Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/i4muzGxrY8dSDMl3bi1o_gOZegc.roa
File:                     i4muzGxrY8dSDMl3bi1o_gOZegc.roa (raw, json)
Hash identifier:          QSjNmIbnNeGIOLxomuJjFFUXslrz/c4m/3EmpubjSX8=
Subject key identifier:   8B:89:AE:CC:6C:6B:63:C7:52:0C:C9:77:6E:2D:68:FE:03:99:7A:07
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0197
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/i4muzGxrY8dSDMl3bi1o_gOZegc.roa
Signing time:             Fri 07 Jul 2023 04:12:40 +0000
ROA not before:           Fri 07 Jul 2023 04:12:40 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        111.234.64.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:40 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=8B89AECC6C6B63C7520CC9776E2D68FE03997A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:d5:81:9c:aa:2f:97:74:dd:a2:cf:9c:b1:
                    a4:ef:1d:36:b1:36:d6:7d:7d:c6:a8:4f:db:66:8e:
                    6b:2d:1b:f2:48:bc:9e:c5:56:73:2d:e7:67:5a:02:
                    1d:f8:2b:a9:29:67:11:10:1c:1e:cc:86:f7:96:a3:
                    d5:85:20:33:45:49:30:99:17:fc:46:2e:2b:00:1b:
                    ce:8d:11:ad:b3:8e:55:bc:51:c8:35:4d:90:d4:e6:
                    89:0f:da:41:76:e8:a2:46:a5:5e:ad:3b:9d:10:d8:
                    0a:06:68:30:12:ce:cc:7c:66:5c:82:d2:47:4b:20:
                    81:73:af:a4:88:fb:ba:64:72:ed:aa:17:f4:6c:96:
                    b1:c1:68:b3:49:e8:92:42:96:ce:c1:01:76:9d:5e:
                    52:2f:a0:27:4a:29:48:db:23:34:d0:b2:19:00:63:
                    45:c6:46:80:39:7d:bc:ac:0d:2e:95:de:68:df:23:
                    ba:a3:4d:b7:56:8c:c4:56:1d:4a:62:49:74:d9:c9:
                    dd:82:a8:ef:13:d5:89:1a:e4:7a:be:46:c2:bb:ec:
                    8b:97:4f:15:7e:41:14:d8:fb:fa:cb:2c:3e:b8:06:
                    0d:5b:8b:54:53:1e:58:62:7f:13:3b:84:37:38:22:
                    83:7b:7d:96:0f:60:16:d3:e0:5e:a8:0c:74:38:91:
                    b3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:89:AE:CC:6C:6B:63:C7:52:0C:C9:77:6E:2D:68:FE:03:99:7A:07
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/i4muzGxrY8dSDMl3bi1o_gOZegc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:a2:71:86:cf:02:42:bc:6c:d5:62:27:74:e7:47:99:cd:58:
         3b:03:ee:ea:4b:42:72:75:7b:db:99:4a:30:af:b8:d2:b0:0b:
         15:e0:45:ac:b6:ff:77:35:97:fd:24:86:fa:6d:48:57:08:6e:
         34:3a:8c:27:a6:97:65:68:20:60:cf:0b:58:26:a1:74:cd:2e:
         4b:f9:e1:2b:87:04:e4:42:f9:92:63:eb:ee:6c:c4:fa:00:0a:
         09:ba:8f:60:ba:27:9c:1c:eb:51:7d:58:c3:34:39:90:05:56:
         05:cf:8a:36:f3:4f:85:07:f6:b6:fc:3e:5a:c1:f2:e9:ad:54:
         64:f3:fe:e3:d8:61:5f:e9:d2:96:c1:a2:de:6f:6f:03:a3:c6:
         bb:50:bd:80:86:f5:24:b1:23:62:ad:ee:c1:8f:d6:c2:79:de:
         83:60:ed:f7:82:b9:ce:e2:c0:07:73:1e:bb:a3:95:de:74:4a:
         bb:bf:c0:3e:38:40:73:27:b6:d1:13:20:38:1c:b7:e0:e3:59:
         49:b4:6c:0e:5d:e6:31:c5:8a:d0:34:a2:fe:93:bb:9d:15:60:
         1c:53:a8:0f:a0:ce:f0:ad:a5:65:f0:96:87:61:e8:fe:28:51:
         f0:af:37:a6:7a:64:54:e9:a4:4b:56:f4:b6:25:bb:8c:9b:6d:
         87:28:64:9c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDEyNDBaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDhCODlBRUNDNkM2QjYz
Qzc1MjBDQzk3NzZFMkQ2OEZFMDM5OTdBMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDavtWBnKovl3Tdos+csaTvHTaxNtZ9fcaoT9tmjmstG/JIvJ7F
VnMt52daAh34K6kpZxEQHB7MhveWo9WFIDNFSTCZF/xGLisAG86NEa2zjlW8Ucg1
TZDU5okP2kF26KJGpV6tO50Q2AoGaDASzsx8ZlyC0kdLIIFzr6SI+7pkcu2qF/Rs
lrHBaLNJ6JJCls7BAXadXlIvoCdKKUjbIzTQshkAY0XGRoA5fbysDS6V3mjfI7qj
TbdWjMRWHUpiSXTZyd2CqO8T1Yka5Hq+RsK77IuXTxV+QRTY+/rLLD64Bg1bi1RT
HlhifxM7hDc4IoN7fZYPYBbT4F6oDHQ4kbPFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUi4muzGxrY8dSDMl3bi1o/gOZegcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2k0bXV6R3hyWThkU0RNbDNiaTFvX2dPWmVnYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVv6kAwDQYJKoZIhvcNAQELBQADggEBADyicYbPAkK8bNViJ3TnR5nNWDsD
7upLQnJ1e9uZSjCvuNKwCxXgRay2/3c1l/0khvptSFcIbjQ6jCeml2VoIGDPC1gm
oXTNLkv54SuHBORC+ZJj6+5sxPoACgm6j2C6J5wc61F9WMM0OZAFVgXPijbzT4UH
9rb8PlrB8umtVGTz/uPYYV/p0pbBot5vbwOjxrtQvYCG9SSxI2Kt7sGP1sJ53oNg
7feCuc7iwAdzHrujld50Sru/wD44QHMnttETIDgct+DjWUm0bA5d5jHFitA0ov6T
u50VYBxTqA+gzvCtpWXwlodh6P4oUfCvN6Z6ZFTppEtW9LYlu4ybbYcoZJw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org