Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/nn5gVSVHs094A7R-a0xgDCJasYM.roa
File:                     nn5gVSVHs094A7R-a0xgDCJasYM.roa (raw, json)
Hash identifier:          9rKk/5tWVPT6ITsaYaxpO2dlgn5HLMdmTzzNPm39EgA=
Subject key identifier:   9E:7E:60:55:25:47:B3:4F:78:03:B4:7E:6B:4C:60:0C:22:5A:B1:83
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0193
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nn5gVSVHs094A7R-a0xgDCJasYM.roa
Signing time:             Fri 07 Jul 2023 04:12:39 +0000
ROA not before:           Fri 07 Jul 2023 04:12:39 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        111.234.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:39 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=9E7E60552547B34F7803B47E6B4C600C225AB183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:a8:93:7e:90:39:21:d9:de:e2:5e:07:50:
                    47:d7:c3:d1:ec:3e:e2:11:12:17:0f:b0:63:f0:6c:
                    83:82:87:4c:b4:ec:4c:dd:4c:e7:82:f9:cb:38:31:
                    14:07:74:16:55:44:e0:c3:a1:fa:1d:26:07:c9:e8:
                    ab:9f:dc:0c:fb:a5:e2:cf:08:44:12:21:41:65:bb:
                    a0:93:23:05:83:bf:ad:ca:c7:3b:ad:22:78:ae:59:
                    d0:f5:88:94:ec:47:03:83:37:41:04:32:26:3d:49:
                    7a:00:46:e3:e3:69:d6:cf:e6:1a:79:a3:65:ec:6d:
                    42:87:fe:83:e9:12:a5:7d:ea:af:29:1e:b3:4e:e5:
                    bf:0e:f0:a5:79:9c:ba:05:d8:4b:e1:f6:01:1a:b6:
                    ec:bc:40:40:f6:e8:f6:82:dd:ff:ac:c2:96:3e:7a:
                    a3:be:83:a3:b3:ad:c4:89:7c:b7:83:ad:cc:b4:5a:
                    53:bf:fe:23:51:4e:ad:cc:d0:b3:0f:30:57:eb:31:
                    c0:a1:59:a1:c8:df:4d:68:17:01:33:ba:72:36:ec:
                    b9:8a:aa:d9:72:fd:21:14:21:33:b7:90:ff:c6:42:
                    2f:e3:8c:0d:cd:1d:5c:11:ac:28:04:67:3d:23:bf:
                    3a:0f:35:d4:92:d7:d8:92:7d:4c:a3:27:2c:67:99:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7E:60:55:25:47:B3:4F:78:03:B4:7E:6B:4C:60:0C:22:5A:B1:83
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nn5gVSVHs094A7R-a0xgDCJasYM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:e0:bc:7a:42:c2:27:59:0b:16:09:c9:22:56:70:e5:67:26:
         19:3e:6c:c4:17:9f:40:21:00:a7:78:7e:0c:ce:3a:f5:33:df:
         d1:ad:5c:69:58:f7:52:23:c3:98:24:4c:8e:8e:53:05:b3:94:
         29:c3:ca:74:40:e1:96:0d:94:80:a9:ed:aa:8b:2e:fc:d3:82:
         93:22:e3:b5:d0:3c:68:c3:af:43:48:82:5d:08:9a:ce:cd:d0:
         60:ff:c7:80:1f:b9:8d:5a:51:6a:14:d0:fe:0e:f4:31:6c:db:
         69:e5:59:b1:09:b6:82:ac:5f:ca:39:4c:f7:07:5c:0a:b5:3b:
         8f:94:0f:7a:c6:e0:d4:cf:02:0e:85:59:cb:9e:1e:3e:71:88:
         35:6b:a0:51:6c:46:cb:56:a4:a6:8b:4d:d3:7a:4e:27:37:46:
         cc:38:69:11:f1:f1:3b:e4:e8:f4:2c:7e:e8:7c:c1:a2:e0:ab:
         4f:01:16:fd:b0:d2:60:11:38:96:19:bd:e3:1a:86:bc:8d:c9:
         0d:ba:df:8e:e5:49:a4:f4:05:23:42:52:9a:3c:5f:08:21:2c:
         62:ce:17:b9:ac:dc:4b:76:01:e2:91:f9:67:4c:b7:d5:45:88:
         33:4d:e2:aa:5c:de:56:0c:30:fe:5a:5d:e7:9c:10:25:72:44:
         33:b3:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org