Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Mf_uMfgujHthHdMuBo6acCZZxAg.roa
File:                     Mf_uMfgujHthHdMuBo6acCZZxAg.roa (raw, json)
Hash identifier:          PZRIqezt/ewkssyyeMFMFCv17w94j/2KI5kJuSZQ6Qg=
Subject key identifier:   31:FF:EE:31:F8:2E:8C:7B:61:1D:D3:2E:06:8E:9A:70:26:59:C4:08
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0194
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Mf_uMfgujHthHdMuBo6acCZZxAg.roa
Signing time:             Fri 07 Jul 2023 04:12:39 +0000
ROA not before:           Fri 07 Jul 2023 04:12:39 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        111.234.32.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:39 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=31FFEE31F82E8C7B611DD32E068E9A702659C408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:57:f5:2e:32:49:d0:b1:f2:1d:dd:7e:24:14:
                    84:80:f4:b1:57:7d:b5:33:39:bb:fc:cf:bd:ce:ff:
                    9d:93:45:19:35:bf:e8:23:63:f5:9a:d6:ff:52:dd:
                    07:7c:86:76:2e:34:4c:24:c2:43:cb:a4:63:b0:d5:
                    30:f9:ce:7e:17:eb:46:6e:b1:77:1b:c4:82:31:50:
                    d0:76:ab:d2:0e:13:7c:75:19:6d:56:b9:1d:f5:61:
                    04:71:f9:68:77:dc:25:4b:e1:ea:ef:f4:17:63:06:
                    ea:8d:f2:6e:c0:f0:17:9a:81:34:d0:b8:00:d9:8f:
                    ba:d1:39:36:fa:81:b6:a1:b9:94:34:63:7d:c1:0c:
                    8d:b0:04:d0:ee:e4:d2:b1:ff:4d:a9:7a:cc:aa:7e:
                    28:db:aa:75:80:a4:ff:57:3a:d8:67:ee:b0:fa:61:
                    b3:61:a0:17:5e:80:17:fc:8a:e5:8c:58:ee:ec:eb:
                    b2:8b:a0:f5:57:6c:74:d0:d8:5d:7c:fe:5f:64:fe:
                    20:62:e4:bb:a7:2d:1c:48:5f:d7:74:75:b7:d6:4b:
                    51:35:56:b9:66:bf:be:95:19:13:69:1f:0f:f0:93:
                    56:e7:37:43:a6:61:d2:96:36:33:60:4a:ad:88:e4:
                    01:4e:3f:97:9b:0a:31:14:8f:16:b1:9c:9f:81:78:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FF:EE:31:F8:2E:8C:7B:61:1D:D3:2E:06:8E:9A:70:26:59:C4:08
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Mf_uMfgujHthHdMuBo6acCZZxAg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:ed:b9:6d:7f:0a:e4:0f:47:a0:22:0b:56:fb:27:30:06:
         3f:90:57:01:b6:ba:e7:4d:05:31:87:ae:52:94:bc:0b:c6:2e:
         b2:e6:68:29:d5:44:9a:53:d2:c6:54:d5:e8:cb:35:e7:18:d6:
         14:79:10:ae:5f:a8:61:e7:99:47:d5:e0:0e:32:e7:14:4c:bc:
         dc:b6:27:e2:ac:7b:9b:2f:76:57:f4:cc:7e:96:fc:44:87:b3:
         ff:6c:8e:d7:95:56:c1:50:25:88:cd:4e:64:0f:a4:fd:18:34:
         50:3a:0c:99:85:c5:59:1e:40:32:c2:6d:a1:7b:87:78:5b:8a:
         5e:0d:02:d9:b4:f1:a4:d2:22:53:cf:dc:e9:8d:5d:72:c4:38:
         b6:bb:f4:1f:9d:c0:78:fe:1f:c4:20:7e:0f:4d:4e:fc:03:59:
         79:7f:10:96:f4:61:62:ee:84:c8:a1:93:a0:94:eb:f5:ff:69:
         68:0a:50:f1:cd:8a:05:4f:e9:eb:b4:c3:50:dd:82:8d:19:ff:
         b6:fc:e1:f4:d3:bf:8a:57:ee:4e:d3:e1:a2:49:df:b6:6c:5e:
         a1:0f:b1:83:62:60:13:9f:c0:66:d1:76:8f:48:98:12:9c:b8:
         a4:a9:db:6a:22:d0:7b:a6:af:61:e5:08:66:60:3f:76:62:fa:
         6d:e9:31:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org