Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/fvm-pPDQwm5zIOkV4qiR-YQWF20.roa
File:                     fvm-pPDQwm5zIOkV4qiR-YQWF20.roa (raw, json)
Hash identifier:          2YQ9QEd4RoPENjDLvm0fwCoZGHk29qzlEpK+nATQwsI=
Subject key identifier:   7E:F9:BE:A4:F0:D0:C2:6E:73:20:E9:15:E2:A8:91:F9:84:16:17:6D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0179
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fvm-pPDQwm5zIOkV4qiR-YQWF20.roa
Signing time:             Fri 07 Jul 2023 04:10:42 +0000
ROA not before:           Fri 07 Jul 2023 04:10:42 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.120.212.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:42 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=7EF9BEA4F0D0C26E7320E915E2A891F98416176D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:47:d4:68:b2:16:9b:b2:2e:35:bc:70:52:
                    40:f0:c3:85:46:1f:43:8e:f6:bc:ce:15:ff:ad:3b:
                    53:d9:29:0f:c3:5e:d4:58:ce:ac:51:b7:7a:e6:1e:
                    07:65:4a:50:5a:a7:97:24:64:64:ab:a1:4a:f9:35:
                    58:05:f4:75:42:42:3a:50:9d:c1:66:33:7e:62:ba:
                    8f:ce:a3:c8:4d:e0:b4:30:59:8b:7a:c0:de:0d:1f:
                    c9:81:04:cb:cd:55:dd:b7:16:98:c8:f9:a0:d6:45:
                    6c:3d:92:bf:8a:e3:d1:4e:35:70:3d:1d:6b:45:0c:
                    3d:75:5d:d5:88:2e:b7:a1:5b:6d:57:ae:c8:46:5c:
                    58:c8:07:e9:17:0a:c7:c3:0e:33:4a:25:00:f9:2d:
                    dd:52:09:fa:6c:52:5b:c6:c4:85:b2:6b:a6:3a:7c:
                    1c:80:3c:ba:e4:1d:f5:9d:dc:4e:4f:e3:93:f3:21:
                    23:d5:7e:e2:c1:ff:55:fc:7d:e6:b1:4b:f2:5f:8f:
                    0b:d4:54:34:12:b0:53:60:5f:bc:70:0a:5e:b5:d9:
                    a3:8e:4e:44:d2:2d:47:e5:c5:05:04:82:f7:53:6e:
                    0b:97:7d:9d:fc:5b:0a:8a:91:7e:69:ef:5e:3f:92:
                    fc:01:d5:c7:f7:7c:66:09:f5:01:50:a0:d2:6f:1d:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F9:BE:A4:F0:D0:C2:6E:73:20:E9:15:E2:A8:91:F9:84:16:17:6D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fvm-pPDQwm5zIOkV4qiR-YQWF20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:61:65:eb:e0:5e:3d:b3:d2:b8:17:59:89:b3:94:e2:ae:02:
         43:91:3c:7d:e4:6e:4f:0f:49:bb:fb:7f:a2:3b:06:47:53:b7:
         dc:e9:4e:6d:15:e0:ed:12:3e:de:eb:00:fc:c2:a8:a7:e1:6d:
         bd:7d:51:a6:f8:e5:ed:e9:53:81:7a:80:b2:18:a7:19:f3:81:
         80:19:4b:1d:14:3a:58:dd:21:b2:19:c0:f5:58:64:ab:2c:8a:
         f5:53:de:bf:89:12:93:79:8f:5b:2d:95:14:68:54:34:20:08:
         1b:9b:52:f6:6a:58:7d:04:8b:97:27:1e:12:e1:a8:c4:d7:41:
         12:e5:80:37:b9:a9:f1:84:db:ac:89:a4:8c:fe:a4:d9:49:a8:
         25:1c:99:58:fb:9c:9f:24:8f:30:f7:00:33:4e:99:d5:5d:f8:
         01:69:63:f5:48:be:9e:39:83:cb:8c:67:32:05:a9:b3:43:2e:
         10:48:88:af:a9:c0:eb:7b:4b:67:ab:bd:8d:70:4f:22:fa:a1:
         86:80:17:f8:8e:b6:03:ba:cb:d5:95:80:be:47:3d:c5:27:a8:
         af:b8:74:50:56:92:b9:34:73:35:ae:f1:86:26:c3:79:26:b0:
         8f:4d:1c:bf:a2:20:56:f3:05:2b:b9:e7:ce:9a:3e:57:69:d8:
         cc:d3:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org