Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20266/EQ9uMe0L1n4vqu1jalJlQSWeGao.roa
File:                     EQ9uMe0L1n4vqu1jalJlQSWeGao.roa (raw, json)
Hash identifier:          p/ABHxVcKqyirVAJjEl0QMtc5w9+g+THDlo/qKRWebs=
Subject key identifier:   11:0F:6E:31:ED:0B:D6:7E:2F:AA:ED:63:6A:52:65:41:25:9E:19:AA
Certificate issuer:       /CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560
Certificate serial:       03
Authority key identifier: 40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/EQ9uMe0L1n4vqu1jalJlQSWeGao.roa
Signing time:             Sat 19 Oct 2024 00:18:21 +0000
ROA not before:           Sat 19 Oct 2024 00:18:21 +0000
ROA not after:            Sun 19 Oct 2025 00:01:36 +0000
asID:                     18526
IP address blocks:        160.25.134.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 19 Oct 2024 02:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560
        Validity
            Not Before: Oct 19 00:18:21 2024 GMT
            Not After : Oct 19 00:01:36 2025 GMT
        Subject: CN=110F6E31ED0BD67E2FAAED636A526541259E19AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:85:73:cb:a1:58:bb:83:a8:f6:6d:74:cb:
                    b0:1d:46:ce:53:67:7c:21:ca:0b:51:7d:2c:91:a2:
                    9c:4b:42:ae:1d:ba:a4:f8:25:6f:2b:58:1c:5b:ed:
                    7d:e5:04:b7:d7:c7:bf:c5:0b:67:70:d1:c8:6a:13:
                    02:46:fc:c3:0f:e3:93:3a:3f:5c:36:5d:13:7c:b0:
                    db:bc:25:8f:70:0e:bb:ba:1d:88:b3:d6:4b:ec:49:
                    e3:e1:c0:71:3f:8b:a5:bb:bc:9f:e1:6b:78:23:12:
                    10:df:a1:f0:0f:2c:66:8d:59:df:47:08:13:b5:c9:
                    a0:24:fd:ae:c6:ca:da:b7:c4:c9:3d:0e:d6:f7:36:
                    3b:41:8d:28:2f:c4:34:85:96:9b:2c:13:f7:7f:21:
                    c1:cf:c5:eb:1b:42:42:09:c0:be:cc:92:50:aa:0f:
                    f2:73:9b:bd:2e:6c:f9:d1:55:f5:a7:8b:84:71:ef:
                    6c:1f:f3:c5:6c:f3:e5:86:4b:4b:28:0c:2f:76:f4:
                    4c:2d:40:5c:43:6a:20:9c:3e:1a:11:95:49:ba:e5:
                    1f:5c:23:bf:a2:c8:10:66:c7:e8:9e:cd:f8:f1:7a:
                    42:25:b6:bf:39:8f:72:b0:bc:f7:86:bd:67:55:a7:
                    9e:ee:b6:ea:73:22:42:13:d4:6c:ed:84:a6:38:2d:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0F:6E:31:ED:0B:D6:7E:2F:AA:ED:63:6A:52:65:41:25:9E:19:AA
            X509v3 Authority Key Identifier:
                keyid:40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/EQ9uMe0L1n4vqu1jalJlQSWeGao.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:a4:5c:5d:ad:9e:8c:49:8d:fc:5f:3a:ce:07:00:f9:85:c8:
         e4:4b:92:aa:41:f2:76:b1:f3:fc:8c:b9:f1:5b:6a:73:3e:f9:
         3a:14:1f:f6:99:a7:a3:98:23:20:c1:10:08:1c:59:50:f1:ff:
         80:3c:42:85:3e:bd:ee:4b:4a:bb:e6:49:2d:8d:10:e1:8b:e5:
         70:90:17:e2:a6:d4:21:83:55:35:17:fd:c5:ab:e2:9a:d7:5c:
         c6:4a:84:08:77:9c:7f:84:71:fc:b6:4c:87:50:55:85:96:ee:
         fe:a2:1f:c3:60:53:71:6c:e4:35:4e:2f:63:1e:1f:f7:eb:dd:
         be:4b:bd:5e:26:2e:e2:c9:73:58:f9:27:f6:6d:02:ab:8e:30:
         d2:e9:cf:46:f7:81:de:bf:1a:1a:46:da:58:10:80:c4:8f:0b:
         72:4d:f8:48:51:b9:59:42:e3:a7:7d:f4:4b:64:f8:26:63:24:
         20:c6:69:30:0f:3e:00:10:76:c4:17:25:3b:74:26:66:13:a5:
         02:17:50:8d:08:f0:2c:89:f9:f9:e4:7c:a2:5c:52:79:fa:cb:
         a9:e0:59:03:5a:b4:60:cb:0b:ed:30:55:e6:ca:05:61:b4:c4:
         73:97:33:e8:f7:c1:dc:07:80:5b:8c:24:d6:c8:a1:a4:48:a2:
         f9:a7:32:76
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MERB
Q0NFMjAwNkNFN0E2QThDNzZCNTMyMEEwRTE4OTg0NUQxNTYwMB4XDTI0MTAxOTAw
MTgyMVoXDTI1MTAxOTAwMDEzNlowMzExMC8GA1UEAxMoMTEwRjZFMzFFRDBCRDY3
RTJGQUFFRDYzNkE1MjY1NDEyNTlFMTlBQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ+JhXPLoVi7g6j2bXTLsB1GzlNnfCHKC1F9LJGinEtCrh26pPgl
bytYHFvtfeUEt9fHv8ULZ3DRyGoTAkb8ww/jkzo/XDZdE3yw27wlj3AOu7odiLPW
S+xJ4+HAcT+Lpbu8n+FreCMSEN+h8A8sZo1Z30cIE7XJoCT9rsbK2rfEyT0O1vc2
O0GNKC/ENIWWmywT938hwc/F6xtCQgnAvsySUKoP8nObvS5s+dFV9aeLhHHvbB/z
xWzz5YZLSygML3b0TC1AXENqIJw+GhGVSbrlH1wjv6LIEGbH6J7N+PF6QiW2vzmP
crC894a9Z1Wnnu626nMiQhPUbO2EpjgtiicCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQRD24x7QvWfi+q7WNqUmVBJZ4ZqjAfBgNVHSMEGDAWgBRA2sziAGznpqjHa1Mg
oOGJhF0VYDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyNjYvUU5yTTRnQnM1NmFveDJ0VElLRGhpWVJkRldBLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUU5yTTRnQnM1NmFveDJ0VElLRGhp
WVJkRldBLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjY2L0VROXVNZTBMMW40dnF1MWphbEpsUVNXZUdhby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGgGYYwDQYJKoZIhvcNAQELBQADggEBANCkXF2tnoxJjfxfOs4HAPmF
yORLkqpB8nax8/yMufFbanM++ToUH/aZp6OYIyDBEAgcWVDx/4A8QoU+ve5LSrvm
SS2NEOGL5XCQF+Km1CGDVTUX/cWr4prXXMZKhAh3nH+Ecfy2TIdQVYWW7v6iH8Ng
U3Fs5DVOL2MeH/fr3b5LvV4mLuLJc1j5J/ZtAquOMNLpz0b3gd6/GhpG2lgQgMSP
C3JN+EhRuVlC46d99Etk+CZjJCDGaTAPPgAQdsQXJTt0JmYTpQIXUI0I8CyJ+fnk
fKJcUnn6y6ngWQNatGDLC+0wVebKBWG0xHOXM+j3wdwHgFuMJNbIoaRIovmnMnY=
-----END CERTIFICATE-----
Generated at Sat Oct 19 06:59:54 2024 by rpki-client on console-ams.rpki-client.org