472BDE012CC7B8E248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:6f:42:e6:af:f9:73:8b:ea:5c:c2:a1:80:
                    7d:65:4e:42:02:86:a2:e4:40:79:c7:7e:2b:8b:9b:
                    2b:35:bf:d5:1e:80:63:ad:d1:63:04:25:21:5c:b8:
                    50:cd:4d:16:b1:f6:2e:e6:f3:44:d8:bb:8d:08:e0:
                    80:eb:1b:69:4c:a3:58:d8:d8:8c:cb:ad:14:e0:30:
                    1c:17:16:6d:95:4b:45:77:ba:50:e8:32:f8:4f:c7:
                    ee:98:c0:0e:20:6d:cd:8c:08:43:a3:ac:72:36:c7:
                    08:bd:8a:1b:83:7b:29:68:6c:18:52:d6:25:27:b4:
                    fe:48:49:58:c3:58:ff:ca:d6:75:61:36:e3:1a:d3:
                    26:ca:e7:7d:ba:60:9c:5d:c3:d4:5e:a6:29:a2:2e:
                    99:be:0c:32:f7:93:40:20:eb:84:83:3b:ef:f5:e8:
                    0a:4f:05:cd:53:6a:01:f0:40:2e:99:d6:80:f1:d2:
                    3b:1e:04:2f:d8:0a:39:56:be:24:74:9a:89:35:51:
                    ad:ab:61:a9:b9:2d:83:8a:da:a0:75:61:b7:0f:0c:
                    48:8a:46:40:1f:89:2d:85:85:05:02:43:32:57:5b:
                    21:30:ba:65:f1:3e:3a:4b:37:7e:b4:c7:07:f9:1d:
                    e4:72:2b:2f:87:50:fb:ee:f0:12:1e:d2:88:ff:af:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6B:AB:24:3C:72:71:38:C7:50:00:47:2B:DE:01:2C:C7:B8:E2:48
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4WurJDxycTjHUABHK94BLMe44kg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:1c:81:5b:af:bb:2e:41:89:d7:31:43:9f:28:16:4d:a3:61:
         dc:38:45:49:24:6f:14:c5:f3:61:15:58:42:52:51:9a:ae:d2:
         eb:94:00:54:d5:32:b2:6c:81:a5:e5:3a:f7:a2:89:38:76:39:
         20:82:dd:1f:bf:ec:8b:60:ac:d8:15:94:0d:dd:34:5a:5c:39:
         e2:6a:9e:da:ad:af:cf:b3:18:8c:25:15:f6:d1:0b:c9:b6:e2:
         3e:bd:a3:3d:c6:a3:57:be:7e:fb:f5:f9:92:b1:98:e5:df:8e:
         62:56:11:0d:02:77:32:c1:03:f0:e2:8d:f0:08:86:98:ec:3d:
         56:92:82:13:b6:19:f0:5a:98:e2:15:f3:30:82:df:81:18:a0:
         9f:7d:b7:01:81:0c:56:40:c4:74:17:02:14:28:38:25:6c:00:
         71:a1:3a:3f:87:97:65:ff:af:78:dc:3c:07:4c:c4:a1:da:08:
         23:af:d1:43:26:18:70:90:ff:6b:5c:6a:d2:b7:92:16:ab:83:
         02:f9:c7:50:3a:74:16:be:27:56:7d:f2:48:9c:6d:9b:d2:f6:
         f0:9f:89:31:14:99:8d:b5:6a:54:49:f4:ed:d7:a5:70:ba:33:
         11:31:64:c5:d7:73:53:8f:23:05:27:a7:ee:35:f0:57:6d:fc:
         26:01:cb:ad
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDEwNDNaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEUxNkJBQjI0M0M3Mjcx
MzhDNzUwMDA0NzJCREUwMTJDQzdCOEUyNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYmW9C5q/5c4vqXMKhgH1lTkIChqLkQHnHfiuLmys1v9UegGOt
0WMEJSFcuFDNTRax9i7m80TYu40I4IDrG2lMo1jY2IzLrRTgMBwXFm2VS0V3ulDo
MvhPx+6YwA4gbc2MCEOjrHI2xwi9ihuDeylobBhS1iUntP5ISVjDWP/K1nVhNuMa
0ybK5326YJxdw9RepimiLpm+DDL3k0Ag64SDO+/16ApPBc1TagHwQC6Z1oDx0jse
BC/YCjlWviR0mok1Ua2rYam5LYOK2qB1YbcPDEiKRkAfiS2FhQUCQzJXWyEwumXx
PjpLN360xwf5HeRyKy+HUPvu8BIe0oj/r2QHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU4WurJDxycTjHUABHK94BLMe44kgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzRXdXJKRHh5Y1RqSFVBQkhLOTRCTE1lNDRrZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ9LBAwDQYJKoZIhvcNAQELBQADggEBAJscgVuvuy5BidcxQ58oFk2jYdw4
RUkkbxTF82EVWEJSUZqu0uuUAFTVMrJsgaXlOveiiTh2OSCC3R+/7ItgrNgVlA3d
NFpcOeJqntqtr8+zGIwlFfbRC8m24j69oz3Go1e+fvv1+ZKxmOXfjmJWEQ0CdzLB
A/DijfAIhpjsPVaSghO2GfBamOIV8zCC34EYoJ99twGBDFZAxHQXAhQoOCVsAHGh
Oj+Hl2X/r3jcPAdMxKHaCCOv0UMmGHCQ/2tcatK3khargwL5x1A6dBa+J1Z98kic
bZvS9vCfiTEUmY21alRJ9O3XpXC6MxExZMXXc1OPIwUnp+418Fdt/CYBy60=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org