Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6tYfOH19N8k2_5T5mScysmKQ_Ao.roa
File:                     6tYfOH19N8k2_5T5mScysmKQ_Ao.roa (raw, json)
Hash identifier:          5xULeAyYqTOwXIv7CHpqkZiFNQl7BTPCC6+F9rmhzEA=
Subject key identifier:   EA:D6:1F:38:7D:7D:37:C9:36:FF:94:F9:99:27:32:B2:62:90:FC:0A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0279
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6tYfOH19N8k2_5T5mScysmKQ_Ao.roa
Signing time:             Tue 30 May 2023 16:34:22 +0000
ROA not before:           Tue 30 May 2023 16:34:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.24.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:34:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EAD61F387D7D37C936FF94F9992732B26290FC0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a9:67:4a:98:06:0b:33:52:28:4b:94:71:21:
                    38:ff:66:51:5b:26:67:e3:f1:ca:f2:62:c2:b3:b8:
                    d5:91:64:6a:93:fe:c9:79:89:c2:1b:2e:98:95:61:
                    f0:2f:3b:ff:0a:cd:ac:26:11:c6:a2:20:4a:bd:ff:
                    26:f1:46:a5:20:76:2e:b5:25:1b:cd:29:91:bf:8c:
                    74:f3:23:1d:72:c6:6d:82:f3:a1:a8:c7:15:93:c1:
                    98:69:bb:6b:f4:5d:09:6d:f4:ec:99:7b:d2:15:47:
                    37:61:31:d7:17:b9:de:cc:b1:22:30:ef:c2:16:b8:
                    64:bd:bc:25:d8:2f:d6:e6:3e:eb:24:d1:66:72:8f:
                    a7:b1:5a:1b:f6:76:41:df:d0:5f:a4:d5:2b:68:a7:
                    ef:54:0d:aa:1f:0f:8d:8b:a4:98:50:2d:03:1c:1f:
                    99:ef:21:c8:61:0e:58:6e:68:c9:6e:04:9a:b4:ec:
                    e6:bf:94:5e:85:27:ab:53:b7:9b:28:d3:e5:7e:d1:
                    6e:42:ec:ae:e9:7a:fb:83:ff:8d:54:ff:1c:ba:91:
                    43:6d:eb:8b:d2:a9:c6:1b:5d:d4:22:0c:1c:d9:62:
                    03:85:29:dc:c7:b8:b0:a7:b3:a2:eb:d3:18:21:9a:
                    fd:15:b5:e3:a3:20:f1:62:3e:22:dd:31:62:a1:a7:
                    21:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D6:1F:38:7D:7D:37:C9:36:FF:94:F9:99:27:32:B2:62:90:FC:0A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6tYfOH19N8k2_5T5mScysmKQ_Ao.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:1f:4f:61:3a:49:b5:46:60:bc:3e:b0:f8:cc:20:00:41:
         d5:b7:5f:09:00:51:d1:52:08:81:67:5e:3e:61:00:45:72:a1:
         0f:a6:91:aa:9f:8e:76:64:85:60:94:ec:2f:03:e5:a0:00:fb:
         a0:85:da:e9:0b:f6:b5:e2:e2:df:73:1f:d1:56:23:b2:0b:40:
         ec:2e:75:89:79:69:ba:b5:c1:5f:42:73:10:76:dc:9c:c5:72:
         f4:cc:dd:67:6d:fe:a2:ab:57:64:18:26:ca:a7:40:b3:e4:bf:
         25:09:37:17:3d:45:6c:d3:e0:76:d3:a2:94:52:7b:3f:6f:10:
         fd:6b:7f:44:77:a7:67:3c:4a:36:33:56:ba:2e:66:f8:ea:cb:
         c3:14:03:ec:7d:5b:5a:39:24:78:b6:ae:7b:ff:6f:19:fc:d0:
         f7:a0:70:8e:d0:5e:ee:43:0c:fd:7a:0a:d0:08:b5:82:4f:05:
         07:77:75:dc:bc:48:38:9b:1c:fb:0e:94:f7:9b:76:26:17:c2:
         92:c8:56:f1:3f:3b:87:4a:52:7d:a5:94:20:3f:db:b2:79:ca:
         e3:67:61:ab:9b:9f:a0:b8:fd:a7:61:27:37:9f:d5:0b:e9:5d:
         a5:5f:5a:6a:1c:95:db:45:f9:fd:5e:24:b5:14:99:89:2c:f4:
         7f:2b:25:28
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjM0MjJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEVBRDYxRjM4N0Q3RDM3
QzkzNkZGOTRGOTk5MjczMkIyNjI5MEZDMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnqWdKmAYLM1IoS5RxITj/ZlFbJmfj8cryYsKzuNWRZGqT/sl5
icIbLpiVYfAvO/8KzawmEcaiIEq9/ybxRqUgdi61JRvNKZG/jHTzIx1yxm2C86Go
xxWTwZhpu2v0XQlt9OyZe9IVRzdhMdcXud7MsSIw78IWuGS9vCXYL9bmPusk0WZy
j6exWhv2dkHf0F+k1Stop+9UDaofD42LpJhQLQMcH5nvIchhDlhuaMluBJq07Oa/
lF6FJ6tTt5so0+V+0W5C7K7pevuD/41U/xy6kUNt64vSqcYbXdQiDBzZYgOFKdzH
uLCns6Lr0xghmv0VteOjIPFiPiLdMWKhpyG9AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU6tYfOH19N8k2/5T5mScysmKQ/AowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzZ0WWZPSDE5TjhrMl81VDVtU2N5c21LUV9Bby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANuoxgwDQYJKoZIhvcNAQELBQADggEBACP3H09hOkm1RmC8PrD4zCAAQdW3
XwkAUdFSCIFnXj5hAEVyoQ+mkaqfjnZkhWCU7C8D5aAA+6CF2ukL9rXi4t9zH9FW
I7ILQOwudYl5abq1wV9CcxB23JzFcvTM3Wdt/qKrV2QYJsqnQLPkvyUJNxc9RWzT
4HbTopRSez9vEP1rf0R3p2c8SjYzVrouZvjqy8MUA+x9W1o5JHi2rnv/bxn80Peg
cI7QXu5DDP16CtAItYJPBQd3ddy8SDibHPsOlPebdiYXwpLIVvE/O4dKUn2llCA/
27J5yuNnYaubn6C4/adhJzef1QvpXaVfWmocldtF+f1eJLUUmYks9H8rJSg=
-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org