Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/yv5z5-eCv2UDXgZ1M4_jnB1ACnM.roa
File:                     yv5z5-eCv2UDXgZ1M4_jnB1ACnM.roa (raw, json)
Hash identifier:          1oRi7cgnHvldKF6716jfI3Y8xKX/SnuSK/SxTgJUCgs=
Subject key identifier:   CA:FE:73:E7:E7:82:BF:65:03:5E:06:75:33:8F:E3:9C:1D:40:0A:73
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       4C
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/yv5z5-eCv2UDXgZ1M4_jnB1ACnM.roa
Signing time:             Sat 31 Aug 2024 01:31:02 +0000
ROA not before:           Sat 31 Aug 2024 01:31:02 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     23637
IP address blocks:        203.140.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 06:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug 31 01:31:02 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=CAFE73E7E782BF65035E0675338FE39C1D400A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:26:29:3a:a6:14:11:b3:97:c1:96:f3:3a:76:
                    b9:70:e0:c0:0b:a7:8c:f0:38:15:91:3a:d5:ac:32:
                    8e:ad:32:5b:db:79:5a:49:54:b1:c0:65:3c:1b:ae:
                    5c:38:27:37:d5:30:28:4b:e5:13:a0:e6:fc:31:64:
                    86:73:a8:97:ba:bf:6a:7b:fe:ed:43:10:cf:cf:0f:
                    b2:d4:54:36:e6:04:fa:cd:35:b1:f1:67:d5:77:67:
                    ec:6e:8b:64:04:17:fe:0c:ac:5b:91:0c:9f:c0:5e:
                    8e:28:fa:32:7f:83:36:1a:ad:93:61:64:53:0b:69:
                    78:14:ab:cc:1e:da:ec:bf:d8:8e:b0:ae:9f:61:c4:
                    2a:fc:34:8f:71:bb:8a:54:95:1a:37:db:e7:ba:87:
                    a4:cb:d0:f2:21:7b:76:b1:2f:df:d1:4c:ec:13:8c:
                    33:9f:7f:03:02:14:55:1d:b0:f8:f3:21:ce:99:51:
                    56:92:ca:0c:93:0a:fc:bb:e4:6f:0f:be:10:61:68:
                    69:57:2a:3f:ca:bd:48:1b:21:a2:eb:cc:60:d5:06:
                    8d:36:c6:dd:b1:30:70:ef:ee:3e:dd:9a:06:a7:26:
                    e5:92:07:01:a5:b8:da:a9:11:04:3d:dc:18:2e:07:
                    dd:c8:0b:ca:73:67:ec:0f:24:b4:f1:b0:f8:72:45:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FE:73:E7:E7:82:BF:65:03:5E:06:75:33:8F:E3:9C:1D:40:0A:73
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/yv5z5-eCv2UDXgZ1M4_jnB1ACnM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.140.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:8f:f4:b8:1c:c4:21:e3:7b:ee:42:f0:82:8a:81:d8:27:a0:
         ec:e8:c8:f2:fd:3f:a8:0d:30:a5:8d:54:78:fd:a5:38:e9:05:
         50:65:86:e0:92:6a:53:4e:31:63:63:80:87:0d:11:aa:71:29:
         f1:d7:f7:53:3c:15:f0:86:20:2e:d5:ff:c7:0c:8e:2a:f2:1b:
         35:2c:ae:b7:b5:08:ce:e1:24:53:a6:f1:3d:65:3f:53:26:fa:
         8b:d1:cf:6e:0d:f1:7e:73:94:e4:ed:64:23:05:c0:75:f2:18:
         d6:b1:8b:48:24:88:bc:8f:7f:75:28:c4:9b:ce:25:39:cc:3f:
         17:6d:1b:b0:34:05:69:4f:6d:13:56:69:ed:a0:d5:28:a8:ce:
         bf:59:fd:6b:dd:1b:28:e3:5b:b7:34:aa:15:d1:92:1c:df:37:
         85:7a:e4:46:43:52:12:7a:ce:f1:d7:5b:fb:5b:21:fb:02:ca:
         2c:b9:10:69:f5:65:68:dc:3d:10:07:8f:d0:62:fd:75:4d:76:
         78:5a:0d:eb:03:fb:c6:b4:ab:3a:7b:2f:d5:2a:67:74:c6:31:
         b9:4a:0f:3a:7b:b6:63:76:b4:c8:45:dc:be:8c:f7:01:ba:b9:
         e2:e2:22:05:54:c2:9b:c7:ce:2b:ca:23:7f:a1:96:ef:07:7c:
         04:d0:e6:4f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF
NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTI0MDgzMTAx
MzEwMloXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0FGRTczRTdFNzgyQkY2
NTAzNUUwNjc1MzM4RkUzOUMxRDQwMEE3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPEmKTqmFBGzl8GW8zp2uXDgwAunjPA4FZE61awyjq0yW9t5WklU
scBlPBuuXDgnN9UwKEvlE6Dm/DFkhnOol7q/anv+7UMQz88PstRUNuYE+s01sfFn
1Xdn7G6LZAQX/gysW5EMn8Bejij6Mn+DNhqtk2FkUwtpeBSrzB7a7L/YjrCun2HE
Kvw0j3G7ilSVGjfb57qHpMvQ8iF7drEv39FM7BOMM59/AwIUVR2w+PMhzplRVpLK
DJMK/Lvkbw++EGFoaVcqP8q9SBshouvMYNUGjTbG3bEwcO/uPt2aBqcm5ZIHAaW4
2qkRBD3cGC4H3cgLynNn7A8ktPGw+HJFBvMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTK/nPn54K/ZQNeBnUzj+OcHUAKczAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n
oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z
Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIxMDQyL3l2NXo1LWVDdjJVRFhnWjFNNF9qbkIxQUNuTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBATLjOAwDQYJKoZIhvcNAQELBQADggEBACKP9LgcxCHje+5C8IKKgdgn
oOzoyPL9P6gNMKWNVHj9pTjpBVBlhuCSalNOMWNjgIcNEapxKfHX91M8FfCGIC7V
/8cMjiryGzUsrre1CM7hJFOm8T1lP1Mm+ovRz24N8X5zlOTtZCMFwHXyGNaxi0gk
iLyPf3UoxJvOJTnMPxdtG7A0BWlPbRNWae2g1Siozr9Z/WvdGyjjW7c0qhXRkhzf
N4V65EZDUhJ6zvHXW/tbIfsCyiy5EGn1ZWjcPRAHj9Bi/XVNdnhaDesD+8a0qzp7
L9UqZ3TGMblKDzp7tmN2tMhF3L6M9wG6ueLiIgVUwpvHzivKI3+hlu8HfATQ5k8=
-----END CERTIFICATE-----
Generated at Tue Oct 1 08:29:41 2024 by rpki-client on console-fra.rpki-client.org