Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/HkGij8U5D-OcK-PORcYVrKHgsrE.roa
File:                     HkGij8U5D-OcK-PORcYVrKHgsrE.roa (raw, json)
Hash identifier:          ykSlvmxvY4+r5uuCygTKsadUTuC8DmbUu2mHumpWqLA=
Subject key identifier:   1E:41:A2:8F:C5:39:0F:E3:9C:2B:E3:CE:45:C6:15:AC:A1:E0:B2:B1
Certificate issuer:       /CN=D405A6909AB9956CF7393D0E312A269A804005EF
Certificate serial:       07
Authority key identifier: D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/HkGij8U5D-OcK-PORcYVrKHgsrE.roa
Signing time:             Tue 09 May 2023 08:16:39 +0000
ROA not before:           Tue 09 May 2023 08:16:39 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4685
IP address blocks:        157.14.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D405A6909AB9956CF7393D0E312A269A804005EF
        Validity
            Not Before: May  9 08:16:39 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=1E41A28FC5390FE39C2BE3CE45C615ACA1E0B2B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:16:bc:81:a7:fe:73:fd:e0:3e:01:32:50:
                    f7:2c:81:de:a5:88:b4:42:56:0e:6d:d7:8b:f9:0e:
                    01:27:57:ba:e2:54:7c:84:22:1e:54:a8:bf:e2:38:
                    f2:1a:39:53:0f:60:f1:24:d8:06:92:40:83:b2:3a:
                    3a:aa:b6:ab:79:3f:d6:26:e9:1f:0b:e7:63:ca:40:
                    be:34:fe:34:1a:93:13:96:37:4e:f9:d9:02:63:40:
                    09:64:2e:1c:03:f3:07:e7:40:ef:6b:d6:73:1f:82:
                    6f:b8:97:4e:98:28:5d:5b:cb:f6:a4:51:60:02:5d:
                    82:83:bb:27:4e:ca:ad:17:83:25:a3:36:fc:fd:b2:
                    bd:14:f8:c8:84:8f:9f:f7:d7:69:99:e3:67:36:41:
                    cb:2e:29:b9:b2:9d:4c:03:9f:33:33:f8:dd:c4:b6:
                    3e:55:9c:a4:73:48:3f:24:58:6f:a8:19:49:70:c8:
                    51:9e:f7:d1:f8:5e:76:b7:69:60:8c:ce:1d:2f:af:
                    7e:b6:8d:2a:bd:52:c6:3f:83:0d:b9:29:a7:a5:22:
                    58:6e:bd:26:75:ac:9a:66:89:ee:c8:bb:ee:55:7d:
                    c3:48:a0:cc:e7:60:fc:0a:dc:d3:9b:33:27:3d:1f:
                    59:7e:67:74:81:9c:d4:97:c6:f1:c7:f3:96:2b:46:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:41:A2:8F:C5:39:0F:E3:9C:2B:E3:CE:45:C6:15:AC:A1:E0:B2:B1
            X509v3 Authority Key Identifier:
                keyid:D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/HkGij8U5D-OcK-PORcYVrKHgsrE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.14.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:fd:f3:f9:fc:de:f9:34:2f:19:1e:94:87:bb:60:1f:3b:5e:
         bd:1c:7d:33:50:2f:9a:dc:92:0b:8c:8a:48:32:ab:8d:f7:ae:
         19:01:36:83:5b:1b:0b:bd:c5:b1:93:85:0a:23:aa:f1:39:4e:
         2f:5b:99:7a:47:7a:fb:f4:5d:1e:32:c1:6c:07:fd:14:59:4b:
         b9:7d:0e:07:aa:39:75:7a:eb:dd:97:f4:9a:15:2b:5d:76:bc:
         14:9e:82:06:85:37:cf:d6:38:43:dc:91:46:39:44:ef:8a:9a:
         d0:c3:6b:9f:19:f3:39:eb:b4:81:9a:8e:5f:07:f8:88:bd:36:
         8a:96:ed:83:c9:ae:24:91:dc:8d:4b:d9:69:87:86:ab:57:fd:
         c9:cb:93:39:80:25:2a:e4:ce:65:25:14:f1:8d:ce:8e:20:77:
         b0:f4:a3:61:bd:c5:a4:7f:dd:a1:cb:43:55:5d:5e:2e:3b:b4:
         6e:c6:ad:f0:24:4e:44:2d:1a:0a:b2:79:2a:79:f2:1a:0f:7e:
         fc:1d:46:9a:75:e5:18:a8:25:7f:94:04:22:e0:61:0a:60:c9:
         d4:b7:a0:71:18:db:49:aa:88:66:77:12:c9:93:7a:3f:ec:77:
         1e:18:1b:64:ac:dd:82:70:23:4e:38:e2:5c:87:48:97:30:53:
         67:07:0f:d3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENDA1
QTY5MDlBQjk5NTZDRjczOTNEMEUzMTJBMjY5QTgwNDAwNUVGMB4XDTIzMDUwOTA4
MTYzOVoXDTI0MDQxNDAxMzAwMlowMzExMC8GA1UEAxMoMUU0MUEyOEZDNTM5MEZF
MzlDMkJFM0NFNDVDNjE1QUNBMUUwQjJCMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALDrFryBp/5z/eA+ATJQ9yyB3qWItEJWDm3Xi/kOASdXuuJUfIQi
HlSov+I48ho5Uw9g8STYBpJAg7I6Oqq2q3k/1ibpHwvnY8pAvjT+NBqTE5Y3TvnZ
AmNACWQuHAPzB+dA72vWcx+Cb7iXTpgoXVvL9qRRYAJdgoO7J07KrReDJaM2/P2y
vRT4yISPn/fXaZnjZzZByy4pubKdTAOfMzP43cS2PlWcpHNIPyRYb6gZSXDIUZ73
0fhedrdpYIzOHS+vfraNKr1Sxj+DDbkpp6UiWG69JnWsmmaJ7si77lV9w0igzOdg
/Arc05szJz0fWX5ndIGc1JfG8cfzlitG7PUCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBQeQaKPxTkP45wr485FxhWsoeCysTAfBgNVHSMEGDAWgBTUBaaQmrmVbPc5PQ4x
KiaagEAF7zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTAvMUFXbWtKcTVsV3ozT1QwT01Tb21tb0JBQmU4LmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMUFXbWtKcTVsV3ozT1QwT01Tb21tb0JB
QmU4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUwL0hrR2lqOFU1RC1PY0stUE9SY1lWcktIZ3NyRS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAWdDqAwDQYJKoZIhvcNAQELBQADggEBAKH98/n83vk0LxkelIe7YB87Xr0cfTNQ
L5rckguMikgyq433rhkBNoNbGwu9xbGThQojqvE5Ti9bmXpHevv0XR4ywWwH/RRZ
S7l9DgeqOXV6692X9JoVK112vBSeggaFN8/WOEPckUY5RO+KmtDDa58Z8znrtIGa
jl8H+Ii9NoqW7YPJriSR3I1L2WmHhqtX/cnLkzmAJSrkzmUlFPGNzo4gd7D0o2G9
xaR/3aHLQ1VdXi47tG7GrfAkTkQtGgqyeSp58hoPfvwdRpp15RioJX+UBCLgYQpg
ydS3oHEY20mqiGZ3EsmTej/sdx4YG2Ss3YJwI0444lyHSJcwU2cHD9M=
-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org