Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/glsqzZUEx2tTtgCq9EYayaYV4zI.roa
File:                     glsqzZUEx2tTtgCq9EYayaYV4zI.roa (raw, json)
Hash identifier:          Dj+vDu8bWmHowrzBtDtGmyXwFI6lrbN2B2v4gFf5aQE=
Subject key identifier:   82:5B:2A:CD:95:04:C7:6B:53:B6:00:AA:F4:46:1A:C9:A6:15:E3:32
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       019F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/glsqzZUEx2tTtgCq9EYayaYV4zI.roa
Signing time:             Fri 07 Jul 2023 04:14:29 +0000
ROA not before:           Fri 07 Jul 2023 04:14:29 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        119.150.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:29 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=825B2ACD9504C76B53B600AAF4461AC9A615E332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:0e:ab:dd:55:3d:48:29:2d:62:db:55:e6:
                    03:98:75:ad:1e:e6:c1:e6:b6:a2:bc:98:38:b4:48:
                    20:dd:b1:eb:ec:ae:87:56:67:84:34:bb:b3:5f:4e:
                    6d:7e:50:b5:c1:5c:7b:5c:56:b1:5d:0f:8c:10:87:
                    25:a0:25:78:1c:1c:5b:10:54:6e:11:98:7b:c9:d9:
                    8c:41:14:ce:fa:03:1b:e9:31:54:6b:2a:54:68:2e:
                    5b:ad:27:93:d7:9a:66:c9:43:27:99:0e:52:af:71:
                    2a:f8:a3:3e:e4:bd:4c:60:cd:bb:e4:a0:94:43:93:
                    2d:ac:2a:58:38:37:a8:89:a9:92:1e:37:19:b8:3e:
                    a1:e9:0e:5a:72:60:5d:9f:a0:9d:74:86:9c:3a:76:
                    c9:22:dd:91:a6:8d:ef:24:aa:60:6f:aa:50:5e:f4:
                    88:67:ba:6b:4d:dc:25:5d:1f:2c:26:9b:1d:70:01:
                    5a:8c:b6:c9:36:75:4e:cf:a7:37:4f:58:81:1d:bb:
                    06:6e:be:98:b2:79:cb:c4:70:8f:a1:af:ec:03:cc:
                    c4:66:4a:49:7d:25:17:4f:a6:43:a3:9f:5a:d9:8a:
                    83:a5:57:f0:32:92:28:d8:cf:d3:f0:23:9f:b8:b7:
                    da:f5:87:02:8c:55:f9:02:57:1c:54:5b:b0:1f:15:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5B:2A:CD:95:04:C7:6B:53:B6:00:AA:F4:46:1A:C9:A6:15:E3:32
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/glsqzZUEx2tTtgCq9EYayaYV4zI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:a6:1a:e9:d1:79:ce:d2:b5:25:7e:e5:67:03:fb:16:f7:8d:
         ca:af:b0:7a:76:18:ea:84:eb:1a:68:e3:9e:09:d9:92:ff:f0:
         89:bf:1b:a8:75:82:9b:5f:df:7d:8d:70:7a:0c:75:75:60:91:
         ce:6d:3a:3c:9f:15:81:dc:46:82:2a:2c:49:4c:de:a9:dc:73:
         0e:7d:e3:9f:ff:62:17:95:7c:8e:d7:b1:15:0c:db:b7:e5:b6:
         8e:40:b2:2f:9c:5a:2d:5e:5b:b8:0e:64:96:3b:d1:24:ac:0c:
         a3:00:4d:f0:0c:fc:ad:a8:5a:02:cb:84:a3:e2:a2:50:a1:02:
         25:44:07:83:8f:01:37:1f:b3:8a:76:91:ab:22:75:13:48:42:
         c0:04:5a:ad:fa:f3:15:fe:1d:6b:23:c5:a4:ff:53:ef:04:df:
         76:34:c4:cc:56:1c:cc:42:59:12:fe:62:f7:80:49:54:43:76:
         11:ef:85:f9:39:82:bc:73:47:87:66:07:f3:dd:28:37:7e:bb:
         06:b5:14:3c:6f:c9:90:f7:5b:4c:21:95:96:92:e4:f9:3c:da:
         6f:ab:16:80:8a:6a:e3:bc:7c:39:65:5f:47:c0:75:38:67:25:
         e5:b0:5e:9f:af:2e:c5:5e:3f:75:e1:d7:63:5e:3c:02:0a:e8:
         b6:37:48:ef
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDE0MjlaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDgyNUIyQUNEOTUwNEM3
NkI1M0I2MDBBQUY0NDYxQUM5QTYxNUUzMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDShQ6r3VU9SCktYttV5gOYda0e5sHmtqK8mDi0SCDdsevsrodW
Z4Q0u7NfTm1+ULXBXHtcVrFdD4wQhyWgJXgcHFsQVG4RmHvJ2YxBFM76AxvpMVRr
KlRoLlutJ5PXmmbJQyeZDlKvcSr4oz7kvUxgzbvkoJRDky2sKlg4N6iJqZIeNxm4
PqHpDlpyYF2foJ10hpw6dski3ZGmje8kqmBvqlBe9IhnumtN3CVdHywmmx1wAVqM
tsk2dU7PpzdPWIEduwZuvpiyecvEcI+hr+wDzMRmSkl9JRdPpkOjn1rZioOlV/Ay
kijYz9PwI5+4t9r1hwKMVfkCVxxUW7AfFTn/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUglsqzZUEx2tTtgCq9EYayaYV4zIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2dsc3F6WlVFeDJ0VHRnQ3E5RVlheWFZVjR6SS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAF3lswwDQYJKoZIhvcNAQELBQADggEBAAemGunRec7StSV+5WcD+xb3jcqv
sHp2GOqE6xpo454J2ZL/8Im/G6h1gptf332NcHoMdXVgkc5tOjyfFYHcRoIqLElM
3qnccw5945//YheVfI7XsRUM27flto5Asi+cWi1eW7gOZJY70SSsDKMATfAM/K2o
WgLLhKPiolChAiVEB4OPATcfs4p2kasidRNIQsAEWq368xX+HWsjxaT/U+8E33Y0
xMxWHMxCWRL+YveASVRDdhHvhfk5grxzR4dmB/PdKDd+uwa1FDxvyZD3W0whlZaS
5Pk82m+rFoCKauO8fDllX0fAdThnJeWwXp+vLsVeP3Xh12NePAIK6LY3SO8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org