Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IoEt_W0opWW-Bs_CSoNGVGsh3PM.roa
File:                     IoEt_W0opWW-Bs_CSoNGVGsh3PM.roa (raw, json)
Hash identifier:          XdeWIjOs6GKoVihQNfqML1w6TQSEM3epUH9RRjDtfEw=
Subject key identifier:   22:81:2D:FD:6D:28:A5:65:BE:06:CF:C2:4A:83:46:54:6B:21:DC:F3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0587
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IoEt_W0opWW-Bs_CSoNGVGsh3PM.roa
Signing time:             Thu 27 Jul 2023 16:58:13 +0000
ROA not before:           Thu 27 Jul 2023 16:58:13 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.158.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415 (0x587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:58:13 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=22812DFD6D28A565BE06CFC24A8346546B21DCF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:b3:e3:4f:e9:3d:4b:ba:79:03:56:1a:8b:
                    8a:e3:61:8e:33:22:cf:12:54:11:f3:58:f6:4d:49:
                    35:bf:97:10:95:06:f7:7b:55:dc:ef:bd:45:42:d5:
                    ba:e0:b8:d5:4e:ef:9c:cc:70:31:e2:76:0a:3f:86:
                    fb:19:e8:1e:ae:a7:b2:a4:8e:08:48:6d:92:54:be:
                    18:83:02:c0:b8:ef:d3:0f:ea:81:0f:f0:60:40:21:
                    ca:0c:59:6b:64:ca:37:a3:21:76:26:7c:de:9a:35:
                    8a:5d:83:ce:52:94:c2:ce:90:89:2d:2d:a8:2c:b3:
                    27:d4:e8:c5:1f:3e:e1:7a:4c:10:13:3e:e1:75:c2:
                    21:c6:ac:a1:33:f6:f2:31:b7:ff:3b:77:be:37:c3:
                    b6:09:60:0f:1a:1f:d4:a7:c2:ee:06:3f:ba:f3:66:
                    23:4a:00:17:88:87:f8:27:4a:38:df:91:bb:97:c3:
                    3b:27:e3:f1:76:28:6e:6e:fc:59:15:d3:3d:6b:7d:
                    f9:26:d5:2f:b8:5b:b6:82:13:a6:d6:4d:25:ae:e5:
                    28:54:58:b8:1f:18:e3:b1:f1:33:21:f0:62:9c:d4:
                    45:b1:c5:d9:a8:e0:3a:82:bd:b4:6e:8a:8c:7f:15:
                    0b:4f:d9:b6:57:53:27:c2:b2:15:1b:cf:8b:f9:f5:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:81:2D:FD:6D:28:A5:65:BE:06:CF:C2:4A:83:46:54:6B:21:DC:F3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IoEt_W0opWW-Bs_CSoNGVGsh3PM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:a8:8a:cb:cd:1c:79:d0:24:11:b5:f9:ea:f6:35:c7:80:ab:
         fa:6d:bc:60:76:e5:09:b3:fa:14:ef:c7:a4:71:10:bd:27:19:
         01:fe:02:29:3b:88:b5:d7:f4:d5:87:74:34:df:68:f3:0c:fb:
         8e:22:bd:a7:6d:7e:f0:7a:0c:69:d5:a6:c7:04:08:dd:e1:d4:
         ac:8c:1d:8b:03:43:f2:00:b0:58:8f:f9:7c:69:55:12:ed:5c:
         b9:3b:94:db:d5:cf:bc:b8:7d:1e:22:1a:77:97:72:08:44:5c:
         8a:ac:48:27:7a:de:f3:ab:e4:bc:71:5c:b1:40:c3:07:a2:fd:
         c4:51:fa:b4:cb:41:ee:3c:69:90:0d:7f:6a:d0:0e:20:ce:d1:
         64:0b:b0:70:27:32:9a:77:5a:df:9c:9e:20:8c:92:0d:7f:27:
         ca:3f:1f:12:dc:14:15:05:10:56:4a:bb:63:eb:a6:be:99:23:
         41:47:92:59:82:73:3e:54:65:ba:4f:57:61:e3:c7:2d:75:91:
         af:3b:30:50:11:ed:b1:27:9b:92:2a:47:95:18:4d:78:12:b6:
         ab:5b:11:7e:0a:88:0b:2e:32:de:4c:aa:b0:5b:a9:49:c1:97:
         89:8f:8b:7b:b1:a1:30:7a:30:89:5b:37:78:b3:a7:e7:2a:72:
         f1:8b:41:2b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjU4MTNaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDIyODEyREZENkQyOEE1
NjVCRTA2Q0ZDMjRBODM0NjU0NkIyMURDRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/o7PjT+k9S7p5A1Yai4rjYY4zIs8SVBHzWPZNSTW/lxCVBvd7
VdzvvUVC1brguNVO75zMcDHidgo/hvsZ6B6up7KkjghIbZJUvhiDAsC479MP6oEP
8GBAIcoMWWtkyjejIXYmfN6aNYpdg85SlMLOkIktLagssyfU6MUfPuF6TBATPuF1
wiHGrKEz9vIxt/87d743w7YJYA8aH9Snwu4GP7rzZiNKABeIh/gnSjjfkbuXwzsn
4/F2KG5u/FkV0z1rffkm1S+4W7aCE6bWTSWu5ShUWLgfGOOx8TMh8GKc1EWxxdmo
4DqCvbRuiox/FQtP2bZXUyfCshUbz4v59ZcDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIoEt/W0opWW+Bs/CSoNGVGsh3PMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0lvRXRfVzBvcFdXLUJzX0NTb05HVkdzaDNQTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABunoEwDQYJKoZIhvcNAQELBQADggEBAKSoisvNHHnQJBG1+er2NceAq/pt
vGB25Qmz+hTvx6RxEL0nGQH+Aik7iLXX9NWHdDTfaPMM+44ivadtfvB6DGnVpscE
CN3h1KyMHYsDQ/IAsFiP+XxpVRLtXLk7lNvVz7y4fR4iGneXcghEXIqsSCd63vOr
5LxxXLFAwwei/cRR+rTLQe48aZANf2rQDiDO0WQLsHAnMpp3Wt+cniCMkg1/J8o/
HxLcFBUFEFZKu2Prpr6ZI0FHklmCcz5UZbpPV2Hjxy11ka87MFAR7bEnm5IqR5UY
TXgStqtbEX4KiAsuMt5MqrBbqUnBl4mPi3uxoTB6MIlbN3izp+cqcvGLQSs=
-----END CERTIFICATE-----
Generated at Sun Jun 30 04:12:19 2024 by rpki-client on console-fra.rpki-client.org