Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CgIeyd7C180zBnNhD8Px3WgXZK4.roa
File:                     CgIeyd7C180zBnNhD8Px3WgXZK4.roa (raw, json)
Hash identifier:          uBVYb7cGu3Gnviy9cBRm+8hkWTed1jLtH7d1snXJPno=
Subject key identifier:   0A:02:1E:C9:DE:C2:D7:CD:33:06:73:61:0F:C3:F1:DD:68:17:64:AE
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01EA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CgIeyd7C180zBnNhD8Px3WgXZK4.roa
Signing time:             Tue 01 Aug 2023 01:31:32 +0000
ROA not before:           Tue 01 Aug 2023 01:31:32 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     10013
IP address blocks:        180.131.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Aug  1 01:31:32 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=0A021EC9DEC2D7CD330673610FC3F1DD681764AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:5f:c6:00:02:fc:3c:9a:7f:60:8b:e6:ce:
                    c0:58:68:c9:6c:ac:ee:ad:9b:a4:bf:08:28:1a:a3:
                    e6:6f:79:a3:26:03:6f:41:2a:00:f2:a6:fa:51:c5:
                    f7:ab:41:76:36:40:94:03:77:a1:16:17:1e:10:fd:
                    7b:18:39:bc:5f:00:15:9e:9d:41:89:75:10:f5:64:
                    ec:90:fa:d0:a3:e9:74:71:df:27:64:fe:1f:d6:00:
                    6c:c0:34:75:43:a3:6e:56:5c:1b:a0:ee:7c:55:09:
                    13:1d:a8:69:3c:21:17:9d:f3:52:91:67:26:c1:40:
                    fe:b5:93:17:96:8f:fb:73:9d:8e:ea:39:b6:95:32:
                    a6:c9:ce:a3:04:01:0f:da:76:7b:bf:5c:5d:ca:60:
                    95:c4:26:0e:88:ee:a7:da:07:c5:d9:be:d6:ae:37:
                    a0:8d:fe:6e:53:ad:82:b1:56:7a:69:9c:1c:60:5f:
                    01:e7:8c:d2:63:33:89:e0:35:f4:ed:87:bb:be:f0:
                    3e:aa:5d:d9:76:05:2d:d3:d2:fd:e0:67:79:1e:be:
                    05:d5:f0:2d:1f:ef:ce:36:40:8e:47:6c:50:00:82:
                    5a:cd:c0:91:02:da:22:7d:7d:c6:e4:c9:45:94:b3:
                    89:16:01:ee:32:a7:18:a2:3c:85:f3:61:67:3a:ec:
                    b3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:02:1E:C9:DE:C2:D7:CD:33:06:73:61:0F:C3:F1:DD:68:17:64:AE
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CgIeyd7C180zBnNhD8Px3WgXZK4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:b7:bb:de:3e:4a:40:50:27:39:d6:fe:0e:ed:a0:f5:15:
         d1:9b:a0:1b:42:74:b8:09:20:c7:03:f6:d4:37:51:c0:f5:db:
         53:9d:f2:c7:c4:9f:40:d5:fa:36:5a:0c:cd:e8:2b:91:3f:15:
         d7:0b:8f:44:d9:34:40:f6:3e:cc:ef:25:47:97:36:9a:fa:c7:
         f1:cb:03:d9:63:c3:d6:c9:dc:d9:06:06:ef:8f:1b:15:4b:77:
         90:fe:42:e9:55:9d:a7:97:8b:2d:2f:a4:b5:82:0e:5c:30:5f:
         26:9f:e0:4a:5e:0a:f0:8a:0f:c8:81:5f:dc:7b:c0:fa:39:67:
         00:00:05:9a:de:9d:86:97:55:82:02:79:a6:84:46:80:a0:7f:
         6e:fb:2c:25:cb:12:9a:bc:18:3b:48:d0:30:ef:59:38:11:c5:
         94:c5:bb:9d:72:80:e7:ba:35:cd:5b:ce:ed:6a:a9:96:88:af:
         de:33:18:4d:10:8f:cf:7a:21:21:5d:11:4d:3a:29:b2:2c:39:
         43:c8:91:c6:b0:40:8a:37:2f:1b:a6:cf:d8:89:4f:e6:32:12:
         9f:34:c7:e3:32:3e:66:fa:46:2c:94:d3:d8:6b:2a:b8:e6:78:
         b3:ff:ad:9f:3c:f6:d4:03:2f:dd:4a:32:4c:22:5d:ef:1e:73:
         70:b1:5f:d2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAeowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA4MDEw
MTMxMzJaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDBBMDIxRUM5REVDMkQ3
Q0QzMzA2NzM2MTBGQzNGMURENjgxNzY0QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpyV/GAAL8PJp/YIvmzsBYaMlsrO6tm6S/CCgao+ZveaMmA29B
KgDypvpRxferQXY2QJQDd6EWFx4Q/XsYObxfABWenUGJdRD1ZOyQ+tCj6XRx3ydk
/h/WAGzANHVDo25WXBug7nxVCRMdqGk8IRed81KRZybBQP61kxeWj/tznY7qObaV
MqbJzqMEAQ/adnu/XF3KYJXEJg6I7qfaB8XZvtauN6CN/m5TrYKxVnppnBxgXwHn
jNJjM4ngNfTth7u+8D6qXdl2BS3T0v3gZ3kevgXV8C0f7842QI5HbFAAglrNwJEC
2iJ9fcbkyUWUs4kWAe4ypxiiPIXzYWc67LN7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUCgIeyd7C180zBnNhD8Px3WgXZK4wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0NnSWV5ZDdDMTgwekJuTmhEOFB4M1dnWFpLNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC0g3AwDQYJKoZIhvcNAQELBQADggEBAITjt7vePkpAUCc51v4O7aD1FdGb
oBtCdLgJIMcD9tQ3UcD121Od8sfEn0DV+jZaDM3oK5E/FdcLj0TZNED2PszvJUeX
Npr6x/HLA9ljw9bJ3NkGBu+PGxVLd5D+QulVnaeXiy0vpLWCDlwwXyaf4EpeCvCK
D8iBX9x7wPo5ZwAABZrenYaXVYICeaaERoCgf277LCXLEpq8GDtI0DDvWTgRxZTF
u51ygOe6Nc1bzu1qqZaIr94zGE0Qj896ISFdEU06KbIsOUPIkcawQIo3Lxumz9iJ
T+YyEp80x+MyPmb6RiyU09hrKrjmeLP/rZ889tQDL91KMkwiXe8ec3CxX9I=
-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:26 2024 by rpki-client on console-fra.rpki-client.org