Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lJJdMqKIQX6hosvPXftGN0iMgic.roa
File:                     lJJdMqKIQX6hosvPXftGN0iMgic.roa (raw, json)
Hash identifier:          O8UbnqnY9C52hYUdrpJwPlKBaOfhghom6Yl+Ia5SAtw=
Subject key identifier:   94:92:5D:32:A2:88:41:7E:A1:A2:CB:CF:5D:FB:46:37:48:8C:82:27
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01B1
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lJJdMqKIQX6hosvPXftGN0iMgic.roa
Signing time:             Fri 07 Jul 2023 04:14:36 +0000
ROA not before:           Fri 07 Jul 2023 04:14:36 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        219.99.80.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:36 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=94925D32A288417EA1A2CBCF5DFB4637488C8227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:00:a9:26:11:25:dd:d9:9d:ce:48:d2:4c:
                    8e:c3:d8:f1:cc:ee:f0:9d:9b:bb:53:a9:a2:c7:ed:
                    24:5b:d9:91:c7:68:16:cc:ac:ac:51:e5:d9:ee:e6:
                    f2:ed:41:bb:56:11:f9:e6:16:fb:c1:54:17:cf:18:
                    25:70:03:c6:fd:1a:75:fa:25:76:f2:aa:9a:d1:f3:
                    da:13:f6:2d:af:69:ec:32:36:71:4a:72:30:55:c9:
                    57:7c:17:f8:af:0d:93:07:66:4e:5f:da:b3:e9:9e:
                    b3:3d:e8:4a:bd:3e:ac:19:ac:d1:e4:da:40:1a:11:
                    e1:af:b2:52:01:28:b2:f4:6c:b9:cf:ae:e5:22:9b:
                    b8:5f:d1:85:d3:45:e0:5a:f8:6c:12:a7:51:03:da:
                    ec:c5:73:d6:17:f8:3c:cb:60:13:86:94:ef:f6:d4:
                    54:46:bd:45:e1:2a:bf:cb:28:97:fa:93:c8:9c:6f:
                    0b:a7:f1:a7:59:a6:57:b0:2c:f9:c7:4c:fb:7c:7e:
                    db:1e:cc:76:a1:97:67:10:b2:4d:80:80:fc:a0:a3:
                    8d:64:0d:9f:01:0c:07:20:06:df:78:18:89:98:6a:
                    8c:4a:62:ca:3e:cd:39:c7:07:56:49:d4:e5:80:33:
                    aa:77:8d:92:90:66:c2:d5:58:f2:67:fb:0b:f5:e3:
                    0f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:92:5D:32:A2:88:41:7E:A1:A2:CB:CF:5D:FB:46:37:48:8C:82:27
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lJJdMqKIQX6hosvPXftGN0iMgic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.99.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:5a:5d:f5:b1:6a:38:4f:d5:db:40:c3:23:6c:a4:33:9f:9d:
         47:94:cd:59:6b:99:75:99:ce:52:d4:ff:2d:51:ba:32:c1:af:
         71:d2:1c:f5:46:6b:e2:c9:bf:bb:48:07:db:f1:fc:7d:10:3c:
         2c:1d:73:14:fe:04:a4:af:1b:d5:14:da:08:6d:a5:60:37:db:
         ca:98:b1:8d:66:55:d0:5c:cc:da:6a:ba:49:17:f2:ae:42:72:
         1a:61:5e:3b:8b:f4:92:f3:d8:ab:66:fd:2c:fa:32:b8:b2:0b:
         b0:d6:cc:bd:b5:c6:da:a3:a4:cf:0f:20:81:e0:b5:45:d4:07:
         7f:7b:1f:f2:2d:23:28:62:14:ec:1e:bb:ca:dd:bb:75:87:00:
         a2:55:57:a3:3e:dc:3a:55:f7:6c:c5:15:11:12:b1:7a:92:b9:
         8f:29:d6:8e:d8:c7:82:41:b2:d1:b3:2a:32:14:ef:a3:b0:70:
         ed:85:39:7c:d0:52:0f:73:7a:33:0c:ff:14:8f:0c:07:96:98:
         04:d6:16:61:83:2c:3f:2d:2c:ec:cb:52:6f:10:34:55:cd:81:
         df:48:7d:ca:df:23:2b:53:77:65:37:14:13:21:49:59:83:a8:
         0e:b1:c7:73:1b:9b:f8:84:7b:d3:0d:ed:e0:7f:6b:2e:b1:58:
         25:9a:d4:e9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDE0MzZaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDk0OTI1RDMyQTI4ODQx
N0VBMUEyQ0JDRjVERkI0NjM3NDg4QzgyMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF0ACpJhEl3dmdzkjSTI7D2PHM7vCdm7tTqaLH7SRb2ZHHaBbM
rKxR5dnu5vLtQbtWEfnmFvvBVBfPGCVwA8b9GnX6JXbyqprR89oT9i2vaewyNnFK
cjBVyVd8F/ivDZMHZk5f2rPpnrM96Eq9PqwZrNHk2kAaEeGvslIBKLL0bLnPruUi
m7hf0YXTReBa+GwSp1ED2uzFc9YX+DzLYBOGlO/21FRGvUXhKr/LKJf6k8icbwun
8adZplewLPnHTPt8ftsezHahl2cQsk2AgPygo41kDZ8BDAcgBt94GImYaoxKYso+
zTnHB1ZJ1OWAM6p3jZKQZsLVWPJn+wv14w9dAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUlJJdMqKIQX6hosvPXftGN0iMgicwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2xKSmRNcUtJUVg2aG9zdlBYZnRHTjBpTWdpYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATbY1AwDQYJKoZIhvcNAQELBQADggEBADxaXfWxajhP1dtAwyNspDOfnUeU
zVlrmXWZzlLU/y1RujLBr3HSHPVGa+LJv7tIB9vx/H0QPCwdcxT+BKSvG9UU2ght
pWA328qYsY1mVdBczNpqukkX8q5CchphXjuL9JLz2Ktm/Sz6MriyC7DWzL21xtqj
pM8PIIHgtUXUB397H/ItIyhiFOweu8rdu3WHAKJVV6M+3DpV92zFFRESsXqSuY8p
1o7Yx4JBstGzKjIU76OwcO2FOXzQUg9zejMM/xSPDAeWmATWFmGDLD8tLOzLUm8Q
NFXNgd9IfcrfIytTd2U3FBMhSVmDqA6xx3Mbm/iEe9MN7eB/ay6xWCWa1Ok=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org