Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/AS-g1sDUb90N3Q2SH_8tkCt3a_I.roa
File:                     AS-g1sDUb90N3Q2SH_8tkCt3a_I.roa (raw, json)
Hash identifier:          yY8/ffondgBLOycFm0XHmdWeIZINcijm4O1ypnVXtSI=
Subject key identifier:   01:2F:A0:D6:C0:D4:6F:DD:0D:DD:0D:92:1F:FF:2D:90:2B:77:6B:F2
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       7A
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/AS-g1sDUb90N3Q2SH_8tkCt3a_I.roa
Signing time:             Thu 22 Jun 2023 00:48:00 +0000
ROA not before:           Thu 22 Jun 2023 00:48:00 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        203.160.16.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:48:00 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=012FA0D6C0D46FDD0DDD0D921FFF2D902B776BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:f1:57:ee:be:63:c0:30:66:9f:20:e8:1e:
                    36:f5:ad:a8:d1:a6:ef:1c:88:2f:e3:bc:d9:4b:c0:
                    04:fd:bc:82:c2:c8:49:fe:6b:95:98:3e:45:61:7d:
                    1e:c8:8c:9c:16:4c:1b:62:74:e8:99:5b:6a:ed:66:
                    ef:8c:96:c9:0c:24:4c:d7:27:1e:f9:5b:3d:c0:00:
                    a7:95:b2:1e:c5:df:bb:11:26:2e:17:11:7f:88:e9:
                    11:dd:6f:bd:4b:b5:90:d6:78:cf:06:56:33:0a:3f:
                    c1:3c:27:ab:ab:77:ff:c2:16:ef:67:d0:bb:30:68:
                    85:6d:68:3c:45:40:fe:f0:13:ee:19:0b:1a:7e:b5:
                    ae:ac:43:f0:55:a7:65:b5:c8:ea:40:51:6d:02:db:
                    f2:0c:fb:c1:a7:e5:52:70:54:4b:00:c3:12:b1:db:
                    ad:ca:9b:e7:ac:87:a8:43:ed:6e:6e:73:9a:ae:7a:
                    55:c7:4a:c5:79:98:ca:e7:7f:28:fa:e6:0e:4e:c4:
                    98:44:ce:3a:97:0e:17:8a:29:a7:e8:2f:7d:f5:4d:
                    7f:8f:1e:85:6e:20:79:a6:62:80:64:3a:54:f0:de:
                    24:b0:05:9c:3d:20:84:3b:c5:a5:9c:7a:77:64:a8:
                    16:8d:7b:c0:98:da:a9:1c:39:5c:c7:0e:01:8b:ae:
                    bb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2F:A0:D6:C0:D4:6F:DD:0D:DD:0D:92:1F:FF:2D:90:2B:77:6B:F2
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/AS-g1sDUb90N3Q2SH_8tkCt3a_I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.160.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:aa:c7:e6:4b:72:27:86:df:8d:04:dc:36:17:5e:74:77:b1:
         0c:92:80:f2:d3:05:3e:09:3a:d2:fc:d6:57:2d:03:7a:1c:7e:
         f5:62:64:72:39:c9:1e:db:04:f1:6f:0a:08:3e:d4:ba:6e:e5:
         ad:10:5a:7a:d6:04:9d:b2:ba:0e:50:e4:e7:a3:8c:78:3f:11:
         43:2c:f9:f7:82:42:ff:57:82:cb:a2:e9:b2:10:06:a1:09:56:
         c6:41:87:28:55:8d:74:7f:7a:78:60:f8:3b:7d:ab:47:16:51:
         86:35:9d:c6:70:30:da:50:e1:e7:c2:12:34:2d:af:16:0a:d9:
         f4:f5:61:b8:ea:9d:99:e5:a7:ad:88:02:e5:3c:79:79:d7:d5:
         8a:a9:50:b1:86:8d:0f:b1:0f:29:99:cd:52:3b:43:e1:6e:ad:
         0e:dd:61:98:a5:63:40:f6:47:75:67:8f:39:81:00:16:a9:5f:
         a2:ac:2f:8e:40:24:0a:c5:c3:d3:4c:ba:fc:80:f1:b6:2f:00:
         22:cd:93:ea:ff:4d:5c:0d:53:a4:cf:cf:f2:22:37:d7:2d:ef:
         7e:00:00:ba:b4:2e:e9:98:c9:89:7c:e9:2b:7a:02:e9:ba:32:
         1e:66:9c:7e:2f:f0:59:2e:39:13:c2:18:64:59:63:8d:43:92:
         7d:49:42:a9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIzMDYyMjAw
NDgwMFoXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoMDEyRkEwRDZDMEQ0NkZE
RDBEREQwRDkyMUZGRjJEOTAyQjc3NkJGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALaZ8VfuvmPAMGafIOgeNvWtqNGm7xyIL+O82UvABP28gsLISf5r
lZg+RWF9HsiMnBZMG2J06Jlbau1m74yWyQwkTNcnHvlbPcAAp5WyHsXfuxEmLhcR
f4jpEd1vvUu1kNZ4zwZWMwo/wTwnq6t3/8IW72fQuzBohW1oPEVA/vAT7hkLGn61
rqxD8FWnZbXI6kBRbQLb8gz7waflUnBUSwDDErHbrcqb56yHqEPtbm5zmq56VcdK
xXmYyud/KPrmDk7EmETOOpcOF4opp+gvffVNf48ehW4geaZigGQ6VPDeJLAFnD0g
hDvFpZx6d2SoFo17wJjaqRw5XMcOAYuuu1cCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQBL6DWwNRv3Q3dDZIf/y2QK3dr8jAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL0FTLWcxc0RVYjkwTjNRMlNIXzh0a0N0M2FfSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBATLoBAwDQYJKoZIhvcNAQELBQADggEBABWqx+ZLcieG340E3DYXXnR3
sQySgPLTBT4JOtL81lctA3ocfvViZHI5yR7bBPFvCgg+1Lpu5a0QWnrWBJ2yug5Q
5OejjHg/EUMs+feCQv9Xgsui6bIQBqEJVsZBhyhVjXR/enhg+Dt9q0cWUYY1ncZw
MNpQ4efCEjQtrxYK2fT1YbjqnZnlp62IAuU8eXnX1YqpULGGjQ+xDymZzVI7Q+Fu
rQ7dYZilY0D2R3VnjzmBABapX6KsL45AJArFw9NMuvyA8bYvACLNk+r/TVwNU6TP
z/IiN9ct734AALq0LumYyYl86St6Aum6Mh5mnH4v8FkuORPCGGRZY41Dkn1JQqk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org