Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/3BClJvVwrw2Auo4kNBEi-oNRWA0.roa
File:                     3BClJvVwrw2Auo4kNBEi-oNRWA0.roa (raw, json)
Hash identifier:          8LRDNuYrtxQHc/LF1hfmM1esW/PE3leFLWVsLqLgd6c=
Subject key identifier:   DC:10:A5:26:F5:70:AF:0D:80:BA:8E:24:34:11:22:FA:83:51:58:0D
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0174
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3BClJvVwrw2Auo4kNBEi-oNRWA0.roa
Signing time:             Sat 01 Jul 2023 01:30:41 +0000
ROA not before:           Sat 01 Jul 2023 01:30:41 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        203.139.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:41 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=DC10A526F570AF0D80BA8E24341122FA8351580D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cc:e1:ab:54:f6:a3:7f:42:49:0c:37:2b:b2:
                    1a:96:64:eb:0c:32:d6:24:35:45:13:ae:2e:47:f1:
                    32:30:3b:cd:b8:8d:92:09:79:f6:df:b3:44:12:9f:
                    a1:cc:02:e7:83:3e:a3:15:96:8a:17:ee:7f:b0:a0:
                    7a:e9:86:bd:5a:7a:ff:6d:50:01:9c:a7:1e:b8:60:
                    75:f7:1e:d1:b2:82:57:3c:a0:62:8c:26:bb:20:ec:
                    a8:18:2a:1a:40:f0:93:6d:24:3b:d7:3a:12:f0:82:
                    74:15:3b:21:da:f9:e3:f5:66:a4:ca:c0:70:ac:85:
                    81:c3:c6:76:8f:b5:c6:55:92:ef:07:ff:ea:3b:50:
                    4a:f5:74:1b:3f:99:03:dd:c8:fc:bc:ed:e5:f0:79:
                    e7:84:04:59:dc:9b:30:e3:4f:53:7e:d3:7d:16:2a:
                    9d:51:5d:33:f9:ba:d8:a2:b7:ea:9d:3f:f5:7b:65:
                    71:56:1e:ad:92:76:d0:9f:f4:16:82:2b:13:5e:18:
                    0b:94:d5:06:1f:9c:46:42:33:10:cc:7b:2f:6a:11:
                    ce:4f:1e:ee:35:c8:80:ef:c5:e9:21:e6:f7:d0:7a:
                    3b:a5:a9:8f:30:c6:5b:0c:d3:3f:02:97:0b:4c:fb:
                    aa:6c:67:2d:ae:11:ae:7b:89:1b:ed:43:82:06:c6:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:10:A5:26:F5:70:AF:0D:80:BA:8E:24:34:11:22:FA:83:51:58:0D
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3BClJvVwrw2Auo4kNBEi-oNRWA0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.139.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:4f:ca:52:e0:32:ba:98:d1:df:43:89:7b:fb:1c:1a:ad:d9:
         87:45:f2:ea:1e:80:1d:2b:cf:fd:55:fc:c5:f5:db:d8:63:39:
         9f:dc:08:5a:93:0b:d0:78:bd:df:11:ca:8c:17:8a:87:03:8b:
         fc:a7:de:49:17:19:f8:19:5a:31:56:a9:3a:7b:82:5a:c0:52:
         17:0b:2b:85:60:cf:71:24:ab:81:b3:3a:02:0b:cd:b1:0a:61:
         ae:d7:a7:6a:d3:ab:f6:6d:d6:af:31:59:20:b2:fb:63:bf:13:
         08:ea:21:25:b2:60:c7:41:3f:c4:06:0a:60:7c:da:95:88:84:
         3f:a9:ef:4d:9d:8f:c5:46:9c:53:67:82:34:91:15:53:08:a8:
         53:54:91:e9:aa:b8:b6:8d:f7:84:23:51:88:a3:df:2c:3f:86:
         de:13:72:c0:43:70:b6:9b:64:73:24:0f:f3:55:4b:31:c6:f1:
         ca:21:aa:a7:fb:d1:d0:5d:fe:95:d8:b9:f4:3e:71:be:99:76:
         40:cd:c5:a7:14:21:43:a0:98:02:54:93:f3:b4:c5:56:14:1a:
         48:dd:39:6f:6d:8a:32:ea:ac:5e:54:04:ec:71:8b:6d:05:46:
         1c:ee:96:04:7e:7c:ff:70:05:72:1c:53:d9:10:97:14:df:6b:
         fb:f3:c9:0a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMzA3MDEw
MTMwNDFaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKERDMTBBNTI2RjU3MEFG
MEQ4MEJBOEUyNDM0MTEyMkZBODM1MTU4MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhzOGrVPajf0JJDDcrshqWZOsMMtYkNUUTri5H8TIwO824jZIJ
efbfs0QSn6HMAueDPqMVlooX7n+woHrphr1aev9tUAGcpx64YHX3HtGyglc8oGKM
Jrsg7KgYKhpA8JNtJDvXOhLwgnQVOyHa+eP1ZqTKwHCshYHDxnaPtcZVku8H/+o7
UEr1dBs/mQPdyPy87eXweeeEBFncmzDjT1N+030WKp1RXTP5utiit+qdP/V7ZXFW
Hq2SdtCf9BaCKxNeGAuU1QYfnEZCMxDMey9qEc5PHu41yIDvxekh5vfQejulqY8w
xlsM0z8ClwtM+6psZy2uEa57iRvtQ4IGxmENAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU3BClJvVwrw2Auo4kNBEi+oNRWA0wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxLzNCQ2xKdlZ3cncyQXVvNGtOQkVpLW9OUldBMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXLi6AwDQYJKoZIhvcNAQELBQADggEBAFlPylLgMrqY0d9DiXv7HBqt2YdF
8uoegB0rz/1V/MX129hjOZ/cCFqTC9B4vd8RyowXiocDi/yn3kkXGfgZWjFWqTp7
glrAUhcLK4Vgz3Ekq4GzOgILzbEKYa7Xp2rTq/Zt1q8xWSCy+2O/EwjqISWyYMdB
P8QGCmB82pWIhD+p702dj8VGnFNngjSRFVMIqFNUkemquLaN94QjUYij3yw/ht4T
csBDcLabZHMkD/NVSzHG8cohqqf70dBd/pXYufQ+cb6ZdkDNxacUIUOgmAJUk/O0
xVYUGkjdOW9tijLqrF5UBOxxi20FRhzulgR+fP9wBXIcU9kQlxTfa/vzyQo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org