Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zDGNo4YRvBWjAb_I_o4UJBSNRcQ.roa
File:                     zDGNo4YRvBWjAb_I_o4UJBSNRcQ.roa (raw, json)
Hash identifier:          +8d5zc00cEnm1cPuT2Sfzdn3yyFWkuO+SVLJ35tb1RY=
Subject key identifier:   CC:31:8D:A3:86:11:BC:15:A3:01:BF:C8:FE:8E:14:24:14:8D:45:C4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0592
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zDGNo4YRvBWjAb_I_o4UJBSNRcQ.roa
Signing time:             Thu 27 Jul 2023 16:58:17 +0000
ROA not before:           Thu 27 Jul 2023 16:58:17 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.67.248.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1426 (0x592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:58:17 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=CC318DA38611BC15A301BFC8FE8E1424148D45C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:be:6a:1e:be:c7:2b:ff:00:48:9a:b1:31:
                    50:48:61:60:a2:d3:e2:b4:a7:70:ce:20:ef:87:dc:
                    68:15:82:f1:4e:eb:42:b7:f2:93:1f:63:c4:36:65:
                    4c:77:9d:fb:80:a9:12:14:14:bb:b0:14:fc:c2:38:
                    bc:48:25:66:ae:34:74:0a:04:e9:b5:f3:87:f6:72:
                    c3:b4:2f:26:52:cc:0f:ad:da:e8:cc:d3:2b:94:cf:
                    08:c4:b2:2f:21:77:a8:58:96:b8:a6:6a:79:e9:e1:
                    31:cf:73:4e:3a:a6:63:02:94:8a:47:96:f5:e0:4a:
                    df:96:e8:4f:84:f1:bb:82:af:45:73:6d:0f:fd:44:
                    18:92:21:c2:d7:86:18:68:05:c2:ca:32:49:26:53:
                    3a:7f:ff:a6:e1:2f:7b:3c:2a:1b:fa:db:02:f2:71:
                    f7:d2:2f:47:5a:11:91:e6:92:5c:6f:b2:69:38:5a:
                    b5:ce:cd:af:fa:7a:d2:9a:a5:52:f9:fb:58:64:21:
                    0c:9d:4f:21:d3:95:d2:dc:99:80:71:f0:db:8d:41:
                    2e:24:83:a9:05:96:0d:df:62:34:ff:96:90:77:b9:
                    37:c9:8c:0f:69:1e:81:1a:3f:b3:a4:d7:7e:87:12:
                    97:18:7e:f5:9a:d3:05:9c:f2:55:c4:1f:f9:f9:2f:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:31:8D:A3:86:11:BC:15:A3:01:BF:C8:FE:8E:14:24:14:8D:45:C4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zDGNo4YRvBWjAb_I_o4UJBSNRcQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.67.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:f1:98:f1:17:a0:21:ed:16:90:8b:34:58:da:32:26:d9:
         b0:4b:15:74:de:8e:94:ca:43:06:9b:a4:c1:c3:37:fb:f1:75:
         18:37:a0:6a:0c:b3:96:8e:fc:73:fe:19:2a:80:d8:5a:24:1b:
         2b:41:a4:0f:be:51:dd:ed:46:5f:f4:86:47:b8:3d:ad:c6:5a:
         25:c8:97:53:4d:3a:67:b3:19:f0:e1:4a:ac:a9:22:e8:0e:9a:
         42:b4:6d:ea:db:26:c0:fb:10:38:f3:cc:ad:a2:67:aa:ac:d8:
         6f:e0:e2:5f:7d:79:c7:23:71:2b:5d:79:3d:f0:ac:d5:71:36:
         17:f2:49:67:ae:a8:4f:e3:6e:66:b7:61:c8:7c:28:94:0d:8b:
         86:8b:36:2a:12:16:57:a8:de:57:ed:3f:b5:92:23:f2:7d:5e:
         ec:d3:06:5e:12:46:3a:48:2e:2b:5c:e7:28:80:78:2f:d2:6c:
         4b:de:f2:9b:b5:df:88:aa:5e:91:88:00:65:88:d6:4f:90:b4:
         83:ee:db:0d:18:d3:87:40:83:98:17:ea:ce:f0:69:31:54:6a:
         cf:6d:2c:9f:36:27:a0:81:e9:77:b0:6c:89:53:00:eb:e4:cc:
         50:6d:22:77:6a:41:c5:43:3d:8e:d2:b1:52:ee:6d:61:78:2e:
         42:c4:62:10
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjU4MTdaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKENDMzE4REEzODYxMUJD
MTVBMzAxQkZDOEZFOEUxNDI0MTQ4RDQ1QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKXL5qHr7HK/8ASJqxMVBIYWCi0+K0p3DOIO+H3GgVgvFO60K3
8pMfY8Q2ZUx3nfuAqRIUFLuwFPzCOLxIJWauNHQKBOm184f2csO0LyZSzA+t2ujM
0yuUzwjEsi8hd6hYlrimannp4THPc046pmMClIpHlvXgSt+W6E+E8buCr0VzbQ/9
RBiSIcLXhhhoBcLKMkkmUzp//6bhL3s8Khv62wLycffSL0daEZHmklxvsmk4WrXO
za/6etKapVL5+1hkIQydTyHTldLcmYBx8NuNQS4kg6kFlg3fYjT/lpB3uTfJjA9p
HoEaP7Ok136HEpcYfvWa0wWc8lXEH/n5L9KTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUzDGNo4YRvBWjAb/I/o4UJBSNRcQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3pER05vNFlSdkJXakFiX0lfbzRVSkJTTlJjUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMBQ/gwDQYJKoZIhvcNAQELBQADggEBAJKL8ZjxF6Ah7RaQizRY2jIm2bBL
FXTejpTKQwabpMHDN/vxdRg3oGoMs5aO/HP+GSqA2FokGytBpA++Ud3tRl/0hke4
Pa3GWiXIl1NNOmezGfDhSqypIugOmkK0berbJsD7EDjzzK2iZ6qs2G/g4l99eccj
cStdeT3wrNVxNhfySWeuqE/jbma3Ych8KJQNi4aLNioSFleo3lftP7WSI/J9XuzT
Bl4SRjpILitc5yiAeC/SbEve8pu134iqXpGIAGWI1k+QtIPu2w0Y04dAg5gX6s7w
aTFUas9tLJ82J6CB6XewbIlTAOvkzFBtIndqQcVDPY7SsVLubWF4LkLEYhA=
-----END CERTIFICATE-----
Generated at Sun Jun 30 04:02:48 2024 by rpki-client on console-ams.rpki-client.org