Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/yvjUqVjmj60l6Wp5TyBQOgnL9gI.roa
File:                     yvjUqVjmj60l6Wp5TyBQOgnL9gI.roa (raw, json)
Hash identifier:          pDkMnWw+23x7sVF6Fxjbr2wygZgz8bzu3fNN0Fo57Gc=
Subject key identifier:   CA:F8:D4:A9:58:E6:8F:AD:25:E9:6A:79:4F:20:50:3A:09:CB:F6:02
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0185
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/yvjUqVjmj60l6Wp5TyBQOgnL9gI.roa
Signing time:             Sat 01 Jul 2023 01:30:47 +0000
ROA not before:           Sat 01 Jul 2023 01:30:47 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        211.129.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:47 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=CAF8D4A958E68FAD25E96A794F20503A09CBF602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:66:5e:aa:26:af:50:3e:9b:9d:ff:2a:1a:
                    4d:45:9e:eb:6b:45:97:cb:05:77:12:72:bb:c5:0d:
                    ce:8d:49:32:a9:a7:bb:cd:a5:19:00:7c:86:d5:d1:
                    27:c9:87:36:42:d7:d0:07:ef:f9:ca:89:21:61:66:
                    b6:68:31:70:9e:2a:b0:68:c9:92:55:ef:7b:9d:d0:
                    83:fb:e9:7b:e0:bf:16:33:f5:fe:2e:e0:70:bd:38:
                    41:e5:25:1e:90:dc:90:bd:dc:de:58:0e:4f:58:c6:
                    64:5c:1d:0e:78:01:05:b3:e3:a1:b1:97:ed:61:9d:
                    04:af:f8:44:f8:bf:d1:b5:60:d5:da:36:04:4c:bc:
                    00:05:2e:67:ea:49:ca:31:16:8a:ab:8a:d9:9d:59:
                    c3:97:c4:35:21:5b:95:1f:4b:de:af:e3:2b:4c:3b:
                    d6:f6:62:6d:7a:fd:a8:3e:26:af:4c:fe:09:7a:f2:
                    c6:ea:d5:3f:f1:0a:7e:01:68:66:2d:e0:84:4e:b6:
                    98:24:bd:d2:db:a1:f2:9f:16:28:b8:e1:15:bd:fa:
                    79:4e:23:85:fc:49:c8:32:36:5b:b1:de:e9:43:e7:
                    e2:c4:4a:1c:5a:6e:03:2d:a7:f2:e3:25:86:c2:ac:
                    e8:72:a2:f4:20:79:84:55:ea:0f:aa:02:9c:e2:01:
                    e7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F8:D4:A9:58:E6:8F:AD:25:E9:6A:79:4F:20:50:3A:09:CB:F6:02
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/yvjUqVjmj60l6Wp5TyBQOgnL9gI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:7a:a0:89:a9:49:bc:f9:ee:13:4b:56:33:9d:e8:21:a1:67:
         f1:73:d7:32:56:c4:e2:4e:2b:35:6b:bf:5d:57:77:75:85:f0:
         e5:9d:27:3c:4d:53:91:fa:11:d1:51:ea:f5:7a:cf:27:29:b3:
         1b:5d:b9:ad:a6:84:d2:a3:25:10:0c:0a:ba:fd:74:21:b0:de:
         bf:33:73:bf:86:af:d7:18:df:e5:df:66:15:da:49:fa:0d:25:
         d4:9d:9a:9b:a7:eb:be:17:77:83:2a:1f:88:19:99:f8:04:da:
         9c:b6:2a:1c:2d:f9:cf:f3:58:fb:69:67:df:21:96:00:0b:fd:
         e5:02:73:3f:77:d3:31:2d:6c:34:6a:c4:cf:40:aa:60:da:df:
         6b:88:ec:2c:30:25:6f:4b:fb:f0:91:9c:bc:19:e1:2c:2c:97:
         d1:76:0a:ed:2d:80:31:0f:6b:e9:dd:78:c3:62:61:d9:f0:33:
         f4:f6:8a:a7:ba:b1:31:b5:b9:5d:fc:06:7b:f0:19:6a:fe:90:
         9f:a5:29:bb:b4:d2:1a:5c:64:61:54:d3:24:16:58:b3:5d:9d:
         12:88:72:c4:57:fd:0c:9b:8f:c9:af:be:a7:58:d0:31:58:3e:
         67:59:a4:98:4e:71:ac:16:0f:66:b1:85:80:20:7d:ce:0a:32:
         02:8a:5c:32
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMzA3MDEw
MTMwNDdaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKENBRjhENEE5NThFNjhG
QUQyNUU5NkE3OTRGMjA1MDNBMDlDQkY2MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyb2ZeqiavUD6bnf8qGk1FnutrRZfLBXcScrvFDc6NSTKpp7vN
pRkAfIbV0SfJhzZC19AH7/nKiSFhZrZoMXCeKrBoyZJV73ud0IP76XvgvxYz9f4u
4HC9OEHlJR6Q3JC93N5YDk9YxmRcHQ54AQWz46Gxl+1hnQSv+ET4v9G1YNXaNgRM
vAAFLmfqScoxFoqritmdWcOXxDUhW5UfS96v4ytMO9b2Ym16/ag+Jq9M/gl68sbq
1T/xCn4BaGYt4IROtpgkvdLbofKfFii44RW9+nlOI4X8ScgyNlux3ulD5+LEShxa
bgMtp/LjJYbCrOhyovQgeYRV6g+qApziAeeXAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUyvjUqVjmj60l6Wp5TyBQOgnL9gIwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL3l2alVxVmptajYwbDZXcDVUeUJRT2duTDlnSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDTgTANBgkqhkiG9w0BAQsFAAOCAQEAfnqgialJvPnuE0tWM53oIaFn8XPX
MlbE4k4rNWu/XVd3dYXw5Z0nPE1TkfoR0VHq9XrPJymzG125raaE0qMlEAwKuv10
IbDevzNzv4av1xjf5d9mFdpJ+g0l1J2am6frvhd3gyofiBmZ+ATanLYqHC35z/NY
+2ln3yGWAAv95QJzP3fTMS1sNGrEz0CqYNrfa4jsLDAlb0v78JGcvBnhLCyX0XYK
7S2AMQ9r6d14w2Jh2fAz9PaKp7qxMbW5XfwGe/AZav6Qn6Upu7TSGlxkYVTTJBZY
s12dEohyxFf9DJuPya++p1jQMVg+Z1mkmE5xrBYPZrGFgCB9zgoyAopcMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org