Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/iHnzt_IIuWCEQutT-O27J1ZXFvE.roa
File:                     iHnzt_IIuWCEQutT-O27J1ZXFvE.roa (raw, json)
Hash identifier:          MHBm/GuIfdGrq03uBr7vtgzooAJ/kxPcpp8nfi0S/ko=
Subject key identifier:   88:79:F3:B7:F2:08:B9:60:84:42:EB:53:F8:ED:BB:27:56:57:16:F1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0192
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/iHnzt_IIuWCEQutT-O27J1ZXFvE.roa
Signing time:             Fri 07 Jul 2023 04:12:38 +0000
ROA not before:           Fri 07 Jul 2023 04:12:38 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        111.232.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:38 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=8879F3B7F208B9608442EB53F8EDBB27565716F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a0:cb:99:b2:9e:de:06:4f:cf:b3:d3:31:e0:
                    d8:e3:c1:f0:77:25:19:5a:b9:b8:1a:2f:28:57:fe:
                    81:14:24:63:be:2f:78:f6:aa:76:88:ee:83:20:63:
                    00:21:b9:f8:ab:08:32:8d:19:f3:36:29:ad:05:72:
                    d5:61:58:8e:36:31:42:a7:e4:7f:57:a3:06:e0:97:
                    cb:ae:50:fb:95:ea:7e:df:2e:aa:de:17:e9:1d:6e:
                    e8:b9:31:6f:28:20:69:29:c8:d0:0b:10:ac:6e:31:
                    b1:2f:1a:f6:ff:87:62:c1:32:9a:5c:bb:66:5e:39:
                    31:1a:dc:89:c3:b4:c8:5e:14:5e:7e:30:53:f6:c4:
                    af:01:8d:51:2c:d4:3d:a9:3e:3b:6c:f4:c3:42:1d:
                    2b:9d:3a:7a:05:f0:a2:a5:a6:00:81:49:dd:4e:99:
                    1b:40:83:0c:9f:30:44:80:a9:63:de:09:b8:f0:d1:
                    58:e3:38:da:86:71:ef:81:9a:1f:7d:ce:fd:76:6d:
                    57:df:fb:18:61:3e:c9:c0:44:10:69:39:3a:01:80:
                    1b:85:f9:4b:01:03:da:b4:67:87:c4:6f:33:63:67:
                    41:39:0b:76:2d:33:48:1e:ab:33:a1:07:6b:38:c6:
                    86:3e:cc:83:8a:a4:f9:7c:4c:31:25:f9:52:6a:e5:
                    34:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:79:F3:B7:F2:08:B9:60:84:42:EB:53:F8:ED:BB:27:56:57:16:F1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/iHnzt_IIuWCEQutT-O27J1ZXFvE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.232.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         36:99:8d:07:c2:69:45:11:62:4a:62:ce:bc:0d:c7:f8:2d:c7:
         ce:63:85:8f:b2:f3:60:91:04:45:68:16:9e:f2:da:de:98:35:
         e2:4c:6f:a6:af:92:93:16:9c:49:70:26:87:ea:35:94:19:b4:
         a6:fb:ac:c4:c9:62:41:15:8e:b8:7b:17:95:72:67:e1:aa:da:
         65:ff:f5:0e:4a:f9:9d:29:2c:41:b2:a8:74:1e:14:a5:a0:91:
         fc:e8:ff:48:3f:6f:8e:d8:0d:07:62:12:86:da:f3:a1:97:f1:
         b7:76:ee:97:ac:a6:a3:2d:86:b0:cb:c2:6c:54:0c:a5:42:e8:
         3b:07:f8:ee:6b:01:d4:ef:f9:09:b2:47:15:8f:9d:5c:5e:a6:
         77:e7:b0:67:40:81:0d:7a:24:74:cf:f5:32:9a:92:7b:bc:06:
         17:bc:4b:90:69:05:89:20:72:4c:a3:ca:68:30:8c:42:ca:07:
         37:ae:db:f8:d9:fc:86:5f:33:9b:95:20:46:6b:f0:95:e3:0d:
         82:5c:3f:95:c1:76:f3:90:d2:c2:94:e6:b5:5c:b6:33:73:67:
         3b:d3:5e:da:a8:0b:37:8c:ea:0b:bf:be:e3:67:67:6b:74:92:
         9d:2f:91:88:3b:29:6f:f6:78:6f:ec:19:5d:db:ee:3b:19:01:
         df:44:16:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org