Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/Ro_8HF8_0F8p-oe0ylMX8pEdV_g.roa
File:                     Ro_8HF8_0F8p-oe0ylMX8pEdV_g.roa (raw, json)
Hash identifier:          zTZmiBhCWYVo5FCidgZohc9ySPDjRAxjl24GrYRw14M=
Subject key identifier:   46:8F:FC:1C:5F:3F:D0:5F:29:FA:87:B4:CA:53:17:F2:91:1D:57:F8
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       C0
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/Ro_8HF8_0F8p-oe0ylMX8pEdV_g.roa
Signing time:             Sat 01 Jul 2023 01:30:24 +0000
ROA not before:           Sat 01 Jul 2023 01:30:24 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9607
IP address blocks:        124.147.24.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Jul  1 01:30:24 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=468FFC1C5F3FD05F29FA87B4CA5317F2911D57F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a3:09:c5:6e:17:c1:aa:a0:8e:78:25:ff:a6:
                    81:b4:a2:6b:91:6d:c8:f3:be:bb:2c:a9:7a:43:52:
                    f8:1a:c7:9c:01:08:58:ae:8c:bc:fd:00:db:bf:e1:
                    f6:d0:74:58:3e:d1:13:1c:39:69:a9:b8:1a:2d:3b:
                    5e:61:f8:51:1e:1e:5d:ce:f2:aa:78:bf:4e:78:88:
                    39:5e:54:9d:6c:93:e9:25:fc:31:a1:6f:8d:1b:17:
                    b5:b5:f1:d6:74:bb:80:9d:ea:ce:be:15:4f:28:b8:
                    ad:ac:13:48:1d:53:d3:ad:5f:53:74:9f:42:ba:28:
                    64:20:f1:32:f0:8d:69:95:96:71:1c:c0:7d:33:04:
                    7b:53:54:58:b2:b5:f4:14:b2:c5:97:ff:02:9d:e6:
                    7e:aa:34:c2:33:a7:c5:e3:91:97:8e:fe:a9:54:b6:
                    46:ff:47:3c:a9:fb:94:d4:55:7f:e7:e3:41:64:40:
                    0b:ca:79:65:21:54:e7:a6:4c:a5:66:26:0c:00:d3:
                    b6:6f:a3:e0:84:87:d3:b4:47:33:da:e7:61:d0:9a:
                    a0:61:7f:d5:ed:e5:6a:5f:28:eb:fc:8b:7e:2c:3e:
                    4f:02:19:ba:5e:89:4f:8b:4f:23:11:20:41:d8:a6:
                    70:e1:00:2e:e1:bc:d9:b8:55:0f:c8:f3:13:0b:1a:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8F:FC:1C:5F:3F:D0:5F:29:FA:87:B4:CA:53:17:F2:91:1D:57:F8
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/Ro_8HF8_0F8p-oe0ylMX8pEdV_g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:6d:2b:d8:61:db:25:07:c2:a2:4e:aa:2c:13:43:f7:f9:
         8f:06:ec:4c:f1:b6:76:5f:23:5d:b2:ba:95:bf:1b:5c:e8:98:
         ec:08:fc:60:f9:ac:66:a6:a1:4a:78:6e:b2:5c:fa:79:f2:cd:
         a6:c6:22:61:a1:a8:c9:8c:ae:f8:ff:6a:da:74:33:17:12:cc:
         88:85:9f:5b:ed:c2:bb:29:60:3a:f3:f4:f5:01:a7:e3:9c:23:
         f2:aa:ad:b4:28:68:d8:35:f5:c3:34:23:79:f3:47:46:16:22:
         52:da:b6:10:0a:f3:52:6f:1d:6b:53:ac:62:5e:db:ce:ee:e5:
         d8:fe:ef:c6:1d:9f:60:70:8d:4e:6a:62:89:c9:0e:ae:81:18:
         89:f4:93:22:bb:ae:e8:52:c7:cd:58:ef:43:5f:7b:21:62:62:
         b3:75:aa:37:7a:14:5a:6b:3f:1e:af:04:13:4e:7a:20:78:fb:
         a8:32:c6:45:cf:2a:34:a0:d3:fa:f9:8e:c5:21:61:47:19:e3:
         f9:a9:4e:d1:67:5d:4c:5a:72:31:ab:b2:67:bd:53:82:8f:33:
         ea:84:7b:bb:a0:1f:ea:27:33:4d:8b:30:ca:a2:57:d2:50:82:
         dc:e9:79:9d:01:73:d7:35:b3:fe:76:fd:06:57:8f:02:44:89:
         cc:00:d0:33
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMzA3MDEw
MTMwMjRaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDQ2OEZGQzFDNUYzRkQw
NUYyOUZBODdCNENBNTMxN0YyOTExRDU3RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMownFbhfBqqCOeCX/poG0omuRbcjzvrssqXpDUvgax5wBCFiu
jLz9ANu/4fbQdFg+0RMcOWmpuBotO15h+FEeHl3O8qp4v054iDleVJ1sk+kl/DGh
b40bF7W18dZ0u4Cd6s6+FU8ouK2sE0gdU9OtX1N0n0K6KGQg8TLwjWmVlnEcwH0z
BHtTVFiytfQUssWX/wKd5n6qNMIzp8XjkZeO/qlUtkb/Rzyp+5TUVX/n40FkQAvK
eWUhVOemTKVmJgwA07Zvo+CEh9O0RzPa52HQmqBhf9Xt5WpfKOv8i34sPk8CGbpe
iU+LTyMRIEHYpnDhAC7hvNm4VQ/I8xMLGp9jAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQURo/8HF8/0F8p+oe0ylMX8pEdV/gwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L1JvXzhIRjhfMEY4cC1vZTB5bE1YOHBFZFZfZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJ8kxgwDQYJKoZIhvcNAQELBQADggEBAB/7bSvYYdslB8KiTqosE0P3+Y8G
7EzxtnZfI12yupW/G1zomOwI/GD5rGamoUp4brJc+nnyzabGImGhqMmMrvj/atp0
MxcSzIiFn1vtwrspYDrz9PUBp+OcI/KqrbQoaNg19cM0I3nzR0YWIlLathAK81Jv
HWtTrGJe287u5dj+78Ydn2BwjU5qYonJDq6BGIn0kyK7ruhSx81Y70NfeyFiYrN1
qjd6FFprPx6vBBNOeiB4+6gyxkXPKjSg0/r5jsUhYUcZ4/mpTtFnXUxacjGrsme9
U4KPM+qEe7ugH+onM02LMMqiV9JQgtzpeZ0Bc9c1s/52/QZXjwJEicwA0DM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org