Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uRMJm_3_qPeP9HwaXR8xUY3sOYU.roa
File:                     uRMJm_3_qPeP9HwaXR8xUY3sOYU.roa (raw, json)
Hash identifier:          IrrQaz7PGer2snEHHfxuryXEJqR9HQlzuIaToYEhUFw=
Subject key identifier:   B9:13:09:9B:FD:FF:A8:F7:8F:F4:7C:1A:5D:1F:31:51:8D:EC:39:85
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       021D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uRMJm_3_qPeP9HwaXR8xUY3sOYU.roa
Signing time:             Tue 30 May 2023 16:30:28 +0000
ROA not before:           Tue 30 May 2023 16:30:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.73.24.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:30:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B913099BFDFFA8F78FF47C1A5D1F31518DEC3985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:d0:21:2b:f6:f9:2b:4d:22:9c:7f:94:20:
                    5b:fb:22:e5:d6:f8:ef:26:80:f2:48:92:7e:71:97:
                    23:87:15:ce:2f:3e:ed:1a:a0:46:9e:d4:df:4b:a5:
                    b5:3d:b3:bc:51:d4:24:2e:9e:59:3c:ce:4c:52:a4:
                    2c:24:5c:6a:49:23:b0:c7:11:57:c1:99:ed:d5:df:
                    8e:d5:83:68:3c:b4:76:dd:6e:e6:01:38:a1:42:06:
                    b7:e0:08:75:d8:39:93:a9:5a:02:74:b3:d7:f5:65:
                    bc:ef:3d:e4:b1:4c:a9:43:6f:c5:07:73:87:75:71:
                    82:5a:4a:50:36:e3:5d:b9:07:e4:34:0a:bd:ed:11:
                    36:38:77:65:93:d2:f0:6f:30:7a:0b:03:d5:41:19:
                    7a:c4:46:02:99:24:ca:e0:da:b0:26:cb:ba:0c:2f:
                    68:0d:e5:b6:58:3c:c6:c6:c6:8a:42:46:42:01:e8:
                    ee:61:38:c1:eb:1f:3a:e4:c5:76:e1:11:4a:57:06:
                    2e:8e:c2:4a:77:ab:e0:9b:c1:7d:05:a1:16:d3:87:
                    c4:c7:0a:ed:0c:79:4c:a4:e6:11:dd:d1:6a:4c:05:
                    c7:96:78:dc:b0:3a:91:bd:b1:88:c3:6a:f5:50:b1:
                    72:fe:61:5f:e6:9e:ab:0f:3a:4c:f9:96:b8:d5:8c:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:13:09:9B:FD:FF:A8:F7:8F:F4:7C:1A:5D:1F:31:51:8D:EC:39:85
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uRMJm_3_qPeP9HwaXR8xUY3sOYU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:d8:06:f0:45:e3:07:b7:ec:22:72:ea:d8:59:b8:91:b0:bd:
         d6:1f:2a:c3:3c:75:bb:3d:dd:17:04:32:9a:4b:3f:0a:5e:bf:
         c2:94:b3:00:47:2f:45:a7:18:a3:9e:13:f2:59:b5:83:ee:ef:
         00:9c:48:2c:c6:17:45:9a:15:63:a8:3b:3a:68:92:54:9f:10:
         22:eb:72:35:59:de:a7:3a:83:5f:79:28:4d:75:08:20:78:b6:
         2e:6c:a5:23:8c:90:95:0e:de:c4:7d:37:90:0c:76:e0:c1:17:
         d4:e4:1d:56:37:fe:2e:c6:a0:d0:c1:26:49:3d:aa:e4:a4:10:
         df:d9:7b:d8:e7:0d:d4:59:87:bd:89:de:22:d6:48:18:d6:0d:
         36:af:30:f1:e7:7e:20:8e:1a:bd:5c:1f:cf:78:17:60:94:24:
         79:2c:f9:01:ce:bc:e7:84:d3:4c:e0:9e:15:df:22:81:91:fc:
         d5:90:29:13:ad:3a:8d:f5:c5:6d:5f:f8:16:89:28:f0:0d:c4:
         1d:29:70:70:09:80:c1:b5:a3:55:88:81:bc:5a:4b:95:8b:e4:
         e6:55:10:94:6f:74:e7:cc:0f:98:70:3c:c1:4c:3a:72:88:15:
         67:24:4b:bb:bb:94:4b:89:b3:69:f5:4c:d4:65:1e:2f:ad:d2:
         30:12:bc:3a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjMwMjhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEI5MTMwOTlCRkRGRkE4
Rjc4RkY0N0MxQTVEMUYzMTUxOERFQzM5ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC17dAhK/b5K00inH+UIFv7IuXW+O8mgPJIkn5xlyOHFc4vPu0a
oEae1N9LpbU9s7xR1CQunlk8zkxSpCwkXGpJI7DHEVfBme3V347Vg2g8tHbdbuYB
OKFCBrfgCHXYOZOpWgJ0s9f1ZbzvPeSxTKlDb8UHc4d1cYJaSlA24125B+Q0Cr3t
ETY4d2WT0vBvMHoLA9VBGXrERgKZJMrg2rAmy7oML2gN5bZYPMbGxopCRkIB6O5h
OMHrHzrkxXbhEUpXBi6Owkp3q+CbwX0FoRbTh8THCu0MeUyk5hHd0WpMBceWeNyw
OpG9sYjDavVQsXL+YV/mnqsPOkz5lrjVjNPpAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUuRMJm/3/qPeP9HwaXR8xUY3sOYUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3VSTUptXzNfcVBlUDlId2FYUjh4VVkzc09ZVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK3SRgwDQYJKoZIhvcNAQELBQADggEBAIrYBvBF4we37CJy6thZuJGwvdYf
KsM8dbs93RcEMppLPwpev8KUswBHL0WnGKOeE/JZtYPu7wCcSCzGF0WaFWOoOzpo
klSfECLrcjVZ3qc6g195KE11CCB4ti5spSOMkJUO3sR9N5AMduDBF9TkHVY3/i7G
oNDBJkk9quSkEN/Ze9jnDdRZh72J3iLWSBjWDTavMPHnfiCOGr1cH894F2CUJHks
+QHOvOeE00zgnhXfIoGR/NWQKROtOo31xW1f+BaJKPANxB0pcHAJgMG1o1WIgbxa
S5WL5OZVEJRvdOfMD5hwPMFMOnKIFWckS7u7lEuJs2n1TNRlHi+t0jASvDo=
-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org