Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/L2sKc22CaSvBzrGTxVAU2Fgj798.roa
File:                     L2sKc22CaSvBzrGTxVAU2Fgj798.roa (raw, json)
Hash identifier:          Cwj1m4FxnyBB+VawdkNyeu14zH5aZaFMfy/wYJp9HcE=
Subject key identifier:   2F:6B:0A:73:6D:82:69:2B:C1:CE:B1:93:C5:50:14:D8:58:23:EF:DF
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       C7
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/L2sKc22CaSvBzrGTxVAU2Fgj798.roa
Signing time:             Sat 01 Jul 2023 01:31:24 +0000
ROA not before:           Sat 01 Jul 2023 01:31:24 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        210.188.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:24 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=2F6B0A736D82692BC1CEB193C55014D85823EFDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a0:f4:f9:91:9c:3a:e6:96:d4:fc:b0:fc:8b:
                    7e:30:58:7e:03:b1:23:a0:df:da:3b:4b:59:f8:f0:
                    bd:f6:97:36:68:5a:5e:46:09:89:7a:69:f9:4e:1b:
                    76:82:d0:86:5b:8c:0c:0a:5e:1d:e8:23:44:e7:8d:
                    e5:c7:e6:5c:45:88:44:90:91:a9:d6:98:41:8a:42:
                    af:1c:63:a5:c0:14:62:84:69:4e:96:46:10:f5:99:
                    58:a8:86:15:83:de:b7:b6:a2:5b:63:f6:47:ce:f7:
                    2f:93:30:b8:8c:5e:80:f0:44:87:c8:ef:b1:cd:55:
                    9b:93:58:69:25:b9:da:98:71:4e:82:1f:84:37:8c:
                    77:04:a4:d3:f1:91:95:22:17:f1:d0:d3:d0:c3:bc:
                    6a:2a:7e:44:2b:06:27:13:c6:36:93:8c:a6:2d:ac:
                    49:13:bd:cb:7c:a2:47:77:fb:13:e5:22:dd:4e:b8:
                    44:35:c2:36:70:8d:b7:70:52:65:46:ef:2e:ed:72:
                    2d:a8:a4:93:13:fb:ba:04:5b:63:2c:a0:a8:9c:00:
                    88:67:d8:0a:cd:01:2d:e1:22:1e:5e:4c:d1:1b:16:
                    52:0b:a6:c6:0e:a9:39:24:ac:93:b5:6d:00:80:27:
                    23:f8:1f:de:af:c4:07:2c:c2:91:65:9f:52:63:65:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6B:0A:73:6D:82:69:2B:C1:CE:B1:93:C5:50:14:D8:58:23:EF:DF
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/L2sKc22CaSvBzrGTxVAU2Fgj798.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:02:f7:dc:11:3f:01:6c:98:4c:5e:17:98:5c:98:82:9f:1c:
         01:b8:54:c5:b3:cb:e4:96:25:ee:38:2b:1b:1e:6e:ab:75:ea:
         56:57:b6:7d:fc:30:91:23:21:d8:ad:ba:d0:8b:2d:02:a4:ac:
         a6:8a:d6:88:ab:ff:06:e6:44:8e:90:0a:2d:05:ff:18:77:98:
         7e:27:33:cf:aa:e8:e2:ba:19:4d:10:81:97:ca:ff:02:73:bb:
         b4:39:1a:58:0c:05:e7:fe:58:df:17:ba:9f:42:a0:8b:bf:9b:
         cb:a4:1c:a7:72:8e:f8:a1:c3:a8:1f:d3:33:c4:82:9b:39:c9:
         28:b2:8e:27:94:a1:89:88:c4:e4:96:9f:3c:09:53:8c:3d:64:
         24:ad:d3:48:5c:1d:c4:b6:70:c2:69:ed:30:c5:bd:41:d9:5d:
         0e:75:9f:1d:8f:f2:a0:61:63:75:d8:d7:43:b0:17:68:02:6e:
         12:70:4e:14:91:18:83:00:a9:7f:9d:cc:8f:1a:03:61:75:0a:
         d5:86:70:e2:33:c3:27:59:a2:cd:54:0a:cd:fa:26:ef:62:83:
         92:f2:f5:23:f8:90:1b:87:a9:3c:3a:e9:8f:a6:5f:0e:b3:60:
         9f:92:90:bf:86:1d:2c:93:77:fb:53:be:ac:11:99:46:a8:31:
         7d:2f:05:b3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yMzA3MDEw
MTMxMjRaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDJGNkIwQTczNkQ4MjY5
MkJDMUNFQjE5M0M1NTAxNEQ4NTgyM0VGREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8oPT5kZw65pbU/LD8i34wWH4DsSOg39o7S1n48L32lzZoWl5G
CYl6aflOG3aC0IZbjAwKXh3oI0TnjeXH5lxFiESQkanWmEGKQq8cY6XAFGKEaU6W
RhD1mViohhWD3re2oltj9kfO9y+TMLiMXoDwRIfI77HNVZuTWGkludqYcU6CH4Q3
jHcEpNPxkZUiF/HQ09DDvGoqfkQrBicTxjaTjKYtrEkTvct8okd3+xPlIt1OuEQ1
wjZwjbdwUmVG7y7tci2opJMT+7oEW2MsoKicAIhn2ArNAS3hIh5eTNEbFlILpsYO
qTkkrJO1bQCAJyP4H96vxAcswpFln1JjZRl3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUL2sKc22CaSvBzrGTxVAU2Fgj798wHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L0wyc0tjMjJDYVN2QnpyR1R4VkFVMkZnajc5OC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXSvOAwDQYJKoZIhvcNAQELBQADggEBAK0C99wRPwFsmExeF5hcmIKfHAG4
VMWzy+SWJe44Kxsebqt16lZXtn38MJEjIditutCLLQKkrKaK1oir/wbmRI6QCi0F
/xh3mH4nM8+q6OK6GU0QgZfK/wJzu7Q5GlgMBef+WN8Xup9CoIu/m8ukHKdyjvih
w6gf0zPEgps5ySiyjieUoYmIxOSWnzwJU4w9ZCSt00hcHcS2cMJp7TDFvUHZXQ51
nx2P8qBhY3XY10OwF2gCbhJwThSRGIMAqX+dzI8aA2F1CtWGcOIzwydZos1UCs36
Ju9ig5Ly9SP4kBuHqTw66Y+mXw6zYJ+SkL+GHSyTd/tTvqwRmUaoMX0vBbM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org