Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tQ8xDT_5DdZ-Vdrzta1wHXgSirs.roa
File:                     tQ8xDT_5DdZ-Vdrzta1wHXgSirs.roa (raw, json)
Hash identifier:          dOrVKOh7cRqSji5QA5rfifs0wqgTxJBcPGGVEKPWmDI=
Subject key identifier:   B5:0F:31:0D:3F:F9:0D:D6:7E:55:DA:F3:B5:AD:70:1D:78:12:8A:BB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0584
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tQ8xDT_5DdZ-Vdrzta1wHXgSirs.roa
Signing time:             Thu 27 Jul 2023 16:58:13 +0000
ROA not before:           Thu 27 Jul 2023 16:58:13 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        183.73.26.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:58:13 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=B50F310D3FF90DD67E55DAF3B5AD701D78128ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e0:48:fa:38:75:e0:15:14:bf:03:a5:2f:41:
                    67:b9:e5:11:4f:5b:7f:b2:01:1a:1a:b0:42:c3:5f:
                    36:d9:ad:76:a4:ce:20:96:10:eb:47:6a:cc:cb:92:
                    2a:eb:df:9a:5c:de:74:a1:1c:21:86:3c:c4:96:e0:
                    ee:a3:fd:70:24:b7:ff:d6:0a:26:ba:af:c6:6b:4e:
                    9f:6e:4b:88:1d:5b:8c:73:70:ee:ce:81:80:54:24:
                    45:59:41:d2:13:d7:2b:49:3c:f2:e2:80:35:4e:06:
                    02:0e:b2:de:8a:10:ae:2e:f2:6f:a2:3b:b8:ce:d6:
                    e7:6e:bc:a3:ed:eb:5d:9d:8f:cb:6f:a1:d2:42:5d:
                    11:eb:7d:64:63:8b:2e:3d:f0:9e:da:f4:c5:af:94:
                    75:7e:8c:8c:6b:42:4a:bc:04:f4:e2:81:09:23:d0:
                    0a:dc:15:42:ba:c3:b4:b5:4e:53:da:e7:65:8c:0a:
                    6d:b6:64:55:94:67:c9:94:08:3a:e3:66:71:90:40:
                    bc:d7:96:75:11:22:c8:ff:34:f3:bd:5a:f5:ae:3a:
                    e6:1d:a4:5f:0e:ef:f9:04:f6:28:bb:7d:d2:5b:95:
                    9f:85:a5:87:51:a6:29:7d:2e:31:63:41:3d:3d:c0:
                    0e:95:0b:cd:01:67:35:be:d8:08:a6:84:41:22:fe:
                    e5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0F:31:0D:3F:F9:0D:D6:7E:55:DA:F3:B5:AD:70:1D:78:12:8A:BB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tQ8xDT_5DdZ-Vdrzta1wHXgSirs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:55:1d:fc:04:20:da:6a:f4:7b:df:f3:3c:37:4f:93:8d:94:
         56:af:b2:0f:58:0a:33:6c:7c:b4:59:03:a3:e6:3a:34:ff:a3:
         19:28:f2:37:cc:4d:ec:74:41:f4:05:e1:6e:90:03:8d:d2:17:
         e0:0d:04:bd:cd:3b:5d:1a:94:c2:c1:e8:e1:e4:97:fc:4f:b1:
         58:1a:81:d5:e5:96:e2:5e:40:db:49:87:b7:8c:e6:04:0c:a5:
         2f:93:36:69:04:5f:bf:9f:1c:5a:62:dc:de:a6:3e:96:91:d5:
         d7:c8:75:f6:82:9e:83:60:4b:fe:52:40:3b:52:db:4a:7d:1b:
         e4:10:bf:c8:4a:ef:08:e8:02:59:c3:44:cb:cc:97:14:02:e5:
         08:fe:1b:3b:ee:b2:42:6b:b2:57:a9:ef:d3:b4:bf:84:72:24:
         a0:a1:5f:eb:ee:b9:b8:44:40:9b:86:bc:4e:8b:c4:9a:99:ef:
         1c:fa:c3:8f:dc:df:ea:1d:2f:17:6d:bf:cf:97:bd:fd:ef:9f:
         ec:fa:2e:77:2a:0c:e2:15:42:88:57:c4:b9:b9:99:41:d1:ad:
         fd:e5:be:c1:bb:5b:b8:59:c3:1c:7e:ba:7b:bb:5e:c0:b0:c0:
         25:7e:1c:1e:03:4c:b1:57:1e:47:68:08:8e:9c:91:31:7f:59:
         ad:ed:c0:94
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjU4MTNaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEI1MEYzMTBEM0ZGOTBE
RDY3RTU1REFGM0I1QUQ3MDFENzgxMjhBQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDy4Ej6OHXgFRS/A6UvQWe55RFPW3+yARoasELDXzbZrXakziCW
EOtHaszLkirr35pc3nShHCGGPMSW4O6j/XAkt//WCia6r8ZrTp9uS4gdW4xzcO7O
gYBUJEVZQdIT1ytJPPLigDVOBgIOst6KEK4u8m+iO7jO1uduvKPt612dj8tvodJC
XRHrfWRjiy498J7a9MWvlHV+jIxrQkq8BPTigQkj0ArcFUK6w7S1TlPa52WMCm22
ZFWUZ8mUCDrjZnGQQLzXlnURIsj/NPO9WvWuOuYdpF8O7/kE9ii7fdJblZ+FpYdR
pil9LjFjQT09wA6VC80BZzW+2AimhEEi/uUbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUtQ8xDT/5DdZ+Vdrzta1wHXgSirswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3RROHhEVF81RGRaLVZkcnp0YTF3SFhnU2lycy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAG3SRowDQYJKoZIhvcNAQELBQADggEBANFVHfwEINpq9Hvf8zw3T5ONlFav
sg9YCjNsfLRZA6PmOjT/oxko8jfMTex0QfQF4W6QA43SF+ANBL3NO10alMLB6OHk
l/xPsVgagdXlluJeQNtJh7eM5gQMpS+TNmkEX7+fHFpi3N6mPpaR1dfIdfaCnoNg
S/5SQDtS20p9G+QQv8hK7wjoAlnDRMvMlxQC5Qj+GzvuskJrslep79O0v4RyJKCh
X+vuubhEQJuGvE6LxJqZ7xz6w4/c3+odLxdtv8+Xvf3vn+z6LncqDOIVQohXxLm5
mUHRrf3lvsG7W7hZwxx+unu7XsCwwCV+HB4DTLFXHkdoCI6ckTF/Wa3twJQ=
-----END CERTIFICATE-----
Generated at Sun Jun 30 04:02:48 2024 by rpki-client on console-ams.rpki-client.org