Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/YJlajz2hesDtWrnNK-9hiY3m798.roa
File:                     YJlajz2hesDtWrnNK-9hiY3m798.roa (raw, json)
Hash identifier:          GR4OGZmA7SeyLQKKtIAk3eCeTm+cJaldCKhaZLKpBZw=
Subject key identifier:   60:99:5A:8F:3D:A1:7A:C0:ED:5A:B9:CD:2B:EF:61:89:8D:E6:EF:DF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       018A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/YJlajz2hesDtWrnNK-9hiY3m798.roa
Signing time:             Fri 07 Jul 2023 04:12:34 +0000
ROA not before:           Fri 07 Jul 2023 04:12:34 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        110.2.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:34 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=60995A8F3DA17AC0ED5AB9CD2BEF61898DE6EFDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:92:be:be:9d:db:19:bb:6f:dc:0b:f6:8e:59:
                    24:a1:f2:b5:79:0b:26:98:04:48:a4:cf:8d:6d:27:
                    fb:d1:e2:fb:78:6d:fe:ef:0a:95:9c:c9:2c:d2:9f:
                    cb:5b:91:08:9a:7f:3a:97:a0:8a:a7:ec:76:f3:34:
                    49:c7:db:59:13:dc:3c:38:6b:9a:45:b9:32:bd:ee:
                    bc:df:79:bc:a2:3d:24:33:a3:93:07:db:37:79:07:
                    be:f2:1e:5d:74:64:70:f3:61:57:ed:a4:75:70:95:
                    0f:57:ee:d4:8e:4b:14:de:2f:f1:18:54:0f:6e:fe:
                    71:5c:25:20:91:3e:d9:76:59:5f:76:18:85:4f:96:
                    71:74:b9:93:65:2a:c7:75:9d:c8:39:a0:c7:a9:99:
                    a9:d3:78:8b:58:c7:6a:a5:5d:3e:80:34:dc:24:b6:
                    0e:08:41:7b:d9:53:0b:33:75:d9:16:e8:4d:8d:dd:
                    46:22:a7:f9:c0:0b:02:48:2f:42:f4:b9:23:fd:1c:
                    83:54:c3:e5:c0:ad:36:41:d4:a2:7c:ef:11:5f:9a:
                    ae:11:42:71:52:c9:ac:30:a3:e9:8d:f1:25:52:0a:
                    f0:9a:63:39:a9:8a:11:33:b8:37:60:83:b6:ff:9e:
                    ee:02:79:12:6f:22:b6:b3:b5:3c:44:78:97:f4:f4:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:99:5A:8F:3D:A1:7A:C0:ED:5A:B9:CD:2B:EF:61:89:8D:E6:EF:DF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/YJlajz2hesDtWrnNK-9hiY3m798.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.2.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8a:5e:8b:ae:c7:ee:0e:e8:b7:42:6c:ca:7d:51:59:7a:be:46:
         05:95:1d:da:ec:de:ff:49:ef:2f:7c:c2:1d:58:e4:83:56:df:
         9c:6b:8f:c9:24:ec:93:71:15:5b:99:64:9b:ad:a3:11:aa:15:
         22:18:d9:73:da:dd:9d:3c:49:cb:97:84:0e:03:d5:93:66:8d:
         38:47:57:c2:a1:47:25:a1:e7:93:90:bc:3d:fd:bc:83:f3:a0:
         8f:fa:28:0f:57:fc:0e:b5:c1:15:a7:0a:83:66:0c:c4:c8:d8:
         20:1e:d1:64:1a:85:6c:64:f7:1b:36:a4:a4:f4:75:eb:70:ff:
         77:b5:ef:28:aa:fe:65:92:5c:d4:ec:18:5b:9f:4c:5c:70:3a:
         6c:51:c0:c0:5c:1b:12:10:df:31:66:a2:5a:16:67:51:77:d6:
         3b:0d:7d:81:ac:c0:cf:77:c3:82:3f:ff:6d:09:35:b6:88:37:
         7d:c2:d2:3e:e5:cd:87:51:a6:ac:7c:7a:2f:cc:77:0a:44:9a:
         3c:77:62:d5:7e:39:8e:41:51:82:f9:e0:3f:cc:19:42:9e:29:
         e1:ed:fb:4c:4d:b0:22:94:b7:66:8f:7c:70:04:5f:55:4f:a3:
         4a:9b:77:e2:c3:54:87:36:ff:03:62:c1:bd:40:61:db:cd:a3:
         21:52:09:f5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDEyMzRaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDYwOTk1QThGM0RBMTdB
QzBFRDVBQjlDRDJCRUY2MTg5OERFNkVGREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHkr6+ndsZu2/cC/aOWSSh8rV5CyaYBEikz41tJ/vR4vt4bf7v
CpWcySzSn8tbkQiafzqXoIqn7HbzNEnH21kT3Dw4a5pFuTK97rzfebyiPSQzo5MH
2zd5B77yHl10ZHDzYVftpHVwlQ9X7tSOSxTeL/EYVA9u/nFcJSCRPtl2WV92GIVP
lnF0uZNlKsd1ncg5oMepmanTeItYx2qlXT6ANNwktg4IQXvZUwszddkW6E2N3UYi
p/nACwJIL0L0uSP9HINUw+XArTZB1KJ87xFfmq4RQnFSyawwo+mN8SVSCvCaYzmp
ihEzuDdgg7b/nu4CeRJvIraztTxEeJf09LY1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUYJlajz2hesDtWrnNK+9hiY3m798wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1lKbGFqejJoZXNEdFdybk5LLTloaVkzbTc5OC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAduAgAwDQYJKoZIhvcNAQELBQADggEBAIpei67H7g7ot0Jsyn1RWXq+RgWV
Hdrs3v9J7y98wh1Y5INW35xrj8kk7JNxFVuZZJutoxGqFSIY2XPa3Z08ScuXhA4D
1ZNmjThHV8KhRyWh55OQvD39vIPzoI/6KA9X/A61wRWnCoNmDMTI2CAe0WQahWxk
9xs2pKT0detw/3e17yiq/mWSXNTsGFufTFxwOmxRwMBcGxIQ3zFmoloWZ1F31jsN
fYGswM93w4I//20JNbaIN33C0j7lzYdRpqx8ei/MdwpEmjx3YtV+OY5BUYL54D/M
GUKeKeHt+0xNsCKUt2aPfHAEX1VPo0qbd+LDVIc2/wNiwb1AYdvNoyFSCfU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org