Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Yn9M_PzGujA_WDbHzY4LFMoRW_I.roa
File:                     Yn9M_PzGujA_WDbHzY4LFMoRW_I.roa (raw, json)
Hash identifier:          HIXBBfy1rycfaiAUmiJmkoL9xt+huBJXtCT2ZUpdkBA=
Subject key identifier:   62:7F:4C:FC:FC:C6:BA:30:3F:58:36:C7:CD:8E:0B:14:CA:11:5B:F2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01A0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Yn9M_PzGujA_WDbHzY4LFMoRW_I.roa
Signing time:             Fri 07 Jul 2023 04:14:29 +0000
ROA not before:           Fri 07 Jul 2023 04:14:29 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        220.215.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:29 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=627F4CFCFCC6BA303F5836C7CD8E0B14CA115BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:85:d1:19:9a:d7:46:67:3f:4f:79:78:71:
                    a4:07:a4:9f:66:90:14:97:b0:b1:81:23:ce:c1:5c:
                    5e:9d:bc:03:7b:33:9e:ad:45:53:d2:64:17:5e:b9:
                    85:34:ba:60:a0:55:a1:9e:35:c1:85:ed:2d:81:57:
                    d5:af:bf:f5:46:4c:b4:b1:bd:de:ef:2e:5c:db:f5:
                    e9:de:bb:15:7e:3f:19:68:35:65:dd:9d:c6:39:5f:
                    97:94:2d:04:20:23:42:85:da:a1:aa:64:ce:43:1e:
                    3a:5b:fe:42:d1:f2:ee:19:28:38:4b:ed:f6:db:31:
                    2e:09:20:8f:90:b0:8d:70:32:1a:49:1c:34:30:7c:
                    ee:05:4a:35:87:25:04:0b:c4:fe:82:27:bc:95:ba:
                    a5:59:e9:5e:b5:f8:ae:49:81:27:f1:57:a8:b5:0b:
                    32:1b:72:fc:e1:71:83:c9:68:fa:0d:9b:df:62:8d:
                    b9:74:5d:f7:d9:e6:da:d2:d4:64:26:ec:9a:58:a9:
                    05:19:a4:f4:29:14:16:71:28:ed:b5:fa:6c:8c:55:
                    5f:6e:cd:99:14:82:20:88:e0:83:e5:99:88:4d:de:
                    ba:25:28:24:10:f6:a8:5c:78:5a:d0:d2:42:59:6a:
                    09:dd:89:bd:bc:ff:28:47:80:c2:52:1c:5b:40:cd:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7F:4C:FC:FC:C6:BA:30:3F:58:36:C7:CD:8E:0B:14:CA:11:5B:F2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Yn9M_PzGujA_WDbHzY4LFMoRW_I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.215.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:df:e5:81:57:c9:b8:59:b2:d5:d9:dd:e5:18:69:31:62:20:
         56:7e:93:cf:3e:b0:30:6e:ad:5b:f5:09:79:1b:9b:30:55:d4:
         d0:95:8a:93:2d:87:f2:7f:15:63:e1:3b:43:14:6e:61:76:1a:
         2f:74:51:05:a7:7a:8b:50:fa:2d:2c:08:e6:9c:4a:a8:b8:cc:
         15:e2:d9:3a:66:01:69:0c:6d:09:95:e1:ee:c6:60:d4:da:5f:
         5e:85:64:9d:30:1f:06:7d:b6:c9:0c:e2:da:e2:45:ee:ac:8e:
         d5:c8:4f:36:33:0f:6a:46:4d:51:76:c3:70:26:bd:6f:0b:6c:
         ce:8e:df:a7:09:c9:03:f1:cb:23:1e:bc:79:6e:51:ed:c5:b2:
         b4:16:68:25:05:ff:fc:53:34:c3:0e:cb:89:27:69:01:85:6e:
         20:8e:6d:a4:b8:ad:3a:d4:8a:c4:63:4a:f7:d5:0e:b5:dd:84:
         98:5c:4f:bc:fb:43:4c:ca:8d:21:a4:63:75:7b:1a:fc:c8:9e:
         59:dd:b8:ce:d9:84:7f:91:3c:88:99:86:1e:b5:a8:30:7b:90:
         cf:f0:b1:53:48:58:54:bc:4b:c9:07:bb:bd:2b:0f:cc:14:40:
         9c:c1:07:ec:b7:b0:b6:6c:9e:cc:e4:6c:fe:2c:25:ad:76:9b:
         1a:15:92:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org