Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Ft3Iyv2Vn7yUu6Wd3tB5Au9BGsI.roa
File:                     Ft3Iyv2Vn7yUu6Wd3tB5Au9BGsI.roa (raw, json)
Hash identifier:          0EFVqyqYgZ16c1T1MUo7mPzM0oj7PJ3TPP0BA5KxXJQ=
Subject key identifier:   16:DD:C8:CA:FD:95:9F:BC:94:BB:A5:9D:DE:D0:79:02:EF:41:1A:C2
Certificate issuer:       /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Certificate serial:       4E
Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Ft3Iyv2Vn7yUu6Wd3tB5Au9BGsI.roa
Signing time:             Fri 17 Mar 2023 13:10:15 +0000
ROA not before:           Fri 17 Mar 2023 13:10:15 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     7521
IP address blocks:        2001:3a0::/32 maxlen: 128

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
        Validity
            Not Before: Mar 17 13:10:15 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=16DDC8CAFD959FBC94BBA59DDED07902EF411AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4a:a4:72:9c:5e:29:6a:fc:8f:aa:33:a7:67:
                    a8:a8:d9:a3:58:7b:b3:96:bc:40:7a:20:68:1e:7c:
                    14:30:82:be:8e:62:ad:64:aa:b1:90:14:1f:58:a8:
                    15:2b:12:78:2a:19:26:fe:3e:6e:23:16:50:3f:61:
                    86:64:d6:a9:e7:02:8d:c7:89:58:fa:1c:8f:9f:14:
                    c2:f2:cb:71:f6:42:e6:18:47:b8:c9:ef:f8:77:60:
                    df:97:06:81:42:3d:c1:9e:8a:7d:09:7d:38:c5:68:
                    24:66:c9:43:b9:89:40:be:3b:c7:05:d9:f7:d3:f4:
                    9f:9e:3d:72:7a:cc:00:c2:96:1c:c9:a4:66:d9:3c:
                    67:8c:6f:b4:83:37:79:4d:67:b2:02:0f:b9:20:df:
                    8b:14:07:24:18:57:d4:e3:35:03:71:99:d0:0e:2f:
                    e5:1c:ff:c4:e1:09:0d:d1:ba:bd:8d:54:4e:b8:03:
                    e0:e0:b1:39:29:fd:70:10:63:ec:2d:32:1c:26:94:
                    0a:fb:ff:a5:fc:0c:30:ff:c6:ed:84:68:a7:69:00:
                    46:93:28:90:65:a0:c1:65:c6:9d:3a:b0:b9:a0:42:
                    45:34:c7:e3:b1:e6:13:d3:27:4b:54:b9:0e:4c:59:
                    41:d7:12:12:a8:7f:08:d0:a5:8a:5d:b9:b3:78:1e:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DD:C8:CA:FD:95:9F:BC:94:BB:A5:9D:DE:D0:79:02:EF:41:1A:C2
            X509v3 Authority Key Identifier:
                keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Ft3Iyv2Vn7yUu6Wd3tB5Au9BGsI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:de:d3:b1:9b:37:88:3b:31:5a:b9:95:21:23:66:1d:e6:db:
         c6:af:75:d1:7b:d8:98:7b:38:2e:f1:25:4d:53:8f:a3:b8:a0:
         c9:44:ad:b9:f7:a2:93:05:b2:2d:90:2c:48:77:5f:0e:53:34:
         a1:e5:c6:b0:05:f0:45:63:13:1e:fa:8c:30:3b:ec:a6:40:38:
         00:3f:38:fe:53:cd:c9:93:27:75:00:44:99:c8:cd:7b:a7:a5:
         29:2f:50:56:1c:40:e3:66:fe:2c:f0:95:d3:01:2a:05:14:35:
         2d:87:e6:c8:58:a5:74:d0:05:52:ac:44:97:ec:b0:d7:c7:69:
         58:11:d9:35:bf:9d:d3:f2:77:21:3d:ef:fa:ea:5e:ff:31:fd:
         c1:41:97:ce:b5:94:41:2f:9c:98:f9:5d:63:15:76:3a:62:25:
         26:d8:4b:2f:1d:02:85:ff:4f:7c:51:75:a9:03:34:21:05:d4:
         9d:0d:c7:58:d1:06:1e:e7:c1:8c:76:02:4b:de:b4:11:91:57:
         2e:6a:fa:e3:71:e3:c8:b9:1f:9b:55:e4:9b:50:b1:19:de:eb:
         c8:c0:d9:62:de:0d:ae:a1:f3:f3:6e:36:21:be:84:39:f3:db:
         aa:33:66:e9:4c:86:86:fe:b9:5b:73:48:a7:d1:d2:a1:6d:d7:
         10:b4:f6:df
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMDZC
MUYzRDY0OUU1QTI1QUExMzQwQzE4QkQ2QTdDMjRDRjM2QUY2MB4XDTIzMDMxNzEz
MTAxNVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoMTZEREM4Q0FGRDk1OUZC
Qzk0QkJBNTlEREVEMDc5MDJFRjQxMUFDMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPNKpHKcXilq/I+qM6dnqKjZo1h7s5a8QHogaB58FDCCvo5irWSq
sZAUH1ioFSsSeCoZJv4+biMWUD9hhmTWqecCjceJWPocj58UwvLLcfZC5hhHuMnv
+Hdg35cGgUI9wZ6KfQl9OMVoJGbJQ7mJQL47xwXZ99P0n549cnrMAMKWHMmkZtk8
Z4xvtIM3eU1nsgIPuSDfixQHJBhX1OM1A3GZ0A4v5Rz/xOEJDdG6vY1UTrgD4OCx
OSn9cBBj7C0yHCaUCvv/pfwMMP/G7YRop2kARpMokGWgwWXGnTqwuaBCRTTH47Hm
E9MnS1S5DkxZQdcSEqh/CNClil25s3geHbkCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQW3cjK/ZWfvJS7pZ3e0HkC70EawjAfBgNVHSMEGDAWgBQQax89ZJ5aJaoTQMGL
1qfCTPNq9jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMDMvRUdzZlBXU2VXaVdxRTBEQmk5YW53a3p6YXZZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRUdzZlBXU2VXaVdxRTBEQmk5YW53
a3p6YXZZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDAzL0Z0M0l5djJWbjd5VXU2V2QzdEI1QXU5QkdzSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQOgMA0GCSqGSIb3DQEBCwUAA4IBAQBg3tOxmzeIOzFauZUhI2Yd
5tvGr3XRe9iYezgu8SVNU4+juKDJRK2596KTBbItkCxId18OUzSh5cawBfBFYxMe
+owwO+ymQDgAPzj+U83Jkyd1AESZyM17p6UpL1BWHEDjZv4s8JXTASoFFDUth+bI
WKV00AVSrESX7LDXx2lYEdk1v53T8nchPe/66l7/Mf3BQZfOtZRBL5yY+V1jFXY6
YiUm2EsvHQKF/098UXWpAzQhBdSdDcdY0QYe58GMdgJL3rQRkVcuavrjcePIuR+b
VeSbULEZ3uvIwNli3g2uofPzbjYhvoQ589uqM2bpTIaG/rlbc0in0dKhbdcQtPbf
-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:25 2024 by rpki-client on console-ams.rpki-client.org