Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/m6QnF351AVSlnYlyhOOx8aTDQEQ.roa
File:                     m6QnF351AVSlnYlyhOOx8aTDQEQ.roa (raw, json)
Hash identifier:          yH117SCZ3qO7cxRBiQsdKITxqLS6dXVGCoz37Z2EYgI=
Subject key identifier:   9B:A4:27:17:7E:75:01:54:A5:9D:89:72:84:E3:B1:F1:A4:C3:40:44
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       012E
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/m6QnF351AVSlnYlyhOOx8aTDQEQ.roa
Signing time:             Sun 01 Oct 2023 01:28:41 +0000
ROA not before:           Sun 01 Oct 2023 01:28:41 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2497
IP address blocks:        133.238.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:28:41 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=9BA427177E750154A59D897284E3B1F1A4C34044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:fa:03:58:1f:99:33:53:5a:a2:8b:4c:7a:
                    34:2a:a3:61:5e:5c:49:17:f6:10:24:56:0c:73:67:
                    b4:a3:1d:9d:76:54:9c:e4:ad:83:a4:80:87:f9:6d:
                    5b:10:3f:9b:05:7e:f9:de:ab:e9:a8:e4:3b:8e:ef:
                    01:48:40:e1:a1:f3:69:93:a4:8b:78:ef:b6:d5:23:
                    59:9e:ce:32:e0:be:8a:c4:9d:9d:71:42:b2:cc:cd:
                    07:0d:ce:3f:0b:1d:35:b5:7a:d7:75:45:5b:62:f7:
                    35:b9:2e:3a:7e:0c:4d:f3:9a:1b:5d:b5:01:17:d8:
                    43:f3:4a:7d:96:26:70:b2:11:46:29:a4:4f:4e:33:
                    f8:d5:61:44:e2:64:81:f5:42:cb:4e:e9:4e:54:9a:
                    de:42:05:d1:47:87:c8:7f:b8:93:c7:17:2d:c5:1d:
                    43:66:2c:22:8e:81:4b:14:87:03:c0:19:e9:61:42:
                    be:85:c3:76:eb:41:5c:b8:d9:e1:54:47:b4:60:de:
                    a6:cf:44:e0:e9:a5:40:1b:35:a2:1c:ba:d7:ba:68:
                    65:49:f6:42:5f:4b:10:e1:97:ec:85:06:d4:f2:5c:
                    16:b6:b8:86:46:96:9d:c5:18:d6:26:e7:25:01:67:
                    e6:b5:87:ff:98:6a:a5:e4:76:10:95:59:f0:8b:59:
                    fa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A4:27:17:7E:75:01:54:A5:9D:89:72:84:E3:B1:F1:A4:C3:40:44
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/m6QnF351AVSlnYlyhOOx8aTDQEQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.238.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1a:07:e1:e3:22:6f:59:e7:f3:aa:65:65:2d:8e:5b:ed:7e:39:
         7b:0b:f1:b4:78:62:4a:2f:89:aa:9f:d3:f7:dd:f3:46:ff:be:
         c1:b3:50:47:0c:59:b1:a3:b6:94:21:26:80:aa:db:8b:23:45:
         95:da:a1:96:1a:9e:fd:42:91:16:3e:78:e2:4f:41:77:c5:9e:
         f7:a2:ac:bb:2e:bc:a7:07:5f:f4:10:e3:8e:90:d1:f1:14:36:
         91:79:cd:b9:b4:3a:39:3e:68:f0:01:4b:a0:82:0e:4b:30:b0:
         82:ff:9c:97:23:26:83:3e:e6:40:10:c8:bb:0e:14:e3:ca:c1:
         d7:7c:48:15:78:6b:fc:ec:2b:91:ea:19:fc:19:f2:bc:e5:f0:
         1c:c7:48:d4:c7:24:44:d1:e4:e4:af:29:09:ac:1d:36:74:a8:
         74:cc:cd:c5:21:1e:00:f6:ae:bb:97:f8:63:1e:f5:47:6b:d8:
         7d:43:c9:12:ba:c7:75:15:a7:cd:1a:63:fd:c7:ca:c4:0e:14:
         97:d6:6e:3f:b2:d8:77:54:75:40:15:f0:6b:28:bc:f4:e6:cf:
         3d:77:81:55:46:29:b0:f9:35:1e:e6:5f:b6:5e:c3:8e:c4:8b:
         52:c4:2a:d4:87:43:52:ea:c0:c4:9e:20:cf:16:b8:6f:6d:94:
         1f:ca:31:57
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzEwMDEw
MTI4NDFaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDlCQTQyNzE3N0U3NTAx
NTRBNTlEODk3Mjg0RTNCMUYxQTRDMzQwNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtzfoDWB+ZM1NaootMejQqo2FeXEkX9hAkVgxzZ7SjHZ12VJzk
rYOkgIf5bVsQP5sFfvneq+mo5DuO7wFIQOGh82mTpIt477bVI1mezjLgvorEnZ1x
QrLMzQcNzj8LHTW1etd1RVti9zW5Ljp+DE3zmhtdtQEX2EPzSn2WJnCyEUYppE9O
M/jVYUTiZIH1QstO6U5Umt5CBdFHh8h/uJPHFy3FHUNmLCKOgUsUhwPAGelhQr6F
w3brQVy42eFUR7Rg3qbPRODppUAbNaIcute6aGVJ9kJfSxDhl+yFBtTyXBa2uIZG
lp3FGNYm5yUBZ+a1h/+YaqXkdhCVWfCLWfr5AgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUm6QnF351AVSlnYlyhOOx8aTDQEQwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvbTZRbkYzNTFBVlNsbllseWhPT3g4YVREUUVRLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
B4XugDANBgkqhkiG9w0BAQsFAAOCAQEAGgfh4yJvWefzqmVlLY5b7X45ewvxtHhi
Si+Jqp/T993zRv++wbNQRwxZsaO2lCEmgKrbiyNFldqhlhqe/UKRFj544k9Bd8We
96Ksuy68pwdf9BDjjpDR8RQ2kXnNubQ6OT5o8AFLoIIOSzCwgv+clyMmgz7mQBDI
uw4U48rB13xIFXhr/OwrkeoZ/BnyvOXwHMdI1MckRNHk5K8pCawdNnSodMzNxSEe
APauu5f4Yx71R2vYfUPJErrHdRWnzRpj/cfKxA4Ul9ZuP7LYd1R1QBXwayi89ObP
PXeBVUYpsPk1HuZftl7DjsSLUsQq1IdDUurAxJ4gzxa4b22UH8oxVw==
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:55 2024 by rpki-client on console-ams.rpki-client.org