Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/_FldMPnC00TFFiWFYiDVZxROPXI.roa
File:                     _FldMPnC00TFFiWFYiDVZxROPXI.roa (raw, json)
Hash identifier:          xgXu6gKLGNmgw92B0LAMC+vKQO5pG9eQuxvHtqXafDw=
Subject key identifier:   FC:59:5D:30:F9:C2:D3:44:C5:16:25:85:62:20:D5:67:14:4E:3D:72
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       5C
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/_FldMPnC00TFFiWFYiDVZxROPXI.roa
Signing time:             Sun 30 Jun 2024 01:32:07 +0000
ROA not before:           Sun 30 Jun 2024 01:32:07 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     4694
IP address blocks:        210.129.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 07:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jun 30 01:32:07 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=FC595D30F9C2D344C51625856220D567144E3D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:49:53:7a:d5:45:ab:e8:1b:73:42:c6:ef:
                    a3:67:2d:de:8b:ca:36:73:af:fb:2a:c7:68:d9:bd:
                    a4:f9:a3:de:f3:c6:19:88:56:2f:79:f4:d1:da:29:
                    48:ec:61:f5:9d:c0:e8:9a:a3:de:df:ec:1c:99:71:
                    b3:80:7b:48:e1:1c:e0:8c:c7:6f:0c:45:58:12:8c:
                    6f:1e:04:b3:b6:fc:25:8f:50:e6:d1:14:8c:25:d7:
                    10:ba:f9:13:68:1b:df:20:0e:9d:1a:8f:d5:6c:5e:
                    f4:5b:2d:be:31:fa:ea:7f:f8:04:0d:a7:de:49:62:
                    10:47:e4:ed:87:ce:fb:41:34:03:1b:55:1f:4c:79:
                    cc:97:1c:16:9b:53:2d:5e:c3:3b:d5:5f:a7:98:9b:
                    2f:c4:9c:cd:9f:0a:19:5d:6e:7d:91:dd:d9:14:0f:
                    c6:3b:bb:49:b2:86:95:c2:50:18:48:c1:48:29:58:
                    08:10:1e:57:ff:15:a8:0b:c9:bb:b8:2a:9b:3d:d2:
                    60:cc:84:c2:a5:65:4b:20:82:c6:48:26:af:f1:c9:
                    89:f6:d3:16:7e:cd:71:47:f0:9f:5d:f2:d0:82:df:
                    51:d9:d9:de:bd:b6:02:59:18:36:67:84:d0:ea:5c:
                    87:a4:9d:82:b0:3d:f6:31:34:96:3d:0d:91:cf:70:
                    ab:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:59:5D:30:F9:C2:D3:44:C5:16:25:85:62:20:D5:67:14:4E:3D:72
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/_FldMPnC00TFFiWFYiDVZxROPXI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:71:b4:a0:1a:7f:bf:14:f1:4d:ec:06:49:0d:ee:15:b1:05:
         4d:2b:b4:0e:10:91:c9:ab:7e:75:52:38:d5:b9:32:6f:06:ba:
         86:ff:64:2d:ab:af:93:0c:83:2b:78:0f:89:70:b3:c7:5a:8c:
         65:bb:5b:b4:9a:04:fe:d1:91:16:02:17:91:d2:1f:e0:43:7c:
         a8:db:7b:98:87:33:b1:e8:c1:1d:9c:f0:2c:6a:bd:f6:aa:59:
         5c:94:42:40:5e:16:72:87:55:08:50:b6:bf:9a:7e:79:29:70:
         19:d1:24:62:49:9a:8f:5b:ee:9f:ad:91:21:14:38:a4:93:31:
         6a:a2:e8:c4:02:20:55:f0:00:c0:97:b3:c7:a6:70:3d:19:e5:
         a5:07:8f:a5:09:a5:d4:d2:97:e8:4d:d0:d2:10:95:36:94:bd:
         de:c4:16:57:79:10:06:6b:ce:6c:8a:30:6c:85:ec:04:63:9e:
         94:19:57:10:54:98:a0:f9:fc:5a:52:37:89:e5:c2:f0:f7:a9:
         54:77:5a:c2:ac:36:4c:db:26:93:e4:a9:c7:44:98:0b:fc:d0:
         cf:b8:ae:3e:f8:0a:ca:d0:a9:8e:ad:10:51:7d:f3:fc:23:71:
         e5:84:3f:85:79:9d:ac:ea:e0:0e:d8:5c:c9:77:9b:fe:12:fe:
         e5:51:48:e5
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTBB
ODIyODhEMkUyM0RCRkE4NzYzOEYzRUI4Qjk5NUUxODk3RTk1MB4XDTI0MDYzMDAx
MzIwN1oXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoRkM1OTVEMzBGOUMyRDM0
NEM1MTYyNTg1NjIyMEQ1NjcxNDRFM0Q3MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALhsSVN61UWr6BtzQsbvo2ct3ovKNnOv+yrHaNm9pPmj3vPGGYhW
L3n00dopSOxh9Z3A6Jqj3t/sHJlxs4B7SOEc4IzHbwxFWBKMbx4Es7b8JY9Q5tEU
jCXXELr5E2gb3yAOnRqP1Wxe9FstvjH66n/4BA2n3kliEEfk7YfO+0E0AxtVH0x5
zJccFptTLV7DO9Vfp5ibL8SczZ8KGV1ufZHd2RQPxju7SbKGlcJQGEjBSClYCBAe
V/8VqAvJu7gqmz3SYMyEwqVlSyCCxkgmr/HJifbTFn7NcUfwn13y0ILfUdnZ3r22
AlkYNmeE0Opch6SdgrA99jE0lj0Nkc9wq98CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBT8WV0w+cLTRMUWJYViINVnFE49cjAfBgNVHSMEGDAWgBRZCoIojS4j2/qHY48+
uLmV4Yl+lTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODMvV1FxQ0tJMHVJOXY2aDJPUFByaTVsZUdKZnBVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV1FxQ0tJMHVJOXY2aDJPUFByaTVs
ZUdKZnBVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgzL19GbGRNUG5DMDBURkZpV0ZZaURWWnhST1BYSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADSgbgwDQYJKoZIhvcNAQELBQADggEBAM9xtKAaf78U8U3sBkkN7hWx
BU0rtA4QkcmrfnVSONW5Mm8Guob/ZC2rr5MMgyt4D4lws8dajGW7W7SaBP7RkRYC
F5HSH+BDfKjbe5iHM7HowR2c8CxqvfaqWVyUQkBeFnKHVQhQtr+afnkpcBnRJGJJ
mo9b7p+tkSEUOKSTMWqi6MQCIFXwAMCXs8emcD0Z5aUHj6UJpdTSl+hN0NIQlTaU
vd7EFld5EAZrzmyKMGyF7ARjnpQZVxBUmKD5/FpSN4nlwvD3qVR3WsKsNkzbJpPk
qcdEmAv80M+4rj74CsrQqY6tEFF98/wjceWEP4V5nazq4A7YXMl3m/4S/uVRSOU=
-----END CERTIFICATE-----
Generated at Mon Oct 28 08:56:17 2024 by rpki-client on console-fra.rpki-client.org