Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/wB6Kn530Ub-jH9ID7BNcp0dgS70.roa
File:                     wB6Kn530Ub-jH9ID7BNcp0dgS70.roa (raw, json)
Hash identifier:          JEVnbu36cyhzJ5r38tkdOQPaehQzZ4RRzkdDzwAjqL8=
Subject key identifier:   C0:1E:8A:9F:9D:F4:51:BF:A3:1F:D2:03:EC:13:5C:A7:47:60:4B:BD
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       010A
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/wB6Kn530Ub-jH9ID7BNcp0dgS70.roa
Signing time:             Fri 01 Sep 2023 01:29:01 +0000
ROA not before:           Fri 01 Sep 2023 01:29:01 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        124.147.64.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:29:01 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=C01E8A9F9DF451BFA31FD203EC135CA747604BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:21:60:04:9f:01:cb:7d:0d:bb:9a:5d:6d:
                    ea:03:ac:5a:28:ea:ce:68:d0:d9:ac:7c:4c:0a:0c:
                    5e:5f:a2:31:d5:53:70:81:f6:5d:ac:9d:3f:bb:ad:
                    7a:7f:e2:f8:8c:c0:ae:48:77:3a:94:27:63:bd:09:
                    49:5b:79:c4:1a:30:55:11:9b:0a:fc:44:b4:5c:9e:
                    20:8d:a5:8b:33:dd:d8:ac:55:7d:ab:37:c6:21:06:
                    58:82:dd:50:17:fb:c5:cf:ab:b3:b0:82:25:6a:16:
                    29:48:39:a5:e8:85:88:db:a0:31:c7:96:36:0c:8b:
                    82:ff:56:61:f6:39:ad:2f:b9:cc:7b:79:d1:73:62:
                    99:c3:9c:38:d4:a8:36:88:94:d0:56:42:8b:82:72:
                    c8:e0:0b:94:69:d5:96:25:9c:e2:11:34:25:c9:ae:
                    d1:6a:89:d9:2a:46:a7:62:f6:da:1d:9e:a0:d5:79:
                    21:2e:15:aa:f8:81:d3:61:83:ae:7d:b5:4b:87:73:
                    98:26:56:36:ab:de:e0:64:ef:f1:a3:c1:b5:de:80:
                    dd:40:15:55:00:42:50:b0:74:60:64:99:a9:03:9e:
                    72:0b:67:01:99:ee:2b:f4:4b:81:66:db:9b:78:75:
                    b4:c1:af:27:6b:a4:f2:ae:47:d2:f0:dd:90:94:01:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1E:8A:9F:9D:F4:51:BF:A3:1F:D2:03:EC:13:5C:A7:47:60:4B:BD
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/wB6Kn530Ub-jH9ID7BNcp0dgS70.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1d:06:c7:61:76:83:66:58:65:4f:3d:2c:7f:42:8d:5e:19:80:
         b2:88:3b:a6:38:7e:79:4d:f5:8f:da:c0:1c:45:70:98:d5:c2:
         4a:da:e4:39:8c:c8:af:b9:14:60:e9:d4:4c:20:ef:38:f0:66:
         bf:c6:7d:93:5a:38:19:3e:52:d5:db:d5:68:a5:b1:be:fd:8c:
         80:c4:c8:03:ba:cf:e1:02:25:eb:a3:00:b1:3b:b0:52:04:71:
         f5:ec:ff:76:88:17:76:d4:4a:a5:e9:4f:48:bc:3e:54:d4:cd:
         a5:6d:96:2f:86:21:a2:2d:8b:cb:9e:66:46:c5:7e:ce:54:42:
         4d:1f:ba:e7:c9:99:14:50:e8:3e:9f:05:4c:d9:74:ce:b7:67:
         69:ad:32:15:26:d8:c6:1c:b0:1f:20:aa:9b:6d:db:3c:ce:55:
         4c:1f:93:8a:ae:36:96:64:11:21:3f:90:45:61:41:60:2b:36:
         90:37:71:f3:09:a5:0b:be:8a:64:a8:a0:7b:52:fd:d8:fd:f3:
         a4:50:76:36:a8:bb:3a:a5:20:b3:16:f7:cd:9b:49:a0:cb:62:
         07:8b:5a:77:c1:0a:a7:c4:70:2b:88:80:da:1f:fe:68:c3:93:
         aa:c4:50:83:17:b9:1b:2d:06:08:c4:e7:42:52:fc:83:17:f9:
         6a:a4:96:ae
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA5MDEw
MTI5MDFaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEMwMUU4QTlGOURGNDUx
QkZBMzFGRDIwM0VDMTM1Q0E3NDc2MDRCQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGriFgBJ8By30Nu5pdbeoDrFoo6s5o0NmsfEwKDF5fojHVU3CB
9l2snT+7rXp/4viMwK5IdzqUJ2O9CUlbecQaMFURmwr8RLRcniCNpYsz3disVX2r
N8YhBliC3VAX+8XPq7OwgiVqFilIOaXohYjboDHHljYMi4L/VmH2Oa0vucx7edFz
YpnDnDjUqDaIlNBWQouCcsjgC5Rp1ZYlnOIRNCXJrtFqidkqRqdi9todnqDVeSEu
Far4gdNhg659tUuHc5gmVjar3uBk7/GjwbXegN1AFVUAQlCwdGBkmakDnnILZwGZ
7iv0S4Fm25t4dbTBrydrpPKuR9Lw3ZCUAVArAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUwB6Kn530Ub+jH9ID7BNcp0dgS70wHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvd0I2S241MzBVYi1qSDlJRDdCTmNwMGRnUzcwLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BnyTQDANBgkqhkiG9w0BAQsFAAOCAQEAHQbHYXaDZlhlTz0sf0KNXhmAsog7pjh+
eU31j9rAHEVwmNXCStrkOYzIr7kUYOnUTCDvOPBmv8Z9k1o4GT5S1dvVaKWxvv2M
gMTIA7rP4QIl66MAsTuwUgRx9ez/dogXdtRKpelPSLw+VNTNpW2WL4Yhoi2Ly55m
RsV+zlRCTR+658mZFFDoPp8FTNl0zrdnaa0yFSbYxhywHyCqm23bPM5VTB+Tiq42
lmQRIT+QRWFBYCs2kDdx8wmlC76KZKige1L92P3zpFB2Nqi7OqUgsxb3zZtJoMti
B4tad8EKp8RwK4iA2h/+aMOTqsRQgxe5Gy0GCMTnQlL8gxf5aqSWrg==
-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org