Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/3AABDcM-Q8GUaCDEEJM32XA_GQ0.roa
File:                     3AABDcM-Q8GUaCDEEJM32XA_GQ0.roa (raw, json)
Hash identifier:          aRnuUrzkF6q+YuCkQwnlGKlHBxEigvOKKlAFFf4iNRM=
Subject key identifier:   DC:00:01:0D:C3:3E:43:C1:94:68:20:C4:10:93:37:D9:70:3F:19:0D
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       67
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/3AABDcM-Q8GUaCDEEJM32XA_GQ0.roa
Signing time:             Tue 23 Jul 2024 05:32:46 +0000
ROA not before:           Tue 23 Jul 2024 05:32:46 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     23816
IP address blocks:        202.93.64.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 07:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jul 23 05:32:46 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=DC00010DC33E43C1946820C4109337D9703F190D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:27:58:ca:90:28:f3:ce:05:5c:91:5b:a3:
                    e3:21:02:05:25:23:94:c3:d7:2c:d0:6e:22:d4:d3:
                    9c:15:2b:8c:60:72:d0:5f:9d:3d:58:ce:27:c8:2a:
                    8f:8d:1a:c4:93:85:8a:10:78:8b:15:58:9a:4c:32:
                    63:51:1a:1b:f2:32:01:7b:1e:16:01:df:28:e6:a5:
                    8e:de:50:89:fb:ab:51:bd:5f:63:49:1b:ac:24:b7:
                    0f:d8:08:31:4f:ae:c4:51:b6:4b:ac:9a:de:6a:47:
                    6d:26:95:f7:a2:f2:56:92:39:e9:6c:60:db:a0:81:
                    9f:c1:d7:1d:ff:c6:7d:67:5c:8e:92:f4:a0:c9:58:
                    3d:3c:22:c5:9d:77:93:e6:86:8f:f4:ae:3a:06:f1:
                    0a:77:ad:2e:38:f1:76:47:03:ba:ba:60:4b:39:7e:
                    e9:ea:8c:95:36:12:8d:8a:6a:b2:08:5a:0b:b4:dc:
                    3b:f4:da:72:d5:39:1b:f9:05:74:4e:ab:1e:c0:76:
                    1b:27:47:21:0b:2a:e4:71:53:5e:ab:c7:b6:9d:41:
                    93:b6:2a:0e:bc:aa:d5:16:3c:5b:30:1c:20:e3:b4:
                    e1:58:55:94:e7:ab:6f:48:8d:71:06:4e:f8:fc:14:
                    f8:93:2f:05:75:06:c5:f8:d8:ad:e8:f7:f0:1e:b5:
                    c3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:00:01:0D:C3:3E:43:C1:94:68:20:C4:10:93:37:D9:70:3F:19:0D
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/3AABDcM-Q8GUaCDEEJM32XA_GQ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:84:60:04:6d:b9:94:1f:21:28:04:c0:88:b4:2e:b9:e1:cd:
         ab:a4:4a:e4:a8:0b:d1:1a:98:6f:f5:86:be:0e:7a:a0:30:0c:
         ac:41:e8:86:38:b6:e5:31:03:3c:26:a2:5f:a2:0c:20:af:af:
         50:57:56:c8:33:0a:a5:fb:05:b7:25:0b:88:95:86:43:b5:a7:
         f6:fd:90:20:7d:db:e0:58:ec:57:c5:32:63:97:9a:c6:98:99:
         79:50:e6:80:a1:02:d1:6d:59:bc:00:1e:75:11:89:7a:33:d3:
         b8:7d:2a:d0:58:bf:9e:af:a8:15:10:00:f7:6b:a8:9b:dc:c1:
         18:6c:6d:12:b2:57:41:32:15:7c:61:0b:c9:de:9e:d0:84:17:
         96:7f:57:e6:10:8f:d8:84:22:a8:25:df:19:32:a3:f7:6f:5b:
         37:b0:c6:6d:8c:0f:32:82:0e:6c:51:2b:b0:e6:7d:aa:52:40:
         41:f7:55:b0:50:08:a0:30:5e:96:f6:08:7c:c2:7b:ce:42:09:
         f7:61:88:9b:06:05:cb:26:b6:eb:33:7f:dd:aa:fe:b3:9d:4b:
         37:fb:5d:22:c1:df:72:4f:cb:e9:2a:74:83:47:c4:36:68:0d:
         ff:9d:32:76:15:d3:6c:43:78:b8:02:5f:c0:3e:51:50:c1:fd:
         d4:74:93:62
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF
NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTI0MDcyMzA1
MzI0NloXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoREMwMDAxMERDMzNFNDND
MTk0NjgyMEM0MTA5MzM3RDk3MDNGMTkwRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOCDJ1jKkCjzzgVckVuj4yECBSUjlMPXLNBuItTTnBUrjGBy0F+d
PVjOJ8gqj40axJOFihB4ixVYmkwyY1EaG/IyAXseFgHfKOaljt5QifurUb1fY0kb
rCS3D9gIMU+uxFG2S6ya3mpHbSaV96LyVpI56Wxg26CBn8HXHf/GfWdcjpL0oMlY
PTwixZ13k+aGj/SuOgbxCnetLjjxdkcDurpgSzl+6eqMlTYSjYpqsghaC7TcO/Ta
ctU5G/kFdE6rHsB2GydHIQsq5HFTXqvHtp1Bk7YqDryq1RY8WzAcIOO04VhVlOer
b0iNcQZO+PwU+JMvBXUGxfjYrej38B61w5kCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTcAAENwz5DwZRoIMQQkzfZcD8ZDTAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY
guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X
WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTE2LzNBQUJEY00tUThHVWFDREVFSk0zMlhBX0dRMC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAXKXUAwDQYJKoZIhvcNAQELBQADggEBAGmEYARtuZQfISgEwIi0Lrnh
zaukSuSoC9EamG/1hr4OeqAwDKxB6IY4tuUxAzwmol+iDCCvr1BXVsgzCqX7Bbcl
C4iVhkO1p/b9kCB92+BY7FfFMmOXmsaYmXlQ5oChAtFtWbwAHnURiXoz07h9KtBY
v56vqBUQAPdrqJvcwRhsbRKyV0EyFXxhC8nentCEF5Z/V+YQj9iEIqgl3xkyo/dv
Wzewxm2MDzKCDmxRK7DmfapSQEH3VbBQCKAwXpb2CHzCe85CCfdhiJsGBcsmtusz
f92q/rOdSzf7XSLB33JPy+kqdINHxDZoDf+dMnYV02xDeLgCX8A+UVDB/dR0k2I=
-----END CERTIFICATE-----
Generated at Tue Jul 23 09:23:38 2024 by rpki-client on console-ams.rpki-client.org