Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/i1lL-__FmDWZHs0gMR42mOWM--M.roa
File:                     i1lL-__FmDWZHs0gMR42mOWM--M.roa (raw, json)
Hash identifier:          WLUCsE9IypC6EIdm3AssQyxG8pDV+yty0pfQPiIjCrU=
Subject key identifier:   8B:59:4B:FB:FF:C5:98:35:99:1E:CD:20:31:1E:36:98:E5:8C:FB:E3
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01C7
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/i1lL-__FmDWZHs0gMR42mOWM--M.roa
Signing time:             Fri 07 Jul 2023 04:16:37 +0000
ROA not before:           Fri 07 Jul 2023 04:16:37 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        182.163.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:16:37 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=8B594BFBFFC59835991ECD20311E3698E58CFBE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:d1:bd:a9:11:9e:d7:12:fc:1b:94:aa:86:
                    52:1e:97:bf:d8:7c:a4:8a:26:29:5b:98:81:41:1a:
                    84:05:fb:b1:12:d7:b2:e3:02:63:22:93:76:3e:3f:
                    71:a3:25:ad:af:9c:85:dc:5d:af:2e:b9:8b:62:69:
                    10:db:4e:3e:ee:ba:53:7d:60:d7:ee:d4:1f:b4:04:
                    b7:ca:8a:7d:3b:92:f2:ef:66:bd:42:0e:22:98:ad:
                    a5:e5:1d:64:30:75:df:a7:e5:3a:e5:7e:19:51:6a:
                    3c:a0:bc:5f:19:3b:01:63:f3:2d:f9:47:d9:7a:81:
                    06:be:fc:b6:47:d4:9f:b9:80:af:40:78:00:c8:d6:
                    fa:97:dc:0c:12:18:7c:96:48:f2:22:31:6b:d9:44:
                    f2:d0:17:71:5a:1e:69:1e:c4:a2:2a:c2:89:24:12:
                    76:3a:06:f2:2d:f6:75:16:c0:4f:a5:ed:f2:53:54:
                    09:db:1c:f7:2f:22:2c:47:7a:a5:0d:f0:97:e8:47:
                    08:ad:c1:a5:fd:c2:08:c6:5f:9d:b9:0f:91:41:4f:
                    4c:ca:da:b2:94:05:5a:76:ef:c3:e8:60:a6:93:b3:
                    58:48:3e:97:bb:34:20:cf:7c:fc:8b:e0:0a:fb:13:
                    ff:f1:4a:f8:3e:64:96:f2:a9:98:67:2a:f7:cf:01:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:59:4B:FB:FF:C5:98:35:99:1E:CD:20:31:1E:36:98:E5:8C:FB:E3
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/i1lL-__FmDWZHs0gMR42mOWM--M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.163.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:81:d0:3b:f9:89:b2:92:dc:9c:d5:6a:cf:06:48:32:4f:
         30:4f:49:c3:85:48:a6:0a:22:97:77:fb:93:ca:c2:bd:1b:07:
         d2:8c:1e:7f:6f:ee:20:8a:72:7a:8d:67:b2:fb:1e:7d:89:38:
         37:33:19:9a:19:24:f8:a5:3c:36:8e:3b:cf:ec:21:a8:44:de:
         3d:59:60:00:69:a2:13:1a:60:1e:64:a7:56:1b:1f:9c:c9:8f:
         8f:08:47:e4:6f:b3:de:fe:23:6c:19:0b:b4:86:99:5c:a3:03:
         32:5e:e1:38:50:72:9d:1f:f0:10:54:7b:f2:50:ae:d2:a7:b0:
         ce:aa:f7:16:29:53:38:bf:44:bb:b5:53:74:c2:2f:44:0e:d1:
         2b:5f:60:1c:81:50:be:5a:f1:64:99:59:e5:d4:7b:e2:8e:a6:
         11:60:12:e2:60:f3:38:30:54:72:44:e2:f9:31:5c:39:dd:d0:
         1b:1b:50:35:d7:f3:1e:26:f1:da:b1:68:dc:28:2e:2c:6c:fb:
         e7:e6:6d:55:fd:d0:fa:b2:80:dd:0c:e2:9b:3e:33:df:98:1a:
         0a:05:f5:3c:46:e7:82:e2:f5:00:63:d6:64:1c:7a:4f:be:c6:
         e8:5c:00:85:3a:2d:12:d0:ae:0d:6f:fe:f5:e6:ae:fd:30:13:
         78:fa:0d:66
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDE2MzdaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDhCNTk0QkZCRkZDNTk4
MzU5OTFFQ0QyMDMxMUUzNjk4RTU4Q0ZCRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNp9G9qRGe1xL8G5SqhlIel7/YfKSKJilbmIFBGoQF+7ES17Lj
AmMik3Y+P3GjJa2vnIXcXa8uuYtiaRDbTj7uulN9YNfu1B+0BLfKin07kvLvZr1C
DiKYraXlHWQwdd+n5TrlfhlRajygvF8ZOwFj8y35R9l6gQa+/LZH1J+5gK9AeADI
1vqX3AwSGHyWSPIiMWvZRPLQF3FaHmkexKIqwokkEnY6BvIt9nUWwE+l7fJTVAnb
HPcvIixHeqUN8JfoRwitwaX9wgjGX525D5FBT0zK2rKUBVp278PoYKaTs1hIPpe7
NCDPfPyL4Ar7E//xSvg+ZJbyqZhnKvfPAVYFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUi1lL+//FmDWZHs0gMR42mOWM++MwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2kxbEwtX19GbURXWkhzMGdNUjQybU9XTS0tTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAW2oyAwDQYJKoZIhvcNAQELBQADggEBACH0gdA7+Ymyktyc1WrPBkgyTzBP
ScOFSKYKIpd3+5PKwr0bB9KMHn9v7iCKcnqNZ7L7Hn2JODczGZoZJPilPDaOO8/s
IahE3j1ZYABpohMaYB5kp1YbH5zJj48IR+Rvs97+I2wZC7SGmVyjAzJe4ThQcp0f
8BBUe/JQrtKnsM6q9xYpUzi/RLu1U3TCL0QO0StfYByBUL5a8WSZWeXUe+KOphFg
EuJg8zgwVHJE4vkxXDnd0BsbUDXX8x4m8dqxaNwoLixs++fmbVX90PqygN0M4ps+
M9+YGgoF9TxG54Li9QBj1mQcek++xuhcAIU6LRLQrg1v/vXmrv0wE3j6DWY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org