Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/7J0N6CqmDPJskX1d-lwtKB3tTOE.roa
File:                     7J0N6CqmDPJskX1d-lwtKB3tTOE.roa (raw, json)
Hash identifier:          UBK3whoTtmjBlW42k9HdY1q74buv6Div6+w4vToejRw=
Subject key identifier:   EC:9D:0D:E8:2A:A6:0C:F2:6C:91:7D:5D:FA:5C:2D:28:1D:ED:4C:E1
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       04
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/7J0N6CqmDPJskX1d-lwtKB3tTOE.roa
Signing time:             Tue 05 Sep 2023 05:39:24 +0000
ROA not before:           Tue 05 Sep 2023 05:39:24 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     151366
IP address blocks:        2401:d20:2000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Thu 25 Jan 2024 13:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Sep  5 05:39:24 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=EC9D0DE82AA60CF26C917D5DFA5C2D281DED4CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:a1:5c:ea:31:d8:39:8b:07:94:85:bc:20:
                    0a:18:51:44:7f:84:0f:16:98:cf:a9:16:58:59:8b:
                    49:4c:13:e7:27:0e:c2:e9:82:5d:c2:9e:f5:44:ef:
                    6c:ad:d8:59:ec:11:73:99:c4:27:31:95:b4:fc:a7:
                    9d:9d:2a:2a:b9:d1:15:56:2b:dd:b2:4b:97:1c:de:
                    21:75:4d:88:d5:06:3e:a3:f9:91:d6:b0:e0:b6:e3:
                    f4:c7:f7:f4:19:91:73:6c:0e:80:de:51:10:15:5b:
                    13:33:da:c8:8c:9e:2f:ad:92:86:70:0d:f1:0c:dc:
                    58:62:d3:c2:30:2c:a9:8e:b9:86:e8:83:b6:fa:b9:
                    bf:24:ff:90:3b:1f:67:3b:79:58:a6:1a:44:47:7d:
                    77:8a:a6:b0:e4:5d:7f:b1:ec:5d:45:d6:9e:4c:fa:
                    fb:25:09:d2:c6:fb:ec:b1:b6:1b:47:2b:4f:9e:e1:
                    05:c5:6d:bd:85:7f:2e:f0:ec:9b:62:52:51:31:83:
                    34:a4:9a:f2:f1:c8:67:b0:7c:64:75:8c:0d:2c:1e:
                    1d:7b:c9:e7:74:7b:4d:b5:96:2a:a9:1c:f9:2c:0b:
                    1a:ae:a1:c7:38:07:bb:ee:ba:59:ab:77:8c:44:31:
                    b8:71:ba:02:a7:4c:40:8f:7b:8b:7b:d4:ce:50:44:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9D:0D:E8:2A:A6:0C:F2:6C:91:7D:5D:FA:5C:2D:28:1D:ED:4C:E1
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/7J0N6CqmDPJskX1d-lwtKB3tTOE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:56:d5:94:3c:10:3e:06:99:38:38:ee:a3:5a:84:0e:c9:62:
         8b:f7:af:22:b2:a5:d0:1f:cc:de:90:16:31:0f:48:f3:13:ec:
         4a:4e:ff:ca:7d:7c:ef:6e:5a:4d:84:f4:fb:66:60:e2:d9:70:
         9b:23:96:9e:11:32:4e:ba:85:ac:bb:37:ee:14:ca:f9:23:a0:
         eb:4b:7d:df:33:29:7d:2f:89:d7:16:09:cd:e9:9f:3b:e0:e6:
         16:c4:a4:8e:02:ed:df:d6:63:3a:03:14:e4:7a:ba:3e:89:96:
         70:8a:65:56:93:b3:cb:4d:d2:22:9c:7c:d3:06:53:48:ec:e9:
         49:4f:49:86:94:20:fb:09:03:bd:4f:83:5d:c1:64:d8:78:55:
         49:3a:86:36:6d:8d:86:2b:43:ea:44:0c:65:eb:0d:ee:10:37:
         d7:26:10:92:f9:9c:ca:b6:60:d7:bb:30:4b:26:ba:2a:dc:6d:
         09:76:58:07:42:c2:6f:55:ca:d1:79:45:e1:d5:a5:86:2c:9c:
         e4:cc:b2:a9:fc:61:a1:9f:81:f4:88:97:d7:c4:87:9d:27:4b:
         28:92:ad:9a:52:bb:59:bb:35:4d:95:c5:8a:52:0d:6d:7c:4f:
         e6:4c:30:3f:e8:0d:38:ab:05:d1:08:ac:24:b3:9b:5d:b4:fc:
         8d:fa:08:4e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw
QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTIzMDkwNTA1
MzkyNFoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoRUM5RDBERTgyQUE2MENG
MjZDOTE3RDVERkE1QzJEMjgxREVENENFMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALh6oVzqMdg5iweUhbwgChhRRH+EDxaYz6kWWFmLSUwT5ycOwumC
XcKe9UTvbK3YWewRc5nEJzGVtPynnZ0qKrnRFVYr3bJLlxzeIXVNiNUGPqP5kdaw
4Lbj9Mf39BmRc2wOgN5REBVbEzPayIyeL62ShnAN8QzcWGLTwjAsqY65huiDtvq5
vyT/kDsfZzt5WKYaREd9d4qmsORdf7HsXUXWnkz6+yUJ0sb77LG2G0crT57hBcVt
vYV/LvDsm2JSUTGDNKSa8vHIZ7B8ZHWMDSweHXvJ53R7TbWWKqkc+SwLGq6hxzgH
u+66Wat3jEQxuHG6AqdMQI97i3vUzlBEY2MCAwEAAaOCAiowggImMB0GA1UdDgQW
BBTsnQ3oKqYM8myRfV36XC0oHe1M4TAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq
br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x
X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDIzLzdKME42Q3FtRFBKc2tYMWQtbHd0S0IzdFRPRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQkAQ0gIDANBgkqhkiG9w0BAQsFAAOCAQEAIFbVlDwQPgaZODjuo1qE
Dslii/evIrKl0B/M3pAWMQ9I8xPsSk7/yn18725aTYT0+2Zg4tlwmyOWnhEyTrqF
rLs37hTK+SOg60t93zMpfS+J1xYJzemfO+DmFsSkjgLt39ZjOgMU5Hq6PomWcIpl
VpOzy03SIpx80wZTSOzpSU9JhpQg+wkDvU+DXcFk2HhVSTqGNm2NhitD6kQMZesN
7hA31yYQkvmcyrZg17swSya6KtxtCXZYB0LCb1XK0XlF4dWlhiyc5MyyqfxhoZ+B
9IiX18SHnSdLKJKtmlK7Wbs1TZXFilINbXxP5kwwP+gNOKsF0QisJLObXbT8jfoI
Tg==
-----END CERTIFICATE-----
Generated at Thu Jan 25 18:00:38 2024 by rpki-client on console-fra.rpki-client.org