Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/T4ASNcoB2ych49jBEgcl4igeZ_E.roa
File:                     T4ASNcoB2ych49jBEgcl4igeZ_E.roa (raw, json)
Hash identifier:          t+Quk9EB6mYGrSc9E1ALxQZGkihGhIT+WYZdRPRCOBY=
Subject key identifier:   4F:80:12:35:CA:01:DB:27:21:E3:D8:C1:12:07:25:E2:28:1E:67:F1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       014D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/T4ASNcoB2ych49jBEgcl4igeZ_E.roa
Signing time:             Fri 07 Jul 2023 04:08:26 +0000
ROA not before:           Fri 07 Jul 2023 04:08:26 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        219.109.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:26 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=4F801235CA01DB2721E3D8C1120725E2281E67F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:f3:06:8b:e2:16:d5:cc:d0:88:87:88:5f:
                    b3:c5:e0:16:b9:5c:5c:5f:2c:2f:96:bc:93:32:d7:
                    02:f4:fd:cd:98:68:f2:bc:d7:e3:40:88:ee:b1:9d:
                    b0:2a:b2:f5:57:3e:20:dc:53:8e:e9:65:91:5d:cb:
                    9e:87:de:ec:e1:92:71:13:cf:37:9a:90:06:15:00:
                    ab:89:a2:6c:ab:cd:a1:2a:b5:b9:1f:0a:8d:3a:be:
                    8f:69:f8:56:aa:09:87:cb:50:fd:45:14:9e:4e:26:
                    70:1f:81:d8:8a:53:5d:85:11:27:37:71:9e:38:da:
                    7f:c5:2f:41:80:43:75:a9:45:4e:a5:17:03:fa:4a:
                    4f:4a:dc:de:7e:95:ff:82:07:81:21:a5:cb:8a:e1:
                    d9:fa:48:f9:8b:66:c1:d9:ff:7d:7c:49:25:c1:10:
                    bb:aa:7b:cd:16:2e:06:a5:ce:95:71:4a:8f:26:9e:
                    5e:69:a7:f6:36:91:d4:cc:d7:e4:fe:fe:c9:ce:fb:
                    33:4d:f7:62:9e:ae:21:cc:e7:7f:3f:37:81:4a:40:
                    03:6b:97:9e:f7:00:34:ed:d6:ff:da:71:7b:3e:55:
                    bc:25:05:02:9a:ad:32:a1:c2:03:4c:f9:cd:0a:5c:
                    9b:c3:36:51:9a:32:e0:50:99:46:9b:d5:d4:e3:88:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:80:12:35:CA:01:DB:27:21:E3:D8:C1:12:07:25:E2:28:1E:67:F1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/T4ASNcoB2ych49jBEgcl4igeZ_E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:a4:ca:c6:0a:d5:51:ac:8e:c6:05:c5:8f:cc:16:1a:83:e9:
         6f:c9:08:d6:fc:9a:15:fe:af:23:00:bc:66:f8:35:74:ae:ca:
         f2:e2:7b:79:a3:39:0c:d6:59:92:b1:56:43:1e:8b:e0:e3:49:
         3f:d9:38:ce:d3:aa:bf:73:1c:86:3e:d7:ab:1e:18:62:19:f8:
         43:46:2b:b7:ef:f1:fe:96:f2:f2:fe:6f:f0:03:fa:54:cc:c2:
         b9:9f:58:e7:13:42:89:4c:c3:be:fe:00:31:ed:ff:34:82:16:
         7e:49:da:dd:5a:ae:c9:7d:e5:10:37:24:22:21:4e:bb:b5:b2:
         09:ab:23:38:af:86:06:63:79:82:8e:80:06:71:ed:a7:30:04:
         65:7e:ca:e5:23:35:d1:6f:eb:cf:34:7c:23:2c:2a:33:2a:67:
         6a:4f:3a:6e:f5:d4:65:a3:5a:01:cf:36:7b:24:c0:88:f6:48:
         1d:0e:29:d4:9c:e0:a6:8d:79:82:96:08:c1:eb:34:61:5f:41:
         8f:16:8d:dc:0c:bc:2f:25:fb:23:1f:bc:6d:16:d3:d9:fd:62:
         25:a1:e7:13:19:7e:d3:89:68:5d:b9:29:7d:0f:db:d5:81:8c:
         33:ff:21:52:df:86:9e:df:d4:13:3a:54:19:a3:d3:ed:83:28:
         44:95:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org