Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/oBBsg5xfClYkhE4xQy4qx2MWRNM.roa
File:                     oBBsg5xfClYkhE4xQy4qx2MWRNM.roa (raw, json)
Hash identifier:          gLbb8ZD/4790dBcEvdsAkLenGr1erTY+oZLs3xKYpTU=
Subject key identifier:   A0:10:6C:83:9C:5F:0A:56:24:84:4E:31:43:2E:2A:C7:63:16:44:D3
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       75
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/oBBsg5xfClYkhE4xQy4qx2MWRNM.roa
Signing time:             Thu 22 Jun 2023 00:36:59 +0000
ROA not before:           Thu 22 Jun 2023 00:36:59 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        203.160.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:36:59 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=A0106C839C5F0A5624844E31432E2AC7631644D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:18:c7:ec:75:65:74:6c:97:e9:c8:c6:3b:
                    fb:6d:31:19:64:60:28:2e:1c:2a:6c:41:0f:9b:e0:
                    da:59:e0:3b:d2:50:4b:91:8f:f4:d4:29:1d:6e:f2:
                    4c:b0:fc:24:3d:f5:82:db:61:7e:fe:00:ae:f8:7a:
                    85:a4:57:ca:b2:9e:4d:1b:07:de:d6:a7:5c:63:e5:
                    98:d4:12:9f:c0:ae:9c:e5:e8:19:cd:0f:37:ed:af:
                    10:04:a3:cf:ff:bc:47:eb:46:a6:48:7a:c6:06:53:
                    7f:89:1b:33:3a:0d:87:81:50:a0:1a:76:b9:6a:1e:
                    cd:60:d1:2a:ab:2b:3f:47:d8:7e:89:fc:d9:08:fd:
                    ad:3c:e0:17:7c:cb:f4:be:de:c9:b5:59:fd:16:9d:
                    a2:7a:f4:30:0d:b7:71:5c:da:26:0d:a0:ae:97:12:
                    cb:e4:4e:11:82:c0:d5:cf:73:02:71:29:cd:32:81:
                    cc:de:7a:3c:42:9c:6b:6a:1d:3b:cc:b4:87:73:96:
                    87:68:8d:cd:da:89:40:c6:c7:e6:2a:21:cd:4f:6e:
                    12:97:5a:6f:c4:37:e2:b0:f6:30:eb:52:d6:32:34:
                    ad:f8:82:8b:ad:42:3f:d1:a8:a9:f6:33:22:a4:b6:
                    96:b0:a4:df:c0:bd:d7:99:80:d5:6c:a8:43:84:c8:
                    fe:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:10:6C:83:9C:5F:0A:56:24:84:4E:31:43:2E:2A:C7:63:16:44:D3
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/oBBsg5xfClYkhE4xQy4qx2MWRNM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.160.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:24:f7:42:6a:3b:ed:37:45:59:ba:6d:bc:33:4d:19:5d:36:
         0b:25:01:ca:7d:1e:76:22:85:37:ce:41:3c:3d:40:7e:19:64:
         e9:b9:c9:aa:5f:19:d2:37:c5:a4:d1:8f:e9:9f:38:4e:e7:ca:
         cc:a3:b2:ca:e5:b3:40:3f:78:91:a8:3c:c3:35:e3:c7:58:4b:
         c3:76:19:fa:a0:2b:ed:90:4b:4e:10:1b:a7:90:39:ce:09:ba:
         0e:c1:a3:b8:6e:e6:d0:60:cf:32:c4:30:79:13:b3:b0:90:59:
         57:f7:62:49:92:d5:01:0e:71:31:d9:6b:17:61:d7:6b:07:36:
         cc:3c:f9:8f:df:dc:0d:39:fc:fc:4e:30:01:59:31:e1:3d:35:
         45:75:b9:56:e7:98:84:2b:00:f9:10:58:14:16:3d:34:75:d8:
         fe:e2:5c:df:61:cc:45:df:0c:6e:cc:7d:09:c7:91:e6:5b:df:
         79:57:93:47:80:61:a4:d1:b2:29:e6:f8:23:fe:28:dc:b1:a8:
         fc:02:da:14:f2:de:c9:2c:cf:42:4a:43:b2:91:85:6d:90:38:
         d9:16:24:66:aa:de:e1:a8:32:20:80:cf:9c:69:b4:53:c3:7b:
         a4:f2:07:a0:e1:3b:20:ed:5e:5e:b0:24:92:da:33:15:c5:ea:
         7f:27:73:f7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIzMDYyMjAw
MzY1OVoXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoQTAxMDZDODM5QzVGMEE1
NjI0ODQ0RTMxNDMyRTJBQzc2MzE2NDREMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALLMGMfsdWV0bJfpyMY7+20xGWRgKC4cKmxBD5vg2lngO9JQS5GP
9NQpHW7yTLD8JD31gtthfv4Arvh6haRXyrKeTRsH3tanXGPlmNQSn8CunOXoGc0P
N+2vEASjz/+8R+tGpkh6xgZTf4kbMzoNh4FQoBp2uWoezWDRKqsrP0fYfon82Qj9
rTzgF3zL9L7eybVZ/Radonr0MA23cVzaJg2grpcSy+ROEYLA1c9zAnEpzTKBzN56
PEKca2odO8y0h3OWh2iNzdqJQMbH5iohzU9uEpdab8Q34rD2MOtS1jI0rfiCi61C
P9GoqfYzIqS2lrCk38C915mA1WyoQ4TI/kECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSgEGyDnF8KViSETjFDLirHYxZE0zAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL29CQnNnNXhmQ2xZa2hFNHhReTRxeDJNV1JOTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADLoBwwDQYJKoZIhvcNAQELBQADggEBAEkk90JqO+03RVm6bbwzTRld
NgslAcp9HnYihTfOQTw9QH4ZZOm5yapfGdI3xaTRj+mfOE7nysyjssrls0A/eJGo
PMM148dYS8N2GfqgK+2QS04QG6eQOc4Jug7Bo7hu5tBgzzLEMHkTs7CQWVf3YkmS
1QEOcTHZaxdh12sHNsw8+Y/f3A05/PxOMAFZMeE9NUV1uVbnmIQrAPkQWBQWPTR1
2P7iXN9hzEXfDG7MfQnHkeZb33lXk0eAYaTRsinm+CP+KNyxqPwC2hTy3sksz0JK
Q7KRhW2QONkWJGaq3uGoMiCAz5xptFPDe6TyB6DhOyDtXl6wJJLaMxXF6n8nc/c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org