Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20080/uwkvAJEV6mxyWzosc8OGFYI_qVU.roa
File:                     uwkvAJEV6mxyWzosc8OGFYI_qVU.roa (raw, json)
Hash identifier:          tRJkYAkoo2M+I+e2gI8If5+U3njxBMOosA1VPhbEZ1I=
Subject key identifier:   BB:09:2F:00:91:15:EA:6C:72:5B:3A:2C:73:C3:86:15:82:3F:A9:55
Certificate issuer:       /CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Certificate serial:       2C
Authority key identifier: E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/uwkvAJEV6mxyWzosc8OGFYI_qVU.roa
Signing time:             Fri 17 Mar 2023 13:10:58 +0000
ROA not before:           Fri 17 Mar 2023 13:10:58 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     63786
IP address blocks:        103.123.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
        Validity
            Not Before: Mar 17 13:10:58 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=BB092F009115EA6C725B3A2C73C38615823FA955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7c:85:3f:bb:94:a2:bc:cb:49:39:ba:e0:89:
                    53:3e:b5:56:1a:2c:09:fc:76:b1:6a:ef:e1:eb:cc:
                    33:90:a2:c8:48:da:08:01:c0:7e:bf:02:7f:eb:3a:
                    65:f6:26:c1:b3:4b:d5:47:fd:d1:c3:0e:00:c1:44:
                    a3:40:84:2d:a1:8e:e4:fe:93:13:97:a9:a4:16:82:
                    30:b1:4f:b3:96:d5:fe:8f:4a:97:02:87:17:86:8c:
                    71:b5:a1:32:23:f7:cb:47:26:59:a3:40:24:50:39:
                    28:09:1d:15:b3:85:9b:41:66:c6:49:9a:ea:d6:ed:
                    ca:94:7b:b0:d9:66:20:85:65:dc:57:21:05:31:7c:
                    3b:9c:02:bd:a1:8a:93:30:4d:d0:10:f7:c3:40:b7:
                    ea:51:d5:8e:96:4e:a4:ce:d0:e9:e4:33:fe:1d:2f:
                    5d:07:73:66:ed:49:86:c1:6c:dd:9e:2a:b5:8e:22:
                    2d:d0:05:fa:a8:ec:48:01:6a:4a:78:92:fe:fc:ed:
                    3d:7a:87:2b:6a:15:f4:b7:c2:e3:69:df:22:49:a7:
                    53:0d:db:29:4f:68:17:92:f4:13:1b:14:2d:63:17:
                    21:42:74:b2:de:4a:35:fd:7b:cb:c1:39:de:a7:e9:
                    23:b3:68:d0:9d:1f:45:d9:a0:58:8c:91:66:cc:b8:
                    b4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:09:2F:00:91:15:EA:6C:72:5B:3A:2C:73:C3:86:15:82:3F:A9:55
            X509v3 Authority Key Identifier:
                keyid:E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/uwkvAJEV6mxyWzosc8OGFYI_qVU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:64:6a:fb:99:e4:9f:c6:98:46:10:1d:ce:14:df:7f:7e:23:
         18:38:62:23:d4:a3:66:1c:dd:99:d6:8d:75:35:d1:76:96:eb:
         1d:ec:12:68:7d:20:72:2b:99:e4:46:1a:bf:a1:96:d2:b9:c3:
         0a:ce:2a:b1:b7:3a:0e:20:87:a2:40:38:56:80:aa:7d:cb:c9:
         7d:41:59:a4:2b:61:88:7f:f7:8b:79:b0:ed:e8:1a:35:50:d7:
         fe:15:cd:92:ce:bb:bd:38:b4:c6:87:6c:83:14:81:79:08:b4:
         5e:8a:71:12:19:fe:c2:61:75:a5:73:ae:c2:39:e1:95:24:d9:
         05:fa:79:6a:f6:c5:f8:9d:ff:33:9c:f5:1c:df:30:ae:4e:31:
         c7:c9:ed:ba:5d:4b:2f:78:31:0f:01:95:ac:02:07:c6:01:dd:
         e0:64:7c:c1:e8:49:ec:bf:69:14:2b:1e:d5:dc:70:5d:b8:95:
         ad:33:cc:38:8b:d1:cf:85:ec:10:2c:45:af:90:eb:6d:a8:61:
         48:2b:62:f9:79:af:57:62:84:87:0c:6c:3a:9e:74:a4:ec:e8:
         1a:15:57:8a:0e:31:92:08:db:c4:ed:3c:65:19:1a:be:cb:db:
         bf:36:fb:8d:95:d8:cb:4b:62:89:f0:db:c2:e8:84:af:fc:e0:
         b5:80:ed:d0
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFOTMy
NkI2QURGMjlBMzk0RTg3QzA5MERDNjE3NDREOEQ4NkMzMzgzMB4XDTIzMDMxNzEz
MTA1OFoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoQkIwOTJGMDA5MTE1RUE2
QzcyNUIzQTJDNzNDMzg2MTU4MjNGQTk1NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMp8hT+7lKK8y0k5uuCJUz61VhosCfx2sWrv4evMM5CiyEjaCAHA
fr8Cf+s6ZfYmwbNL1Uf90cMOAMFEo0CELaGO5P6TE5eppBaCMLFPs5bV/o9KlwKH
F4aMcbWhMiP3y0cmWaNAJFA5KAkdFbOFm0Fmxkma6tbtypR7sNlmIIVl3FchBTF8
O5wCvaGKkzBN0BD3w0C36lHVjpZOpM7Q6eQz/h0vXQdzZu1JhsFs3Z4qtY4iLdAF
+qjsSAFqSniS/vztPXqHK2oV9LfC42nfIkmnUw3bKU9oF5L0ExsULWMXIUJ0st5K
Nf17y8E53qfpI7No0J0fRdmgWIyRZsy4tIMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBS7CS8AkRXqbHJbOixzw4YVgj+pVTAfBgNVHSMEGDAWgBTpMmtq3ymjlOh8CQ3G
F0TY2GwzgzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODAvNlRKcmF0OHBvNVRvZkFrTnhoZEUyTmhzTTRNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNlRKcmF0OHBvNVRvZkFrTnhoZEUy
TmhzTTRNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgwL3V3a3ZBSkVWNm14eVd6b3NjOE9HRllJX3FWVS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABne7YwDQYJKoZIhvcNAQELBQADggEBAI5kavuZ5J/GmEYQHc4U339+
Ixg4YiPUo2Yc3ZnWjXU10XaW6x3sEmh9IHIrmeRGGr+hltK5wwrOKrG3Og4gh6JA
OFaAqn3LyX1BWaQrYYh/94t5sO3oGjVQ1/4VzZLOu704tMaHbIMUgXkItF6KcRIZ
/sJhdaVzrsI54ZUk2QX6eWr2xfid/zOc9RzfMK5OMcfJ7bpdSy94MQ8BlawCB8YB
3eBkfMHoSey/aRQrHtXccF24la0zzDiL0c+F7BAsRa+Q622oYUgrYvl5r1dihIcM
bDqedKTs6BoVV4oOMZII28TtPGUZGr7L2782+42V2MtLYonw28LohK/84LWA7dA=
-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org