Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/VcNYXmZKz_HlXbVbkpFUMHwRch8.roa
File:                     VcNYXmZKz_HlXbVbkpFUMHwRch8.roa (raw, json)
Hash identifier:          ecoGeVQNCJXh05tZx3JN+fAfgqgrZSjIOoopM1jgCCA=
Subject key identifier:   55:C3:58:5E:66:4A:CF:F1:E5:5D:B5:5B:92:91:54:30:7C:11:72:1F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01B0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VcNYXmZKz_HlXbVbkpFUMHwRch8.roa
Signing time:             Fri 07 Jul 2023 04:14:35 +0000
ROA not before:           Fri 07 Jul 2023 04:14:35 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        113.213.242.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:35 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=55C3585E664ACFF1E55DB55B929154307C11721F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:98:f0:96:c9:c5:66:1d:f9:d5:81:1b:bb:
                    c6:b7:54:a8:97:9b:8e:e3:f1:0e:4f:ae:bc:06:4e:
                    2b:3a:56:9b:7b:f9:45:12:29:0c:ad:13:c2:66:2e:
                    c7:8f:a8:67:d8:b2:13:e5:d8:f7:37:23:20:80:01:
                    a9:3d:cf:75:86:2b:0e:c8:3e:80:87:f2:29:5a:b4:
                    38:48:54:83:b4:1f:41:1d:14:9e:63:7b:61:21:2b:
                    89:f2:97:f4:8f:56:6d:a4:6b:71:e5:28:49:56:22:
                    17:31:a1:89:31:60:22:02:38:f8:1a:37:53:c3:a4:
                    18:df:f7:fe:e1:cc:d4:86:5f:e0:b4:1c:84:e6:ab:
                    3e:db:3f:08:af:86:a5:16:a4:8d:05:03:1c:e5:86:
                    55:fa:a9:35:f9:04:fd:4d:d5:1b:ff:89:2f:17:65:
                    92:6a:28:f6:49:04:8b:d7:9f:e5:c8:bb:b2:61:9d:
                    e5:fd:6f:f5:d5:ab:d4:17:2d:92:21:12:52:18:8f:
                    1c:4c:6d:4d:f0:8b:67:2c:3e:bc:1a:29:1d:76:11:
                    de:a3:9b:f3:e7:85:ff:7b:b8:bb:c8:44:1d:a3:ea:
                    33:77:a3:41:f3:91:1f:9e:00:44:cd:06:52:17:fa:
                    05:da:06:e8:0b:d9:48:f2:b9:b3:3c:92:79:ff:d1:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C3:58:5E:66:4A:CF:F1:E5:5D:B5:5B:92:91:54:30:7C:11:72:1F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VcNYXmZKz_HlXbVbkpFUMHwRch8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.213.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:d0:a7:d6:39:ee:5c:77:64:f5:f1:5a:1f:1e:c2:f0:37:8f:
         22:b7:7d:71:6a:11:9f:1e:1e:07:c0:37:11:fc:79:6a:37:17:
         cb:5d:1e:84:e2:18:1f:aa:9a:f7:67:9c:70:fa:5b:9e:58:6a:
         27:35:a9:f5:3b:aa:e6:a7:55:26:e3:97:75:72:45:bc:53:e2:
         d3:4b:76:0f:01:21:b9:6a:59:7a:e1:1e:c1:f8:7e:29:5c:52:
         62:0c:0f:7c:38:e3:90:a2:e6:73:64:a7:4c:fe:fc:20:57:f2:
         e2:5e:60:50:fb:14:49:59:33:bd:b2:d8:82:1b:1b:c5:48:29:
         93:1d:a1:c7:a1:e2:7d:8d:4f:a7:84:c0:38:32:f4:78:8c:9e:
         d2:c2:22:1c:6b:11:34:80:07:5e:4a:67:56:a6:73:77:3e:f5:
         98:8d:be:8c:ac:28:24:41:5b:ed:ea:93:ae:de:88:3d:60:db:
         95:99:d4:fb:41:7f:18:f2:17:e0:82:63:94:38:bd:97:18:e0:
         fa:9c:08:38:8b:59:0f:83:5c:f5:10:83:08:34:aa:8a:06:e5:
         0c:2b:0e:cb:cc:16:03:54:c0:e2:fb:a6:06:1d:4f:e4:08:91:
         69:1d:ab:9e:f9:fe:a7:ed:03:8c:dc:94:32:c8:1e:28:dc:0a:
         71:d1:50:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org