Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ptp37TpcZeVSzwM6IbNuD5ArMks.roa
File:                     Ptp37TpcZeVSzwM6IbNuD5ArMks.roa (raw, json)
Hash identifier:          yL8xx65m7n4IGFwlgVkX7Qq46gGC03GADFp5Ko8DLDM=
Subject key identifier:   3E:DA:77:ED:3A:5C:65:E5:52:CF:03:3A:21:B3:6E:0F:90:2B:32:4B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0135
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ptp37TpcZeVSzwM6IbNuD5ArMks.roa
Signing time:             Fri 07 Jul 2023 04:08:16 +0000
ROA not before:           Fri 07 Jul 2023 04:08:16 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        36.52.192.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:16 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=3EDA77ED3A5C65E552CF033A21B36E0F902B324B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6a:2e:40:af:e5:b0:e3:47:18:6b:b2:72:95:
                    e2:ad:67:1b:a5:a9:c8:4f:1b:d1:92:08:31:72:2b:
                    28:e2:f6:e8:14:4b:af:22:3d:76:66:6e:82:96:91:
                    7c:48:7e:a6:9e:56:5d:52:59:be:7b:1c:2c:47:9c:
                    2e:a3:1f:20:3b:4b:69:63:b3:e5:16:5d:c7:bd:08:
                    df:01:69:97:d1:93:c8:7a:88:ba:40:c5:36:58:a4:
                    ea:f5:b4:ed:d3:7b:03:fa:e5:ba:e2:4f:af:c8:42:
                    4e:90:4b:53:8f:e1:ba:a3:21:05:1f:73:40:3d:04:
                    01:e7:a5:8a:17:c9:89:82:f3:94:8c:b3:3e:1c:be:
                    0c:eb:20:42:89:6a:33:49:a8:04:b5:f7:f8:59:96:
                    52:d4:ac:b9:f0:0e:31:f2:63:b4:d1:77:8e:a6:0f:
                    f5:63:c8:b5:8d:ee:dd:ca:29:b6:62:e6:d7:dc:f3:
                    95:39:c4:5b:08:0e:d5:2f:30:30:0d:71:e6:8a:9d:
                    06:16:fc:d1:b8:a3:d4:c4:7f:79:f2:5c:df:a4:a3:
                    13:e2:d3:15:25:d2:e9:0c:6d:79:ae:b0:23:32:7b:
                    39:6d:49:64:d6:5b:1a:2a:5c:3c:b6:25:87:a9:85:
                    43:f3:c9:44:ec:cb:6b:ad:41:b1:a0:e7:df:01:8d:
                    82:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DA:77:ED:3A:5C:65:E5:52:CF:03:3A:21:B3:6E:0F:90:2B:32:4B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ptp37TpcZeVSzwM6IbNuD5ArMks.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:37:ca:ad:ff:50:b9:fc:61:2b:9a:00:25:a7:1f:27:03:8d:
         9c:7f:f0:23:a5:21:73:d6:44:9c:aa:fd:bc:92:c1:a5:dd:1b:
         83:dd:3c:47:96:7d:e1:cc:d0:88:11:39:9f:f9:88:c0:3c:67:
         d7:2b:ce:14:f5:2f:09:af:e4:80:92:88:8d:f8:53:3a:43:5f:
         09:f1:1d:c2:34:a8:fb:98:cd:f1:50:fe:2d:73:60:6b:c7:5d:
         d9:0b:62:d5:e9:53:a9:17:af:51:a3:f3:41:17:11:96:fb:72:
         31:e1:22:53:07:5d:51:ac:cf:84:ac:7c:55:9c:73:70:be:fd:
         f9:39:5e:36:31:d2:70:62:d0:a0:56:de:a3:fb:40:68:8e:21:
         76:d3:25:db:a9:7a:e2:4c:f9:0c:37:41:05:99:e3:8e:3f:3d:
         80:07:07:d7:6b:60:e4:fe:65:af:ef:c5:a3:94:9b:64:dd:60:
         e9:e5:33:37:50:4d:6b:77:32:ba:ff:31:96:5d:9f:6f:2a:ce:
         b4:7b:b2:3a:7b:71:3a:2d:75:b2:e3:53:2b:63:e7:ed:cf:29:
         0c:c1:e4:8b:0d:71:2a:75:9d:95:63:26:2e:91:ff:65:15:0b:
         95:2b:8b:8c:e6:db:e7:db:ec:ae:92:bb:8e:3f:84:de:00:de:
         ae:59:93:16
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICATUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDA4MTZaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDNFREE3N0VEM0E1QzY1
RTU1MkNGMDMzQTIxQjM2RTBGOTAyQjMyNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcai5Ar+Ww40cYa7JyleKtZxulqchPG9GSCDFyKyji9ugUS68i
PXZmboKWkXxIfqaeVl1SWb57HCxHnC6jHyA7S2ljs+UWXce9CN8BaZfRk8h6iLpA
xTZYpOr1tO3TewP65briT6/IQk6QS1OP4bqjIQUfc0A9BAHnpYoXyYmC85SMsz4c
vgzrIEKJajNJqAS19/hZllLUrLnwDjHyY7TRd46mD/VjyLWN7t3KKbZi5tfc85U5
xFsIDtUvMDANceaKnQYW/NG4o9TEf3nyXN+koxPi0xUl0ukMbXmusCMyezltSWTW
WxoqXDy2JYephUPzyUTsy2utQbGg598BjYLlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUPtp37TpcZeVSzwM6IbNuD5ArMkswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1B0cDM3VHBjWmVWU3p3TTZJYk51RDVBck1rcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQkNMAwDQYJKoZIhvcNAQELBQADggEBACg3yq3/ULn8YSuaACWnHycDjZx/
8COlIXPWRJyq/bySwaXdG4PdPEeWfeHM0IgROZ/5iMA8Z9crzhT1Lwmv5ICSiI34
UzpDXwnxHcI0qPuYzfFQ/i1zYGvHXdkLYtXpU6kXr1Gj80EXEZb7cjHhIlMHXVGs
z4SsfFWcc3C+/fk5XjYx0nBi0KBW3qP7QGiOIXbTJdupeuJM+Qw3QQWZ444/PYAH
B9drYOT+Za/vxaOUm2TdYOnlMzdQTWt3Mrr/MZZdn28qzrR7sjp7cTotdbLjUytj
5+3PKQzB5IsNcSp1nZVjJi6R/2UVC5Uri4zm2+fb7K6Su44/hN4A3q5ZkxY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org