Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/HMRIUweJofynGzXNGbawrXBFYVY.roa
File:                     HMRIUweJofynGzXNGbawrXBFYVY.roa (raw, json)
Hash identifier:          q6S8iedZNvmbBT3ATw1aHkH51fWwwFkfqK1r6EIy2ZY=
Subject key identifier:   1C:C4:48:53:07:89:A1:FC:A7:1B:35:CD:19:B6:B0:AD:70:45:61:56
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       C0
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/HMRIUweJofynGzXNGbawrXBFYVY.roa
Signing time:             Sat 01 Jul 2023 01:31:20 +0000
ROA not before:           Sat 01 Jul 2023 01:31:20 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        113.20.160.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:20 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=1CC448530789A1FCA71B35CD19B6B0AD70456156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:35:98:c8:98:15:14:1e:b0:de:63:9b:84:
                    4d:43:e9:56:f5:50:c8:e0:a5:d5:4d:9a:51:0e:cd:
                    4b:b7:c3:76:44:dd:20:fd:91:5d:ce:73:ec:f0:54:
                    93:16:0f:f2:10:d1:0f:93:04:f7:24:83:84:10:be:
                    34:6a:3f:49:ef:2c:42:92:65:91:6b:91:45:56:3f:
                    ad:58:68:56:42:b9:73:df:6f:b5:5d:cb:4a:8d:44:
                    fe:33:49:9a:6a:51:24:f0:d4:1e:df:83:14:df:b2:
                    36:5e:58:7b:c5:28:b3:66:d4:2e:27:38:f4:64:1b:
                    59:d7:6d:52:7a:3c:3e:5c:e8:9a:ee:c7:cc:b9:ff:
                    47:86:f1:3b:24:bd:2d:9b:f7:cb:0c:a1:72:74:e2:
                    67:b4:fa:bc:5e:65:20:c6:bb:eb:32:60:bb:89:05:
                    38:6a:c5:fa:77:a2:4d:61:0f:bb:ee:6d:bd:3c:c6:
                    32:0c:3c:95:81:2e:53:36:0f:94:40:75:d1:aa:95:
                    83:cf:ea:8f:bb:9a:8a:2c:ab:7d:90:9b:25:8f:c3:
                    ec:8d:cc:1b:11:58:9a:cb:32:de:a6:d9:1d:50:c2:
                    e5:ff:74:89:31:24:bc:01:cc:f4:74:96:e7:39:c2:
                    54:ba:70:1e:1a:54:59:7b:b8:5b:b6:bd:f1:a2:74:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C4:48:53:07:89:A1:FC:A7:1B:35:CD:19:B6:B0:AD:70:45:61:56
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/HMRIUweJofynGzXNGbawrXBFYVY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.20.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:ce:cf:2e:7a:a8:89:d9:53:e8:ad:ef:52:64:d2:73:c5:3c:
         11:5b:b0:e9:25:be:ba:8e:12:f8:f0:c0:7e:91:a4:3e:86:5f:
         9e:d8:52:b3:3c:77:db:02:83:24:85:d4:dc:0f:71:52:c0:3f:
         af:5f:aa:eb:5b:1a:12:d6:9e:9b:b7:ad:1f:bc:a0:e0:12:9e:
         40:93:13:90:34:ce:0a:89:5a:4d:98:5b:41:30:c8:66:50:c5:
         0e:a7:90:39:9b:34:8c:39:6d:d1:14:e8:ad:56:71:00:1d:07:
         55:33:28:fd:8a:07:1b:3a:0a:9b:17:6b:2c:23:5d:02:a5:40:
         ef:54:fb:83:5d:c8:93:1b:b8:d8:1f:9c:62:83:f8:0d:d6:11:
         44:86:10:e9:7b:24:ec:73:bd:05:19:80:b8:09:81:d9:e1:74:
         39:7e:5d:06:15:14:ce:53:03:fe:8d:51:24:ee:af:4e:91:83:
         9e:e5:fe:77:d0:fc:52:f9:1d:36:0f:b2:80:5f:08:70:70:0c:
         9f:16:ed:87:0d:87:ea:cc:88:be:ef:41:dc:fc:e5:58:a4:f5:
         5e:7a:e1:8f:ec:54:3e:41:43:4a:47:aa:8a:aa:5d:17:f4:9d:
         a2:17:f0:c0:1c:35:3a:0e:f6:69:b1:cf:df:84:94:78:d4:7c:
         10:c6:f3:66
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yMzA3MDEw
MTMxMjBaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDFDQzQ0ODUzMDc4OUEx
RkNBNzFCMzVDRDE5QjZCMEFENzA0NTYxNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCa+jWYyJgVFB6w3mObhE1D6Vb1UMjgpdVNmlEOzUu3w3ZE3SD9
kV3Oc+zwVJMWD/IQ0Q+TBPckg4QQvjRqP0nvLEKSZZFrkUVWP61YaFZCuXPfb7Vd
y0qNRP4zSZpqUSTw1B7fgxTfsjZeWHvFKLNm1C4nOPRkG1nXbVJ6PD5c6Jrux8y5
/0eG8TskvS2b98sMoXJ04me0+rxeZSDGu+syYLuJBThqxfp3ok1hD7vubb08xjIM
PJWBLlM2D5RAddGqlYPP6o+7moosq32QmyWPw+yNzBsRWJrLMt6m2R1QwuX/dIkx
JLwBzPR0luc5wlS6cB4aVFl7uFu2vfGidEfjAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUHMRIUweJofynGzXNGbawrXBFYVYwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L0hNUklVd2VKb2Z5bkd6WE5HYmF3clhCRllWWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVxFKAwDQYJKoZIhvcNAQELBQADggEBAI7Ozy56qInZU+it71Jk0nPFPBFb
sOklvrqOEvjwwH6RpD6GX57YUrM8d9sCgySF1NwPcVLAP69fqutbGhLWnpu3rR+8
oOASnkCTE5A0zgqJWk2YW0EwyGZQxQ6nkDmbNIw5bdEU6K1WcQAdB1UzKP2KBxs6
CpsXaywjXQKlQO9U+4NdyJMbuNgfnGKD+A3WEUSGEOl7JOxzvQUZgLgJgdnhdDl+
XQYVFM5TA/6NUSTur06Rg57l/nfQ/FL5HTYPsoBfCHBwDJ8W7YcNh+rMiL7vQdz8
5Vik9V564Y/sVD5BQ0pHqoqqXRf0naIX8MAcNToO9mmxz9+ElHjUfBDG82Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org