Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/aqQGU_31TSIvGINRiiggQ1Q8A3M.roa
File:                     aqQGU_31TSIvGINRiiggQ1Q8A3M.roa (raw, json)
Hash identifier:          tSYcqPn7AhMtkNw8UMd3UEPJ06OgY7egUGz7fVpSouU=
Subject key identifier:   6A:A4:06:53:FD:F5:4D:22:2F:18:83:51:8A:28:20:43:54:3C:03:73
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       2E
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/aqQGU_31TSIvGINRiiggQ1Q8A3M.roa
Signing time:             Thu 22 Jun 2023 00:33:59 +0000
ROA not before:           Thu 22 Jun 2023 00:33:59 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        203.160.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:33:59 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=6AA40653FDF54D222F1883518A282043543C0373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:ee:5d:b3:4e:ad:3b:6f:50:77:a7:6d:3c:
                    17:5b:fa:b5:59:0a:40:80:82:33:e7:cc:9f:cc:00:
                    b0:63:59:20:40:e4:14:09:c3:cc:14:4c:df:17:4e:
                    65:7d:02:5a:d8:48:69:92:95:17:56:6e:01:70:b7:
                    47:fe:2e:c9:3b:c8:7e:d7:b4:b6:25:18:a1:b0:e2:
                    5d:97:4a:87:c0:d9:e1:35:c9:48:05:33:e9:7b:10:
                    a0:2d:e9:77:fc:60:2c:d0:0c:29:57:a3:d6:c1:1f:
                    71:74:56:e5:2e:0b:6c:44:83:a4:36:81:97:b2:59:
                    5e:3b:d3:e0:f3:15:ab:c5:de:3d:5d:5e:19:c5:f8:
                    c0:69:bb:e0:96:ac:2c:0a:4a:de:69:0a:3c:51:59:
                    0b:22:49:5c:d2:d8:b8:25:f0:cc:08:47:b1:75:d4:
                    1b:aa:b3:ad:5a:99:16:38:3e:07:60:3c:67:c7:37:
                    e8:e6:68:8f:59:b4:ef:1f:cc:46:83:4f:22:1a:04:
                    9e:fa:70:e4:fe:be:47:21:10:e8:7c:06:fc:11:b5:
                    60:4d:22:2b:68:a8:0b:3c:0c:34:ec:16:0e:d3:b5:
                    38:10:1d:44:bb:c3:87:2b:c3:d7:4c:73:27:ae:87:
                    d6:42:6d:4f:b2:91:48:d3:91:53:df:30:b6:13:1a:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A4:06:53:FD:F5:4D:22:2F:18:83:51:8A:28:20:43:54:3C:03:73
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/aqQGU_31TSIvGINRiiggQ1Q8A3M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.160.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:63:d2:e3:68:b7:a1:24:93:53:3c:46:8c:01:1b:69:93:
         53:00:f4:0d:7a:3a:9a:d7:94:c0:ee:6b:fe:48:02:fd:fc:ed:
         7c:4b:1a:15:97:61:52:6b:e6:a9:3f:2d:fa:38:49:53:44:28:
         20:48:97:e4:2e:3e:59:1e:9d:a8:7d:87:51:f5:81:fc:3f:57:
         0f:75:23:5c:63:7a:f3:0d:ae:c1:91:d7:0d:06:ab:7f:9a:f1:
         ca:9c:a7:75:cb:5c:bd:a5:1f:25:22:e1:e9:fd:e6:41:3f:69:
         37:95:68:8e:a7:38:63:a1:f6:3f:47:5f:63:28:5c:88:2c:10:
         1c:f9:50:db:d4:1c:d2:79:d3:6b:43:ec:b4:a2:1e:32:29:f5:
         55:e1:36:82:ea:e4:2e:14:3e:80:ca:0a:07:33:6a:c4:18:1d:
         b8:23:7b:5c:58:24:f8:8d:12:3f:9c:01:3b:66:f9:9f:e7:ca:
         fa:7d:1e:f3:4a:79:f2:c5:ec:ab:d3:7e:b6:65:03:07:5e:6c:
         4a:bf:00:50:df:e2:2b:30:80:94:4f:93:84:c9:59:48:a7:09:
         03:09:ab:c2:12:74:59:6d:91:a7:47:8f:d6:82:b0:89:8c:e7:
         af:6a:4e:74:57:fb:1c:33:45:ae:30:f5:16:94:a5:aa:79:c5:
         65:10:21:d2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIzMDYyMjAw
MzM1OVoXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoNkFBNDA2NTNGREY1NEQy
MjJGMTg4MzUxOEEyODIwNDM1NDNDMDM3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM3N7l2zTq07b1B3p208F1v6tVkKQICCM+fMn8wAsGNZIEDkFAnD
zBRM3xdOZX0CWthIaZKVF1ZuAXC3R/4uyTvIfte0tiUYobDiXZdKh8DZ4TXJSAUz
6XsQoC3pd/xgLNAMKVej1sEfcXRW5S4LbESDpDaBl7JZXjvT4PMVq8XePV1eGcX4
wGm74JasLApK3mkKPFFZCyJJXNLYuCXwzAhHsXXUG6qzrVqZFjg+B2A8Z8c36OZo
j1m07x/MRoNPIhoEnvpw5P6+RyEQ6HwG/BG1YE0iK2ioCzwMNOwWDtO1OBAdRLvD
hyvD10xzJ66H1kJtT7KRSNORU98wthMarsUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRqpAZT/fVNIi8Yg1GKKCBDVDwDczAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL2FxUUdVXzMxVFNJdkdJTlJpaWdnUTFROEEzTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADLoBEwDQYJKoZIhvcNAQELBQADggEBAKQOY9LjaLehJJNTPEaMARtp
k1MA9A16OprXlMDua/5IAv387XxLGhWXYVJr5qk/Lfo4SVNEKCBIl+QuPlkenah9
h1H1gfw/Vw91I1xjevMNrsGR1w0Gq3+a8cqcp3XLXL2lHyUi4en95kE/aTeVaI6n
OGOh9j9HX2MoXIgsEBz5UNvUHNJ502tD7LSiHjIp9VXhNoLq5C4UPoDKCgczasQY
Hbgje1xYJPiNEj+cATtm+Z/nyvp9HvNKefLF7KvTfrZlAwdebEq/AFDf4iswgJRP
k4TJWUinCQMJq8ISdFltkadHj9aCsImM569qTnRX+xwzRa4w9RaUpap5xWUQIdI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org