Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/rdYQeBZiH9BOplOE1fvOLVEeW_E.roa
File:                     rdYQeBZiH9BOplOE1fvOLVEeW_E.roa (raw, json)
Hash identifier:          0NxpMkBwetbG2MWYjITp7XlT8t8n1kSBLslqAXKz0fw=
Subject key identifier:   AD:D6:10:78:16:62:1F:D0:4E:A6:53:84:D5:FB:CE:2D:51:1E:5B:F1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01E7
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rdYQeBZiH9BOplOE1fvOLVEeW_E.roa
Signing time:             Tue 01 Aug 2023 01:31:31 +0000
ROA not before:           Tue 01 Aug 2023 01:31:31 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     10013
IP address blocks:        180.131.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Aug  1 01:31:31 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=ADD6107816621FD04EA65384D5FBCE2D511E5BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:8d:0e:e0:98:cf:f4:33:0f:b9:07:c7:c7:
                    52:05:0e:14:29:28:a3:a2:ed:86:75:13:b3:35:6b:
                    ef:c8:44:c8:de:c0:0f:71:f3:cf:7d:1b:47:89:9e:
                    ed:cf:57:9a:4e:2c:e3:a6:ee:46:95:d8:79:82:04:
                    b8:94:bf:9c:36:1e:62:b0:47:c0:75:94:1b:ce:85:
                    cc:f4:24:0f:60:40:59:0d:13:65:ae:e2:de:ed:d9:
                    fa:23:1c:e4:ed:58:5f:f6:82:c7:de:2a:04:f8:b1:
                    32:e8:4d:ac:8d:f9:3c:7c:a6:e6:ff:29:8d:22:d0:
                    be:84:ca:5e:b9:0f:eb:e1:5d:85:ae:80:e4:b5:bb:
                    a4:30:42:1f:31:c5:45:f9:e9:50:2f:78:a5:c4:7e:
                    68:b5:7b:b7:17:01:0a:7c:5d:21:d7:3c:9b:f6:86:
                    55:f2:68:bb:88:b6:bd:48:45:34:78:19:d5:9f:03:
                    d8:36:c4:52:c1:c6:5e:b5:26:4a:df:f8:4a:6a:1f:
                    2e:51:0e:91:e8:e1:f8:d6:d1:d8:f6:52:db:19:d5:
                    96:41:db:c1:fe:d6:7f:be:8c:aa:51:ec:d5:cc:19:
                    1e:25:33:c8:d6:8a:72:22:17:c9:e4:85:c4:e0:f3:
                    28:e9:01:be:7c:9b:6c:72:2d:1c:7d:3e:61:81:cd:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D6:10:78:16:62:1F:D0:4E:A6:53:84:D5:FB:CE:2D:51:1E:5B:F1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rdYQeBZiH9BOplOE1fvOLVEeW_E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:98:f3:d4:d6:f0:65:c9:36:51:fa:7c:02:0d:ae:89:c2:51:
         d7:35:e2:0b:f4:d2:49:39:9b:85:44:d6:f4:84:50:e4:88:a5:
         e3:33:88:7b:bd:b5:79:8a:c4:b3:04:6e:53:3a:cc:a7:d1:20:
         dd:4c:e3:73:9b:99:fd:fe:6e:7d:2d:b1:78:27:96:f9:31:5e:
         dc:56:50:87:03:af:7d:aa:ef:6b:12:0a:8e:43:27:f8:62:bb:
         2d:56:3a:1a:0c:6b:3a:52:e7:bd:2b:64:d9:f6:59:c8:00:6e:
         61:8b:f3:76:6e:fa:7e:29:59:06:d8:d8:42:8d:5e:40:6d:43:
         d6:6c:b3:44:82:c0:58:cf:7a:fd:be:09:c6:a9:57:c0:38:60:
         c6:05:60:41:e7:87:a8:ac:00:35:a8:e7:1b:e5:9f:eb:10:72:
         0a:68:eb:72:00:42:25:93:31:e1:89:7c:91:d5:8e:e6:4b:90:
         9a:de:5b:a9:f0:03:82:a7:07:e3:7e:a1:aa:b0:6b:ee:50:fa:
         dc:d9:e6:ed:85:67:b5:d8:af:35:75:79:91:c5:a3:0f:dc:95:
         e6:f9:a8:61:f9:58:26:20:6b:59:8b:b4:f8:0c:3d:97:ff:26:
         19:8f:02:f7:c3:fa:cc:93:2d:01:12:41:04:61:f4:fa:17:57:
         e4:10:2a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:42 2024 by rpki-client on console-ams.rpki-client.org